Windows 11 home: Seo Shell-Benachrichtigungssymbol kann nicht entfernt werden

Chris0079 · 27.04.2024, 10:08

Ich habe das Problem, dass bei jedem PC-Neustart die Fehlermeldung "Seo Shell-Benachrichtigungssymbol kann nicht entfernt werden" angezeigt wird. Wie ich hier im Forum gelesen habe, ist das kein unbekanntes Problem. Trotzdem komme ich mit meinen normalen Anti-Programmen nicht weiter und brauche eure Hilfe. Leider weiß ich auch nicht, wo ich mir das Problem eingefangen habe...
Wie andere User dass schon gemacht haben, habe ich auch das Programm FRST64 laufen lassen und folgende Log-Dateien erhalten:

Frst

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 19.04.2024 01
durchgeführt von awg-p (Administrator) auf PLANIG (HP HP All-in-One Desktop 27-cr0xxx) (27-04-2024 11:01:47)
Gestartet von C:\Users\awg-p\Desktop\FRST64.exe
Geladene Profile: awg-p
Plattform: Microsoft Windows 11 Home Version 23H2 22631.3447 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\amdow.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe <6>
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\BridgeCommunication.exe <2>
(DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\atieclxx.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\win32\HP.ContextAware.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(explorer.exe ->) (BINARYLABS LIMITED -> Binarylabs LTD) C:\Users\awg-p\AppData\Roaming\BitCleaner\BitCleaner Tasker.exe
(explorer.exe ->) (Lavasoft Software Canada Inc. -> Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <19>
(SECOMN64.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOCL64.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\atiesrxx.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_c3ef1d31421e9aea\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\SysInfoCap.exe
(services.exe ->) (Lavasoft Software Canada Inc. -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\wps\1.16.194.1\mc-fw-host.exe <2>
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\MpDefenderCoreService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe <2>
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPEnhance_1.3.9.0_x64__v10z8vjag6ke6\Win32\HPEnhancedLighting.Bg.exe
(svchost.exe ->) (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) C:\Users\awg-p\AppData\Roaming\SEO\SEO.exe
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\wps\1.16.194.1\neo\mc-neo-host.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileCoAuth.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_5001.95.533.0_x64__8wekyb3d8bbwe\PushNotificationsLongRunningTask.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [539152 2024-04-26] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\Run: [MicrosoftEdgeAutoLaunch_ED77CFC3E4CF64C17B3D9770088A7CBF] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4082112 2024-04-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [3306400 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [3426520 2024-02-23] (Lavasoft Software Canada Inc. -> Lavasoft) <==== ACHTUNG
Startup: C:\Users\awg-p\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BitCleaner Tasker.lnk [2024-02-23] <==== ACHTUNG
ShortcutTarget: BitCleaner Tasker.lnk -> C:\Users\awg-p\AppData\Roaming\BitCleaner\BitCleaner Tasker.exe (BINARYLABS LIMITED -> Binarylabs LTD) <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {3343565B-1030-4748-808A-EC02E07FDF7E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [703536 2024-03-25] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {544776CD-BEDD-42F9-8DC4-42C6EB604DF5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2024-03-25] (HP Inc. -> HP Inc.)
Task: {359609F1-4D9B-4DB0-95F7-C3E4788FACFC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-03-25] (HP Inc. -> HP Inc.)
Task: {C9B6A68A-74B1-4C06-8FA6-D91E92EF36D7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-03-25] (HP Inc. -> HP Inc.)
Task: {4241405A-317D-4DDC-867D-C7FA5C4FFCC0} - System32\Tasks\HP\Consent Manager Launcher => C:\windows\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {EA80565A-8DE2-4B71-A039-EB66C0C44E92} - System32\Tasks\McAfee\WPS\amwebapitriggertask => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {E8FE433D-D34E-4CBA-9C2B-683B6EA2A259} - System32\Tasks\McAfee\WPS\AntiTrackerTask => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {4AE432F4-AD19-4B71-BA83-A2389B19C13B} - System32\Tasks\McAfee\WPS\DAD.WPS.Execute.Updates => C:\Program Files\McAfee\wps\1.16.194.1\dad\3.17.7\mc-dad.exe [2682016 2024-02-28] (McAfee, LLC -> McAfee, LLC)
Task: {2CD8236F-8F41-4668-8E50-345FD01405B1} - System32\Tasks\McAfee\WPS\datupdatetask => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {079DC999-CECD-4EBB-8F63-5D07903C02EE} - System32\Tasks\McAfee\WPS\McAfee Sustainability => C:\Program Files\McAfee\wps\1.16.194.1\sustainability\mc-sustainability.exe [945048 2024-04-17] (McAfee, LLC -> McAfee, LLC)
Task: {34AB7254-BDB1-4730-9BB8-028436FC33B4} - System32\Tasks\McAfee\WPS\mcpcoscanner => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {D030242F-FC2D-432F-9B05-813985514614} - System32\Tasks\McAfee\WPS\NGMCadence => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {17DE11E2-547A-47CB-87C9-FAD5B41817BA} - System32\Tasks\McAfee\WPS\odsscheduledtask => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {FFA9DA14-4576-4B6A-98D1-D1A8B05199CA} - System32\Tasks\McAfee\WPS\systemrebootedtask => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {1513AD5C-31AD-4E66-94C6-D365C6FDBCF5} - System32\Tasks\McAfee\WPS\tracker_remover => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {42B89CB2-AC82-4761-A943-46D4DEF10FDD} - System32\Tasks\McAfee\wps\Update => {81A7CB63-BB07-4DAD-8E72-07B3A9BB08E2} C:\Program Files\McAfee\wps\1.16.194.1\mc-update.exe [3320728 2024-04-17] (McAfee, LLC -> McAfee, LLC)
Task: {5090F33B-CD32-46BF-9396-97A254247F76} - System32\Tasks\McAfee\WPS\WPSPush => \\?\C:\Program Files\McAfee\wps\1.16.194.1\mc-wns-client\mc-wns-client.exe [903440 2024-04-17] (McAfee, LLC -> )
Task: {165AEAAD-8E52-4BE4-A4EC-A396C8AE03B8} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21916864 2024-02-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {1A6C06C7-E7B6-4DF3-92A4-32679A3B8A49} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21916864 2024-02-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0D5E5F4-7ED3-4B3E-8AB8-C306B4192D93} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141384 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {10DEF74D-2C15-4B2B-BFCD-748C2EF90102} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141384 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {894A3C7F-0EE1-4790-9E17-F8038C86A1C4} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3285610310-1678739213-2996767195-1003 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [673696 2024-04-26] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {B0291056-CE7D-431E-8A9F-E79A2A321A2C} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34208 2024-04-26] (Mozilla Corporation -> Mozilla Foundation)
Task: {6A886D91-DACC-4A82-9E59-4777AF5F0A37} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206512 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {249785ED-6CE0-420E-A636-BD140E97DA3A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3285610310-1678739213-2996767195-1003 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206512 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {824C5B62-6C03-481A-A775-3CD0AD3BD675} - System32\Tasks\Opera scheduled Autoupdate 1708704095 => C:\Users\awg-p\AppData\Local\Programs\Opera\launcher.exe  --scheduledautoupdate $(Arg0) (Keine Datei)
Task: {FACB55F7-FC83-4500-ACF5-0C7AC57A5D13} - System32\Tasks\RtkAudUService64_BG => C:\windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe [1896960 2024-01-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {A17C27BC-86A8-452D-B507-C7BD1F565471} - System32\Tasks\SEO => C:\Users\awg-p\AppData\Roaming\SEO\SEO.exe [11257440 2024-02-23] (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2bd10b22-e503-4e6c-87d6-d57ffdeba0eb}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2bd10b22-e503-4e6c-87d6-d57ffdeba0eb}: [DhcpDomain] speedport.ip
Tcpip\..\Interfaces\{2bd10b22-e503-4e6c-87d6-d57ffdeba0eb}\1405F533939313638343433373: [DhcpNameServer] 10.10.100.254

Edge: 
=======
Edge Profile: C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-27]
Edge HomePage: Default -> hxxps://
Edge DefaultSearchURL: Default -> hxxps://find.fnavigate-now.com/results.aspx?d=022324&n=0670&q={searchTerms}&gd=RD1002808&searchsource=58
Edge DefaultSearchKeyword: Default -> yahoo search
Edge DefaultSuggestURL: Default -> hxxp://api.bing.com/osjson.aspx?query={searchTerms}
Edge Extension: (Google Docs Offline) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-17]
Edge Extension: (Bitcleaner Surfguard) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gidnhakgfijhghmilgiiffidakihnbnb [2024-02-23]
Edge Extension: (Edge relevant text changes) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-23]

FireFox:
========
FF DefaultProfile: jxpyuy1c.default
FF ProfilePath: C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\jxpyuy1c.default [2024-02-25]
FF NewTab: Mozilla\Firefox\Profiles\jxpyuy1c.default -> hxxps://mynewtab.co?pId=CH220501&iDate=022324&searchEngine=bing
FF ProfilePath: C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release [2024-04-27]
FF NewTab: Mozilla\Firefox\Profiles\4hdhweii.default-release -> hxxps://mynewtab.co?pId=CH220501&iDate=022324&searchEngine=bing
FF Extension: (AdBlocker Ultimate) - C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release\Extensions\adblockultimate@adblockultimate.net.xpi [2024-02-23]
FF Extension: (SponsorBlock für YouTube – Überspringe gesponserte Videosegmente) - C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release\Extensions\sponsorBlocker@ajay.app.xpi [2024-04-17]
FF SearchPlugin: C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release\searchplugins\Yahoo Search.xml [2024-02-25]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9202360 2024-02-28] (Microsoft Corporation -> Microsoft Corporation)
R2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [3420376 2024-02-23] (Lavasoft Software Canada Inc. -> ) <==== ACHTUNG
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncHelper.exe [3512232 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
S3 GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [220464 2023-04-11] (Gamigo Inc. -> )
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [475680 2023-04-14] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\AppHelperCap.exe [895536 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\DiagsCap.exe [894400 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe [890928 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [234968 2024-03-16] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\SysInfoCap.exe [894912 2024-03-04] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_c3ef1d31421e9aea\x64\TouchpointAnalyticsClientService.exe [493216 2024-03-03] (HP Inc. -> HP Inc.)
R2 mc-fw-host; C:\Program Files\McAfee\wps\1.16.194.1\mc-fw-host.exe [2572976 2024-04-17] (McAfee, LLC -> McAfee, LLC)
S3 mc-wps-update; C:\Program Files\McAfee\wps\1.16.194.1\mc-update.exe [3320728 2024-04-17] (McAfee, LLC -> McAfee, LLC)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [889400 2024-04-17] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\MpDefenderCoreService.exe [1427000 2024-02-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.062.0326.0002\OneDriveUpdaterService.exe [3852200 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\NisSrv.exe [3191256 2024-02-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\MsMpEng.exe [133576 2024-02-23] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 amdfendrmgr; C:\windows\System32\drivers\amdfendrmgr.sys [36736 2023-05-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amduw23g; C:\windows\System32\DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\amdkmdag.sys [106589304 2024-03-03] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R2 BdDci; C:\windows\system32\DRIVERS\bddci.sys [800672 2024-02-23] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R0 fse; C:\windows\System32\drivers\fse.sys [218592 2024-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 HPCustomCapDriver; C:\windows\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [26648 2022-06-24] (HP Inc. -> HP Inc.)
S0 mfeelam; C:\windows\System32\DRIVERS\mfeelam.sys [19536 2024-04-17] (Microsoft Windows Early Launch Anti-Malware Publisher -> McAfee, LLC)
R0 mfesec; C:\windows\System32\DRIVERS\mfesec.sys [83248 2024-04-17] (McAfee, LLC -> McAfee, LLC)
S3 rtcx21; C:\windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
S3 vmbusproxy; C:\windows\system32\drivers\vmbusproxy.sys [94208 2024-02-23] (Microsoft Windows -> )
S3 WdBoot; C:\windows\system32\drivers\wd\WdBoot.sys [21040 2024-02-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\windows\system32\drivers\wd\WdFilter.sys [608648 2024-02-23] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\windows\System32\drivers\wd\WdNisDrv.sys [105752 2024-02-23] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-04-27 11:01 - 2024-04-27 11:02 - 000025316 _____ C:\Users\awg-p\Desktop\FRST.txt
2024-04-27 11:01 - 2024-04-27 11:01 - 000000000 ____D C:\FRST
2024-04-27 10:50 - 2024-04-27 10:50 - 002394112 _____ (Farbar) C:\Users\awg-p\Downloads\FRST64.exe
2024-04-27 10:50 - 2024-04-27 10:50 - 002394112 _____ (Farbar) C:\Users\awg-p\Desktop\FRST64.exe
2024-04-27 10:43 - 2024-04-27 10:43 - 000000693 _____ C:\Users\awg-p\Desktop\kprm-20240427104331.txt
2024-04-27 10:43 - 2024-04-27 10:43 - 000000000 ____D C:\KPRM
2024-04-27 10:39 - 2024-04-27 10:39 - 000720948 _____ C:\windows\system32\perfh007.dat
2024-04-27 10:39 - 2024-04-27 10:39 - 000149040 _____ C:\windows\system32\perfc007.dat
2024-04-27 10:34 - 2024-04-27 10:34 - 000000000 ___HD C:\OneDriveTemp
2024-04-27 10:26 - 2024-04-27 10:26 - 002589624 _____ (Malwarebytes) C:\Users\awg-p\Downloads\MBSetup.exe
2024-04-27 07:28 - 2024-04-27 07:40 - 000000000 ___HD C:\$WINDOWS.~BT
2024-04-26 17:44 - 2024-04-26 18:49 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-04-17 19:04 - 2024-04-17 19:04 - 000000000 ____D C:\windows\SysWOW64\DDFs
2024-04-17 19:02 - 2024-03-03 21:24 - 002100864 _____ C:\windows\system32\vulkaninfo-1-999-0-0-0.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 002100864 _____ C:\windows\system32\vulkaninfo.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 001659008 _____ C:\windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 001659008 _____ C:\windows\SysWOW64\vulkaninfo.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 001466000 _____ C:\windows\system32\vulkan-1-999-0-0-0.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 001466000 _____ C:\windows\system32\vulkan-1.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 001307344 _____ C:\windows\SysWOW64\vulkan-1-999-0-0-0.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 001307344 _____ C:\windows\SysWOW64\vulkan-1.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 000607872 _____ C:\windows\system32\GameManager64.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 000548992 _____ C:\windows\system32\libsmi_guest.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 000524416 _____ C:\windows\system32\libsmi_host.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000975488 _____ (AMD) C:\windows\system32\atieclxx.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000537104 _____ C:\windows\system32\atieah64.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000503824 _____ C:\windows\system32\EEURestart.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000462464 _____ C:\windows\SysWOW64\GameManager32.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000406032 _____ C:\windows\SysWOW64\atieah32.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000266880 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atig6txx.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000228880 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atigktxx.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000196008 _____ (AMD) C:\windows\system32\atimuixx.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000184336 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atisamu64.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000148496 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atisamu32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 011756928 _____ C:\windows\system32\amdsmi.exe
2024-04-17 19:02 - 2024-03-03 21:22 - 001617320 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\atiadlxy.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 001617320 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\atiadlxx.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000473104 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\atidemgy.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000210752 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\aticfx64.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000174672 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\aticfx32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000138768 _____ C:\windows\system32\amdxc64.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000118392 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amfrt32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000114704 _____ C:\windows\SysWOW64\amdxc32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000074768 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\ati2erec.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 002245136 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdsasrv64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 001338384 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdsacli64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 001059344 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdsacli32.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000943528 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdlvr64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000771096 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdlvr32.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000569984 _____ C:\windows\system32\amdgfxinfo64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000433792 _____ C:\windows\SysWOW64\amdgfxinfo32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 088606336 _____ C:\windows\SysWOW64\amd_comgr32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 004385296 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdadlx64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 004190224 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdadlx32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000801184 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\Rapidfire64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000678304 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\Rapidfire.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000542624 _____ C:\windows\system32\dgtrayicon.exe
2024-04-17 19:02 - 2024-03-03 21:20 - 000524816 _____ (Khronos Group) C:\windows\system32\OpenCL.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000471056 _____ C:\windows\system32\amdlogum.exe
2024-04-17 19:02 - 2024-03-03 21:20 - 000390672 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000337864 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdfendr.stz
2024-04-17 19:02 - 2024-03-03 21:20 - 000167152 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atimpc64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000158768 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atidxx64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000138224 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atimpc32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000132400 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atidxx32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000102928 _____ C:\windows\system32\clinfo.exe
2024-04-17 19:02 - 2024-03-03 21:20 - 000056264 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdfendrmgr.stz
2024-04-17 19:02 - 2024-03-03 21:20 - 000051112 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\RapidFireServer64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000048032 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\RapidFireServer.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 105400848 _____ C:\windows\system32\amd_comgr.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 019435648 _____ (Advanced Micro Devices Inc.) C:\windows\system32\amdhip64.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 001736088 _____ (AMD) C:\windows\system32\amf-mft-mjpeg-decoder64.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 001411560 _____ (AMD) C:\windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000572048 _____ C:\windows\system32\amdmiracast.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000176656 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdmmcl6.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000167264 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdpcom64.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000145536 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdmmcl.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000138336 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\amdpcom32.dll
2024-04-17 19:02 - 2024-03-03 21:18 - 000177696 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdave64.dll
2024-04-17 19:02 - 2024-03-03 21:18 - 000152240 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\amdave32.dll
2024-04-17 19:02 - 2024-03-03 20:38 - 110177296 _____ C:\windows\system32\amdxc64.so
2024-04-17 18:59 - 2024-04-17 18:59 - 000024320 _____ C:\windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-04-17 18:59 - 2024-04-17 18:59 - 000024320 _____ C:\windows\system32\IntegratedServicesRegionPolicySet.json
2024-04-17 18:56 - 2024-04-17 18:57 - 000000000 ___HD C:\$WinREAgent
2024-04-17 18:37 - 2024-03-12 01:26 - 006135240 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RTKVHD64.sys

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-04-27 10:53 - 2024-02-23 13:59 - 000000000 ____D C:\Users\awg-p\AppData\Local\D3DSCache
2024-04-27 10:53 - 2022-05-07 07:22 - 000000000 ____D C:\windows\INF
2024-04-27 10:52 - 2022-05-07 07:24 - 000000000 ___HD C:\windows\ELAMBKUP
2024-04-27 10:49 - 2022-05-07 07:24 - 000000000 ____D C:\windows\AppReadiness
2024-04-27 10:39 - 2022-11-03 06:39 - 001713906 _____ C:\windows\system32\PerfStringBackup.INI
2024-04-27 10:36 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemTemp
2024-04-27 10:34 - 2024-02-23 14:00 - 000000000 ___RD C:\Users\awg-p\OneDrive
2024-04-27 10:34 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-04-27 10:33 - 2023-07-04 02:13 - 000001623 _____ C:\windows\system32\config\VSMIDK
2024-04-27 10:33 - 2022-11-03 06:32 - 000012288 ___SH C:\DumpStack.log.tmp
2024-04-27 10:33 - 2022-11-03 06:32 - 000000006 ____H C:\windows\Tasks\SA.DAT
2024-04-27 10:33 - 2022-05-07 07:17 - 000524288 _____ C:\windows\system32\config\BBI
2024-04-27 10:13 - 2023-10-11 20:47 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2024-04-27 10:11 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-04-27 10:10 - 2022-11-03 06:32 - 000000000 ____D C:\windows\system32\SleepStudy
2024-04-27 07:29 - 2022-11-03 07:29 - 000000000 ____D C:\windows\Panther
2024-04-26 21:51 - 2023-10-11 20:33 - 000074298 _____ C:\windows\diagwrn.xml
2024-04-26 21:51 - 2023-10-11 20:33 - 000074298 _____ C:\windows\diagerr.xml
2024-04-26 21:23 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\oobe
2024-04-26 18:50 - 2024-02-23 14:17 - 000000000 ____D C:\windows\system32\Tasks\Hewlett-Packard
2024-04-26 18:49 - 2024-02-23 18:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-04-26 18:23 - 2022-05-07 07:17 - 000000000 ____D C:\windows\CbsTemp
2024-04-26 18:05 - 2024-02-23 14:23 - 000000000 ____D C:\Users\awg-p\AppData\Local\CrashDumps
2024-04-26 17:59 - 2022-11-03 06:32 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-04-26 17:59 - 2022-11-03 06:32 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-04-26 17:49 - 2024-02-23 18:00 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-04-26 17:49 - 2024-02-23 13:59 - 000000000 ____D C:\Users\awg-p\AppData\Local\AMD
2024-04-26 17:43 - 2024-02-25 17:58 - 000000000 ____D C:\Users\awg-p\a8d141d5a09f7f6f1c06174f51a31262
2024-04-26 17:43 - 2024-02-23 13:40 - 000000000 ____D C:\Users\awg-p\AppData\Local\Packages
2024-04-26 17:43 - 2022-11-03 06:35 - 000000000 ____D C:\ProgramData\Packages
2024-04-18 03:00 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-04-17 19:05 - 2022-11-03 06:32 - 000592464 _____ C:\windows\system32\FNTCACHE.DAT
2024-04-17 19:04 - 2024-02-23 13:54 - 000000000 ____D C:\windows\system32\Microsoft-Edge-WebView
2024-04-17 19:04 - 2023-10-12 06:16 - 000000000 ____D C:\windows\HoloShell
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ___RD C:\windows\ImmersiveControlPanel
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\WinMetadata
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemResources
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\WinMetadata
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\ShellExperiences
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Sgrm
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SecureBootUpdates
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\HealthAttestationClient
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\DDFs
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\ShellComponents
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\Provisioning
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\bcastdvr
2024-04-17 19:02 - 2024-02-25 18:07 - 000083248 _____ (McAfee, LLC) C:\windows\system32\Drivers\mfesec.sys
2024-04-17 19:02 - 2024-02-25 18:07 - 000019536 _____ (McAfee, LLC) C:\windows\system32\Drivers\mfeelam.sys
2024-04-17 18:59 - 2022-11-03 06:34 - 003213824 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintConfig.dll
2024-04-17 18:44 - 2024-02-23 16:15 - 000000000 ____D C:\windows\system32\MRT
2024-04-17 18:43 - 2024-02-23 16:15 - 192651728 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2024-04-17 18:41 - 2023-10-11 20:29 - 000000000 ____D C:\ProgramData\McAfee
2024-04-17 18:38 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SecurityHealth
2024-04-17 18:37 - 2024-02-23 18:42 - 000000000 ____D C:\Program Files\Microsoft Office
2024-04-17 18:29 - 2024-02-25 17:59 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-04-17 18:29 - 2024-02-23 13:40 - 000000000 ____D C:\Users\awg-p
2024-04-17 18:22 - 2024-02-23 18:48 - 000003194 _____ C:\windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-04-17 18:22 - 2024-02-23 18:48 - 000002155 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-04-17 18:22 - 2024-02-23 14:00 - 000003596 _____ C:\windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3285610310-1678739213-2996767195-1003
2024-04-17 18:22 - 2022-11-03 06:32 - 000003756 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-04-17 18:22 - 2022-11-03 06:32 - 000003632 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

Addition

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 19.04.2024 01
durchgeführt von awg-p (27-04-2024 11:02:32)
Gestartet von C:\Users\awg-p\Desktop
Microsoft Windows 11 Home Version 23H2 22631.3447 (X64) (2024-02-23 09:10:13)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-3285610310-1678739213-2996767195-500 - Administrator - Disabled)
awg-p (S-1-5-21-3285610310-1678739213-2996767195-1003 - Administrator - Enabled) => C:\Users\awg-p
DefaultAccount (S-1-5-21-3285610310-1678739213-2996767195-503 - Limited - Disabled)
Gast (S-1-5-21-3285610310-1678739213-2996767195-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3285610310-1678739213-2996767195-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee (Enabled - Up to date) {0BE13B34-492A-21C0-AE43-C1742279CCB6}
FW: McAfee (Enabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}
FW: McAfee (Enabled) {2FDD6819-222E-5E9F-F5E7-E13A2241D502}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

BitCleaner (HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\BitCleaner) (Version: 1.0.8.0 - BinaryLabs LTD) <==== ACHTUNG
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.20.0 - HP Inc)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
McAfee (HKLM\...\McAfee.wps) (Version: 1.16.194.1 - McAfee, LLC)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 124.0.2478.51 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 123.0.2420.97 - Microsoft Corporation)
Microsoft Office LTSC Professional Plus 2021 - de-de (HKLM\...\ProPlus2021Volume - de-de) (Version: 16.0.14332.20685 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.062.0326.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 125.0.2 (x64 de)) (Version: 125.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 123.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20685 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20685 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.14332.20624 - Microsoft Corporation) Hidden
PDFgear 2.1.4 (HKLM\...\{7DACF63A-4EE4-4837-9AF9-C65D4509FFB4}_is1) (Version: 2.1.4 - PDFgear)
Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version:  - gamigo, Inc.) Hidden
Web Companion (HKLM-x32\...\{6e211cf8-afe6-49ba-9f85-68fa0831f0f3}) (Version: 12.1.2.991 - Lavasoft) <==== ACHTUNG
WebAdvisor von McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.883 - McAfee, LLC)
Welcome to Primrose Lake (HKLM-x32\...\WTA-0703f9c0-d1e7-4bfc-bc54-2051f5fff4a9) (Version: 7.0.0.877 - WildTangent) Hidden
WildTangent ShortcutProvider (HKLM-x32\...\{80831F60-19D7-43B3-A60C-5CAF8C478DF6}) (Version: 7.0.0.886 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 5.0.0.342 - WildTangent)
Zoom (HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\ZoomUMX) (Version: 5.17.11 (34827) - Zoom Video Communications, Inc.)

Packages:
=========

Amazon Alexa -> C:\Program Files\WindowsApps\57540AMZNMobileLLC.AmazonAlexa_3.25.1156.0_x64__22t9g3sebte08 [2024-02-23] (AMZN Mobile LLC.) [Startup Task]
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m [2024-04-26] (Advanced Micro Devices Inc.) [Startup Task]
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1300.477.0_x64__8wekyb3d8bbwe [2024-04-26] (Microsoft Corporation)
Dropbox-Sonderaktion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.23.0_x64__xbfy0k16fey96 [2024-02-23] (Dropbox Inc.)
Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_1.2.0.0_x64__v10z8vjag6ke6 [2024-02-23] (HP Inc.)
HP Audio Center -> C:\Program Files\WindowsApps\AD2F1837.HPAudioCenter_1.47.308.0_x64__v10z8vjag6ke6 [2024-03-16] (HP Inc.)
HP Enhanced Lighting -> C:\Program Files\WindowsApps\AD2F1837.HPEnhance_1.3.9.0_x64__v10z8vjag6ke6 [2024-02-23] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.5.1.0_x64__v10z8vjag6ke6 [2024-04-17] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.3.7.0_x64__v10z8vjag6ke6 [2024-02-23] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_152.1.1099.0_x64__v10z8vjag6ke6 [2024-03-16] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.34.32.0_x64__v10z8vjag6ke6 [2024-04-26] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6 [2024-04-27] (HP Inc.)
McAfee -> C:\Program Files\McAfee\wps\1.16.194.1 [2024-04-17] ()
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_53.21110.548.0_x64__8wekyb3d8bbwe [2024-03-16] (Microsoft Corporation)
Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.1.61781.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.91.0_x64__8wekyb3d8bbwe [2024-04-17] (Microsoft Corporation)
Microsoft.Windows.Ai.Copilot.Provider -> C:\Program Files\WindowsApps\Microsoft.Windows.Ai.Copilot.Provider_1.0.3.0_neutral__8wekyb3d8bbwe [2024-04-26] (Microsoft Corporation)
Microsoft.WindowsAppRuntime.CBS -> C:\windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2024-03-16] (Microsoft Corporation)
MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24041.33.0_x64__cw5n1h2txyewy [2024-04-26] (Microsoft Windows) [Startup Task]
myHP -> C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6 [2024-04-27] (HP Inc.) [Startup Task]
WinAppRuntime.Main.1.4 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.4_4000.1136.2333.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_5001.95.533.0_x64__8wekyb3d8bbwe [2024-04-26] (Microsoft Corp.)
Windows App Runtime DDLM 4000.1082.2259.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1082.2259.0-x6_4000.1082.2259.0_x64__8wekyb3d8bbwe [2024-04-17] (Microsoft Corporation)
Windows App Runtime DDLM 4000.1082.2259.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1082.2259.0-x8_4000.1082.2259.0_x86__8wekyb3d8bbwe [2024-04-17] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x6_4000.964.11.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x8_4000.964.11.0_x86__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2024-03-16] (Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [McCtxMenu] -> {4ADAAC88-E1BD-424F-816D-15E059007938} => C:\Program Files\McAfee\wps\1.16.194.1\mc-ctxmnu.dll [2024-04-17] (McAfee, LLC -> McAfee, LLC)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [McCtxMenu] -> {4ADAAC88-E1BD-424F-816D-15E059007938} => C:\Program Files\McAfee\wps\1.16.194.1\mc-ctxmnu.dll [2024-04-17] (McAfee, LLC -> McAfee, LLC)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon.com.lnk -> C:\Program Files (x86)\Online Services\Amazon\WizLink.exe () -> hxxp://www.amazon.com/gp/ubp/oneButton/config/redirectHome?tagbase=hpga1-ubpl&ref=aagateway-taskbar-hp

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2024-04-27 10:21 - 2024-04-27 10:21 - 000432128 _____ (HP Inc.) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\LauncherSDK\58e873e73a7080970bb793aa6f39dd73\LauncherSDK.ni.dll
2024-04-18 07:15 - 2024-04-18 07:15 - 000037888 _____ (HP Inc.) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\Logging\981d0020e47687911d5c614cba329bf1\Logging.ni.dll
2024-04-27 10:21 - 2024-04-27 10:21 - 000152576 _____ (HP Inc.) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\RpcClient\9b87e2951e5c8721bcf527e7754f7496\RpcClient.ni.dll
2024-04-27 10:21 - 2024-04-27 10:21 - 000118272 _____ (HP Inc.) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\WMISDK\eaa5211674e7ae11d4528e3d3bc9388b\WMISDK.ni.dll
2024-04-27 10:21 - 2024-04-27 10:21 - 003884544 _____ (Newtonsoft) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\Newtonsoft.Json\23111129c4fa2045078fdba5e71eb1eb\Newtonsoft.Json.ni.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mc-fw-host => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mc-fw-host => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2024-03-25] (HP Inc. -> HP Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2024-03-25] (HP Inc. -> HP Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2022-05-07 07:24 - 2022-05-07 07:22 - 000000824 _____ C:\windows\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\HP Backgrounds\backgroundDefault.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\StartupApproved\StartupFolder: => "SearchEngineOptimizer.lnk"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{C50557F9-3510-4A05-A2ED-F2471BB5592B}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0F91AD0E-1ABA-455C-81FA-6BD5C6F70A55}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D189544D-1729-4942-8A47-76E0A59938BD}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{49E5F31A-AA3D-4937-84B7-79041DA8E114}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{508910A9-7935-4DB3-9DB7-0C6F02BD4161}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{9A68590A-35CB-4C56-B002-A95BE7A96617}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{628FBF04-D874-474E-9921-222BE934EBCF}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{7C913969-4D19-4D43-A7DC-7A7E9C95995B}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{CB187B70-B75E-43B8-89D8-1C6D10870086}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{295C0690-5D06-4A03-ACF4-69B20C2168D8}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{D0DF80F6-6222-48EF-B70C-9C2AD45F8B9F}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{2B53B742-A937-4B77-8B1C-522D6B787EB9}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{3366F2D5-84BE-4C7A-B66B-D55E03872275}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{77E6D11D-DF3B-4D0B-9BB6-203FE5D99E1C}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{3177C57A-C782-484C-925A-3DDAFF0D1419}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{4E94D6D3-4127-4925-9B59-F5CFE4B0BCFB}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{5CCB5A57-F383-4A3D-B842-90412C78ED5E}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{63B874B4-4B1B-4E98-9603-F7426D3F9F37}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{7658927C-5A6D-4D11-9923-28EF9A3149C2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3F64207A-EB77-4FCF-9246-9DF2844ADD66}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{361A901F-9076-46DE-8077-1B34D1A04E51}] => (Allow) C:\Users\awg-p\AppData\Local\Programs\Opera\107.0.5045.36\opera.exe => Keine Datei
FirewallRules: [{A0B08BB9-2262-4CA4-B498-7C1A4550F007}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{070D8FE2-DE6F-4073-B6B5-7EB113285406}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{12E22497-4AAB-4AA8-808D-92C1266FD17D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{154CDB5E-7557-437F-8FC4-B98EE3C3A093}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2BA2B188-0EAB-4443-8158-E83E6E94C22F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EA674CD3-7C69-4A2E-9DFD-4E0E6C2C5F59}] => (Allow) C:\Users\awg-p\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{5A18F335-5E0D-4D05-B135-2B956E88B788}] => (Allow) C:\Users\awg-p\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{36407E84-F6BA-42EE-A2B5-962470E9767E}] => (Allow) C:\Users\awg-p\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{23B4B4B2-1D08-42AE-966C-8ADA1F1144C8}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

17-04-2024 18:52:45 Windows Update
26-04-2024 17:58:13 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (04/27/2024 10:52:52 AM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Name der fehlerhaften Anwendung: MBAMService.exe, Version: 3.2.0.1285, Zeitstempel: 0x66059017
Name des fehlerhaften Moduls: mbae-api-na.dll_unloaded, Version: 1.13.4.585, Zeitstempel: 0x65a15425
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000038d72
ID des fehlerhaften Prozesses: 0x0x1510
Startzeit der fehlerhaften Anwendung: 0x0x1da987da6e11223
Pfad der fehlerhaften Anwendung: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
Pfad des fehlerhaften Moduls: mbae-api-na.dll
Berichtskennung: 90c670c1-ede3-436c-9daa-d69b20725508
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/27/2024 10:34:46 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: PLANIG)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\windows\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).

Error: (04/27/2024 10:11:53 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: PLANIG)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\windows\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).

Error: (04/26/2024 06:58:55 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: PLANIG)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\windows\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).

Error: (04/26/2024 06:57:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren..

Error: (04/26/2024 06:57:29 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]

Error: (04/26/2024 06:57:12 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: PLANIG)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\windows\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).

Error: (04/26/2024 06:52:04 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: PLANIG)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\windows\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).


Systemfehler:
=============
Error: (04/27/2024 10:32:08 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WC Assistant" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (04/27/2024 10:31:08 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "WC Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/27/2024 10:12:03 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246010 fehlgeschlagen: Windows 11, version 23H2

Error: (04/27/2024 10:10:32 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 217) (User: NT-AUTORITÄT)
Description: Bestätigungsfehler: Die Bestätigung des folgenden Updates ist mit Fehler 0x80246010 fehlgeschlagen: Windows 11, version 23H2

Error: (04/27/2024 05:58:14 AM) (Source: DCOM) (EventID: 10010) (User: PLANIG)
Description: Der Server "{283EDD52-69B2-473D-BEB6-2C0B4C01FD73}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (04/26/2024 09:47:35 PM) (Source: WinRM) (EventID: 10142) (User: )
Description: Der WinRM-Dienst kann den Listener mit der Adresse * und der Transporteinstellung "HTTP" nicht migrieren. Ein Listener mit dieser Adress- und Transportkonfiguration ist bereits vorhanden.

Error: (04/26/2024 07:24:12 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9N9PHDT62W94-AD2F1837.myHP

Error: (04/26/2024 07:18:31 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9P4W8RFN9M2T-AD2F1837.HPSystemEventUtility


CodeIntegrity:
===============
Date: 2024-04-27 11:01:46
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\McAfee\wps\1.16.194.1\mc-sec-plugin-x64.dll that did not meet the Windows signing level requirements. 

Date: 2024-04-27 10:52:55
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system. 

Date: 2024-04-27 10:50:54
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\McAfee\wps\1.16.194.1\mc-sec-plugin-x64.dll that did not meet the Microsoft signing level requirements. 


==================== Speicherinformationen =========================== 

BIOS: AMI F.07 10/26/2023
Hauptplatine: HP 8B4E
Prozessor: AMD Ryzen 5 7520U with Radeon Graphics 
Prozentuale Nutzung des RAM: 43%
Installierter physikalischer RAM: 15631.41 MB
Verfügbarer physikalischer RAM: 8874.62 MB
Summe virtueller Speicher: 16655.41 MB
Verfügbarer virtueller Speicher: 7047.17 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:952.95 GB) (Free:888.22 GB) (Model: WD PC SN560 SDDPNQE-1T00-1006) (Protected) NTFS

\\?\Volume{a46c9c83-276a-49a0-9d97-191bf24071e9}\ (Windows RE tools) (Fixed) (Total:0.64 GB) (Free:0.06 GB) NTFS
\\?\Volume{da37104b-a010-42b3-8019-6bb02a24d239}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.16 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: E8E82706)

Partition: GPT.

==================== Ende von Addition.txt =======================

Ich freue mich über jegliche Hilfe.
Viele Grüße
Chris

cosinus · 27.04.2024, 11:46

System aufräumen: unnötige und veraltete Programme deinstallieren

Bitte über Einstellungen/Apps folgende Programme/Apps deinstallieren:

BitCleaner
HP Connection Optimizer
HP Documentation
McAfee
Web Companion
WebAdvisor von McAfee

Chris0079 · 27.04.2024, 15:54

vielen Dank für die Hilfe bis jetzt.
Ich habe alle Apps aus der Liste deinstalliert. Alles Problemlos möglich. Nur die App Bitcleaner hat sich nicht entfernen lassen...
Leider ist auch das SEO-Shell-Problem nach wie vor da.
Was kann ich jetzt noch tun?

cosinus · 27.04.2024, 16:08

Zitat:

Zitat von Chris0079

Leider ist auch das SEO-Shell-Problem nach wie vor da.
Was kann ich jetzt noch tun?

Es wurde auch nicht geschrieben, dass nach der Deinstallation besagter Programme alles getan sei und alle Probleme behoben werden. Das war erst der Anfang.

adwCleaner

Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei in CODE-Tags.

adwcleaner zwecks Kontrolle bitte wiederholen, falls es Funde gab.

Chris0079 · 27.04.2024, 16:40

wäre auch zu schön gewesen.
adwCleaner laufen gelassen, mit folgendem Ergebnis. Insegsamt drei durchläufe gemacht, da bei den ersten zwei etwas gefunden wurde. Hier die Log-Files der beiden ersten Durchläufe:

Code:

ATTFilter

# -------------------------------
# Malwarebytes AdwCleaner 8.4.2.0
# -------------------------------
# Build:    03-04-2024
# Database: 2024-03-04.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    04-27-2024
# Duration: 00:00:02
# OS:       Windows 11 (Build 22631.3447)
# Cleaned:  29
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted       C:\ProgramData\Application Data\Lavasoft\Web Companion

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKCU\SOFTWARE\27ce9fa05c3947dc99ac7a6bd52f3e16
Deleted       HKCU\SOFTWARE\438f84b93ab73e6e9ccd233d1abe724b
Deleted       HKCU\Software\Lavasoft\Web Companion
Deleted       HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted       HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted       HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted       Preinstalled.HPCleanFLC   Registry   HKCU\Software\Microsoft\Windows\CurrentVersion\Run|HPSEU_Host_Launcher
Deleted       Preinstalled.HPRegistrationService   Folder   C:\ProgramData\HP\HP REGISTRATION SERVICE
Deleted       Preinstalled.HPSupportAssistant   Folder   C:\HP\SUPPORT
Deleted       Preinstalled.HPSupportAssistant   Folder   C:\ProgramData\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted       Preinstalled.HPSupportAssistant   Registry   HKLM\Software\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted       Preinstalled.HPSupportAssistant   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted       Preinstalled.HPSupportAssistant   Registry   HKLM\Software\Wow6432Node\\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted       Preinstalled.HPSupportAssistant   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted       Preinstalled.HPTouchpointAnalyticsClient   Folder   C:\ProgramData\HP\HP TOUCHPOINT ANALYTICS CLIENT
Deleted       Preinstalled.HPTouchpointAnalyticsClient   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}
Deleted       Preinstalled.WildTangentGamesBundle   File   C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildTangent Games.lnk
Deleted       Preinstalled.WildTangentGamesBundle   Folder   C:\Program Files (x86)\WILDGAMES
Deleted       Preinstalled.WildTangentGamesBundle   Folder   C:\Program Files (x86)\WILDTANGENT GAMES
Deleted       Preinstalled.WildTangentGamesBundle   Folder   C:\Program Files (x86)\WILDTANGENT GAMES\APP
Deleted       Preinstalled.WildTangentGamesBundle   Folder   C:\Program Files (x86)\WILDTANGENT GAMES\SHORTCUTPROVIDER
Deleted       Preinstalled.WildTangentGamesBundle   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\WildTangent wildgames Master Uninstall
Deleted       Preinstalled.WildTangentGamesBundle   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App
Deleted       Preinstalled.WildTangentGamesBundle   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{80831F60-19D7-43B3-A60C-5CAF8C478DF6}
Deleted       Preinstalled.WildTangentGamesBundle   Registry   HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
Deleted       Preinstalled.WildTangentGamesBundle   Registry   HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
Deleted       Preinstalled.WildTangentGamesBundle   Registry   HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
Deleted       Preinstalled.WildTangentGamesBundle   Registry   HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4859 octets] - [27/04/2024 17:32:06]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

und Durchlauf 2:

Code:

ATTFilter

# -------------------------------
# Malwarebytes AdwCleaner 8.4.2.0
# -------------------------------
# Build:    03-04-2024
# Database: 2024-03-04.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    04-27-2024
# Duration: 00:00:00
# OS:       Windows 11 (Build 22631.3447)
# Cleaned:  1
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted       Preinstalled.HPTouchpointAnalyticsClient   Folder   C:\ProgramData\HP\HP TOUCHPOINT ANALYTICS CLIENT


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4859 octets] - [27/04/2024 17:32:06]
AdwCleaner[C00].txt - [5203 octets] - [27/04/2024 17:32:57]
AdwCleaner[S01].txt - [1612 octets] - [27/04/2024 17:36:19]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########

cosinus · 27.04.2024, 17:51

Dann bitte jetzt neue FRST-Logs.

Chris0079 · 27.04.2024, 18:07

FRST

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 19.04.2024 01
durchgeführt von awg-p (Administrator) auf PLANIG (HP HP All-in-One Desktop 27-cr0xxx) (27-04-2024 19:04:08)
Gestartet von C:\Users\awg-p\Desktop\FRST64.exe
Geladene Profile: awg-p
Plattform: Microsoft Windows 11 Home Version 23H2 22631.3447 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\amdow.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe <6>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <10>
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_c3ef1d31421e9aea\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\SysInfoCap.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\BackgroundTransferHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.22621.3447_none_e948831242de6298\TiWorker.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\Run: [MicrosoftEdgeAutoLaunch_ED77CFC3E4CF64C17B3D9770088A7CBF] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4082112 2024-04-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [3306400 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {3343565B-1030-4748-808A-EC02E07FDF7E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [703536 2024-03-25] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {544776CD-BEDD-42F9-8DC4-42C6EB604DF5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2024-03-25] (HP Inc. -> HP Inc.)
Task: {359609F1-4D9B-4DB0-95F7-C3E4788FACFC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-03-25] (HP Inc. -> HP Inc.)
Task: {C9B6A68A-74B1-4C06-8FA6-D91E92EF36D7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-03-25] (HP Inc. -> HP Inc.)
Task: {4241405A-317D-4DDC-867D-C7FA5C4FFCC0} - System32\Tasks\HP\Consent Manager Launcher => C:\windows\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {165AEAAD-8E52-4BE4-A4EC-A396C8AE03B8} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21916864 2024-02-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {1A6C06C7-E7B6-4DF3-92A4-32679A3B8A49} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21916864 2024-02-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0D5E5F4-7ED3-4B3E-8AB8-C306B4192D93} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141384 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {10DEF74D-2C15-4B2B-BFCD-748C2EF90102} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141384 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {DB43EC27-050A-40D7-A18A-05AE3EFDE3C3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\MpCmdRun.exe [1646000 2024-02-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7F627088-B733-48DC-9322-58D9342BE0AB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\MpCmdRun.exe [1646000 2024-02-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D934F7EA-E28A-4E94-9307-FA0D9D4BB4ED} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\MpCmdRun.exe [1646000 2024-02-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A2BD0293-AEDE-4C92-A72D-9FB4202A93AD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\MpCmdRun.exe [1646000 2024-02-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {894A3C7F-0EE1-4790-9E17-F8038C86A1C4} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3285610310-1678739213-2996767195-1003 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [673696 2024-04-26] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {B0291056-CE7D-431E-8A9F-E79A2A321A2C} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34208 2024-04-26] (Mozilla Corporation -> Mozilla Foundation)
Task: {6A886D91-DACC-4A82-9E59-4777AF5F0A37} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206512 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {249785ED-6CE0-420E-A636-BD140E97DA3A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3285610310-1678739213-2996767195-1003 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206512 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {824C5B62-6C03-481A-A775-3CD0AD3BD675} - System32\Tasks\Opera scheduled Autoupdate 1708704095 => C:\Users\awg-p\AppData\Local\Programs\Opera\launcher.exe  --scheduledautoupdate $(Arg0) (Keine Datei)
Task: {FACB55F7-FC83-4500-ACF5-0C7AC57A5D13} - System32\Tasks\RtkAudUService64_BG => C:\windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe [1896960 2024-01-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {A17C27BC-86A8-452D-B507-C7BD1F565471} - System32\Tasks\SEO => C:\Users\awg-p\AppData\Roaming\SEO\SEO.exe [11257440 2024-02-23] (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) <==== ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2bd10b22-e503-4e6c-87d6-d57ffdeba0eb}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2bd10b22-e503-4e6c-87d6-d57ffdeba0eb}: [DhcpDomain] speedport.ip
Tcpip\..\Interfaces\{2bd10b22-e503-4e6c-87d6-d57ffdeba0eb}\1405F533939313638343433373: [DhcpNameServer] 10.10.100.254

Edge: 
=======
Edge Profile: C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-27]
Edge HomePage: Default -> hxxps://
Edge DefaultSearchURL: Default -> hxxps://find.fnavigate-now.com/results.aspx?d=022324&n=0670&q={searchTerms}&gd=RD1002808&searchsource=58
Edge DefaultSearchKeyword: Default -> yahoo search
Edge DefaultSuggestURL: Default -> hxxp://api.bing.com/osjson.aspx?query={searchTerms}
Edge Extension: (Google Docs Offline) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-17]
Edge Extension: (Bitcleaner Surfguard) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gidnhakgfijhghmilgiiffidakihnbnb [2024-02-23]
Edge Extension: (Edge relevant text changes) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-23]

FireFox:
========
FF DefaultProfile: jxpyuy1c.default
FF ProfilePath: C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\jxpyuy1c.default [2024-02-25]
FF NewTab: Mozilla\Firefox\Profiles\jxpyuy1c.default -> hxxps://mynewtab.co?pId=CH220501&iDate=022324&searchEngine=bing
FF ProfilePath: C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release [2024-04-27]
FF NewTab: Mozilla\Firefox\Profiles\4hdhweii.default-release -> hxxps://mynewtab.co?pId=CH220501&iDate=022324&searchEngine=bing
FF Extension: (AdBlocker Ultimate) - C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release\Extensions\adblockultimate@adblockultimate.net.xpi [2024-02-23]
FF Extension: (SponsorBlock für YouTube – Überspringe gesponserte Videosegmente) - C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release\Extensions\sponsorBlocker@ajay.app.xpi [2024-04-17]
FF SearchPlugin: C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release\searchplugins\Yahoo Search.xml [2024-02-25]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9202360 2024-02-28] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncHelper.exe [3512232 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
R2 HPAppHelperCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\AppHelperCap.exe [895536 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\DiagsCap.exe [894400 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe [890928 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [234968 2024-03-16] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\SysInfoCap.exe [894912 2024-03-04] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_c3ef1d31421e9aea\x64\TouchpointAnalyticsClientService.exe [493216 2024-03-03] (HP Inc. -> HP Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\MpDefenderCoreService.exe [1427000 2024-02-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.062.0326.0002\OneDriveUpdaterService.exe [3852200 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\NisSrv.exe [3191256 2024-02-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.12-0\MsMpEng.exe [133576 2024-02-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 GamesAppService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 amdfendrmgr; C:\windows\System32\drivers\amdfendrmgr.sys [36736 2023-05-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amduw23g; C:\windows\System32\DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\amdkmdag.sys [106589304 2024-03-03] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R0 fse; C:\windows\System32\drivers\fse.sys [218592 2024-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 HPCustomCapDriver; C:\windows\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [26648 2022-06-24] (HP Inc. -> HP Inc.)
S3 rtcx21; C:\windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
S3 vmbusproxy; C:\windows\system32\drivers\vmbusproxy.sys [94208 2024-02-23] (Microsoft Windows -> )
R0 WdBoot; C:\windows\System32\drivers\wd\WdBoot.sys [21040 2024-02-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\windows\System32\drivers\wd\WdFilter.sys [608648 2024-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\windows\System32\drivers\wd\WdNisDrv.sys [105752 2024-02-23] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-04-27 17:36 - 2024-04-27 17:36 - 008790880 _____ (Malwarebytes) C:\Users\awg-p\Downloads\adwcleaner(1).exe
2024-04-27 17:35 - 2024-04-27 17:35 - 002589624 _____ (Malwarebytes) C:\Users\awg-p\Downloads\MBSetup(1).exe
2024-04-27 17:31 - 2024-04-27 17:32 - 000000000 ____D C:\AdwCleaner
2024-04-27 17:31 - 2024-04-27 17:31 - 008790880 _____ (Malwarebytes) C:\Users\awg-p\Downloads\adwcleaner.exe
2024-04-27 16:55 - 2024-04-27 16:55 - 000720948 _____ C:\windows\system32\perfh007.dat
2024-04-27 16:55 - 2024-04-27 16:55 - 000149040 _____ C:\windows\system32\perfc007.dat
2024-04-27 16:50 - 2024-04-27 16:50 - 000000000 ___HD C:\OneDriveTemp
2024-04-27 14:55 - 2024-04-27 15:01 - 000000000 ___HD C:\$WINDOWS.~BT
2024-04-27 11:01 - 2024-04-27 19:04 - 000019278 _____ C:\Users\awg-p\Desktop\FRST.txt
2024-04-27 11:01 - 2024-04-27 19:03 - 000000000 ____D C:\FRST
2024-04-27 10:50 - 2024-04-27 10:50 - 002394112 _____ (Farbar) C:\Users\awg-p\Downloads\FRST64.exe
2024-04-27 10:50 - 2024-04-27 10:50 - 002394112 _____ (Farbar) C:\Users\awg-p\Desktop\FRST64.exe
2024-04-27 10:43 - 2024-04-27 10:43 - 000000000 ____D C:\KPRM
2024-04-27 10:26 - 2024-04-27 10:26 - 002589624 _____ (Malwarebytes) C:\Users\awg-p\Downloads\MBSetup.exe
2024-04-26 17:44 - 2024-04-26 18:49 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-04-17 19:04 - 2024-04-17 19:04 - 000000000 ____D C:\windows\SysWOW64\DDFs
2024-04-17 19:02 - 2024-03-03 21:24 - 002100864 _____ C:\windows\system32\vulkaninfo-1-999-0-0-0.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 002100864 _____ C:\windows\system32\vulkaninfo.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 001659008 _____ C:\windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 001659008 _____ C:\windows\SysWOW64\vulkaninfo.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 001466000 _____ C:\windows\system32\vulkan-1-999-0-0-0.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 001466000 _____ C:\windows\system32\vulkan-1.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 001307344 _____ C:\windows\SysWOW64\vulkan-1-999-0-0-0.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 001307344 _____ C:\windows\SysWOW64\vulkan-1.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 000607872 _____ C:\windows\system32\GameManager64.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 000548992 _____ C:\windows\system32\libsmi_guest.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 000524416 _____ C:\windows\system32\libsmi_host.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000975488 _____ (AMD) C:\windows\system32\atieclxx.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000537104 _____ C:\windows\system32\atieah64.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000503824 _____ C:\windows\system32\EEURestart.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000462464 _____ C:\windows\SysWOW64\GameManager32.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000406032 _____ C:\windows\SysWOW64\atieah32.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000266880 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atig6txx.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000228880 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atigktxx.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000196008 _____ (AMD) C:\windows\system32\atimuixx.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000184336 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atisamu64.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000148496 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atisamu32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 011756928 _____ C:\windows\system32\amdsmi.exe
2024-04-17 19:02 - 2024-03-03 21:22 - 001617320 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\atiadlxy.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 001617320 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\atiadlxx.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000473104 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\atidemgy.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000210752 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\aticfx64.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000174672 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\aticfx32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000138768 _____ C:\windows\system32\amdxc64.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000118392 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amfrt32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000114704 _____ C:\windows\SysWOW64\amdxc32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000074768 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\ati2erec.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 002245136 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdsasrv64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 001338384 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdsacli64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 001059344 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdsacli32.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000943528 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdlvr64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000771096 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdlvr32.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000569984 _____ C:\windows\system32\amdgfxinfo64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000433792 _____ C:\windows\SysWOW64\amdgfxinfo32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 088606336 _____ C:\windows\SysWOW64\amd_comgr32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 004385296 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdadlx64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 004190224 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdadlx32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000801184 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\Rapidfire64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000678304 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\Rapidfire.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000542624 _____ C:\windows\system32\dgtrayicon.exe
2024-04-17 19:02 - 2024-03-03 21:20 - 000524816 _____ (Khronos Group) C:\windows\system32\OpenCL.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000471056 _____ C:\windows\system32\amdlogum.exe
2024-04-17 19:02 - 2024-03-03 21:20 - 000390672 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000337864 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdfendr.stz
2024-04-17 19:02 - 2024-03-03 21:20 - 000167152 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atimpc64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000158768 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atidxx64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000138224 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atimpc32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000132400 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atidxx32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000102928 _____ C:\windows\system32\clinfo.exe
2024-04-17 19:02 - 2024-03-03 21:20 - 000056264 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdfendrmgr.stz
2024-04-17 19:02 - 2024-03-03 21:20 - 000051112 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\RapidFireServer64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000048032 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\RapidFireServer.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 105400848 _____ C:\windows\system32\amd_comgr.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 019435648 _____ (Advanced Micro Devices Inc.) C:\windows\system32\amdhip64.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 001736088 _____ (AMD) C:\windows\system32\amf-mft-mjpeg-decoder64.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 001411560 _____ (AMD) C:\windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000572048 _____ C:\windows\system32\amdmiracast.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000176656 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdmmcl6.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000167264 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdpcom64.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000145536 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdmmcl.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000138336 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\amdpcom32.dll
2024-04-17 19:02 - 2024-03-03 21:18 - 000177696 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdave64.dll
2024-04-17 19:02 - 2024-03-03 21:18 - 000152240 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\amdave32.dll
2024-04-17 19:02 - 2024-03-03 20:38 - 110177296 _____ C:\windows\system32\amdxc64.so
2024-04-17 18:59 - 2024-04-17 18:59 - 000024320 _____ C:\windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-04-17 18:59 - 2024-04-17 18:59 - 000024320 _____ C:\windows\system32\IntegratedServicesRegionPolicySet.json
2024-04-17 18:56 - 2024-04-17 18:57 - 000000000 ___HD C:\$WinREAgent
2024-04-17 18:37 - 2024-03-12 01:26 - 006135240 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RTKVHD64.sys

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-04-27 19:03 - 2022-11-03 06:32 - 000000000 ____D C:\windows\system32\SleepStudy
2024-04-27 19:03 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-04-27 17:37 - 2023-07-04 02:19 - 000000000 ____D C:\ProgramData\HP
2024-04-27 17:32 - 2023-10-11 20:47 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2024-04-27 17:32 - 2023-07-04 03:09 - 000000000 ___HD C:\hp
2024-04-27 17:11 - 2022-05-07 07:24 - 000000000 ____D C:\windows\AppReadiness
2024-04-27 16:55 - 2022-11-03 06:39 - 001713906 _____ C:\windows\system32\PerfStringBackup.INI
2024-04-27 16:55 - 2022-05-07 07:22 - 000000000 ____D C:\windows\INF
2024-04-27 16:52 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemTemp
2024-04-27 16:50 - 2024-02-23 14:00 - 000000000 ___RD C:\Users\awg-p\OneDrive
2024-04-27 16:49 - 2023-07-04 02:13 - 000001623 _____ C:\windows\system32\config\VSMIDK
2024-04-27 16:49 - 2022-11-03 06:32 - 000012288 ___SH C:\DumpStack.log.tmp
2024-04-27 16:49 - 2022-11-03 06:32 - 000000006 ____H C:\windows\Tasks\SA.DAT
2024-04-27 16:49 - 2022-05-07 07:17 - 000524288 _____ C:\windows\system32\config\BBI
2024-04-27 16:48 - 2024-02-23 13:40 - 000000000 ____D C:\Users\awg-p\AppData\Local\Packages
2024-04-27 16:48 - 2023-10-11 20:29 - 000000000 ____D C:\ProgramData\McAfee
2024-04-27 16:48 - 2022-05-07 07:24 - 000000000 ___HD C:\windows\ELAMBKUP
2024-04-27 16:48 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-04-27 16:47 - 2024-02-23 18:00 - 000000000 ____D C:\Users\awg-p\AppData\Roaming\Lavasoft
2024-04-27 16:46 - 2023-07-04 02:19 - 000000000 ____D C:\Program Files\HP
2024-04-27 14:56 - 2022-11-03 07:29 - 000000000 ____D C:\windows\Panther
2024-04-27 10:53 - 2024-02-23 13:59 - 000000000 ____D C:\Users\awg-p\AppData\Local\D3DSCache
2024-04-26 21:51 - 2023-10-11 20:33 - 000074298 _____ C:\windows\diagwrn.xml
2024-04-26 21:51 - 2023-10-11 20:33 - 000074298 _____ C:\windows\diagerr.xml
2024-04-26 21:23 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\oobe
2024-04-26 18:50 - 2024-02-23 14:17 - 000000000 ____D C:\windows\system32\Tasks\Hewlett-Packard
2024-04-26 18:49 - 2024-02-23 18:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-04-26 18:23 - 2022-05-07 07:17 - 000000000 ____D C:\windows\CbsTemp
2024-04-26 18:05 - 2024-02-23 14:23 - 000000000 ____D C:\Users\awg-p\AppData\Local\CrashDumps
2024-04-26 17:59 - 2022-11-03 06:32 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-04-26 17:59 - 2022-11-03 06:32 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-04-26 17:49 - 2024-02-23 18:00 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-04-26 17:49 - 2024-02-23 13:59 - 000000000 ____D C:\Users\awg-p\AppData\Local\AMD
2024-04-26 17:43 - 2024-02-25 17:58 - 000000000 ____D C:\Users\awg-p\a8d141d5a09f7f6f1c06174f51a31262
2024-04-26 17:43 - 2022-11-03 06:35 - 000000000 ____D C:\ProgramData\Packages
2024-04-18 03:00 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-04-17 19:05 - 2022-11-03 06:32 - 000592464 _____ C:\windows\system32\FNTCACHE.DAT
2024-04-17 19:04 - 2024-02-23 13:54 - 000000000 ____D C:\windows\system32\Microsoft-Edge-WebView
2024-04-17 19:04 - 2023-10-12 06:16 - 000000000 ____D C:\windows\HoloShell
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ___RD C:\windows\ImmersiveControlPanel
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\WinMetadata
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemResources
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\WinMetadata
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\ShellExperiences
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Sgrm
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SecureBootUpdates
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\HealthAttestationClient
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\DDFs
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\ShellComponents
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\Provisioning
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\bcastdvr
2024-04-17 18:59 - 2022-11-03 06:34 - 003213824 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintConfig.dll
2024-04-17 18:44 - 2024-02-23 16:15 - 000000000 ____D C:\windows\system32\MRT
2024-04-17 18:43 - 2024-02-23 16:15 - 192651728 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2024-04-17 18:38 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SecurityHealth
2024-04-17 18:37 - 2024-02-23 18:42 - 000000000 ____D C:\Program Files\Microsoft Office
2024-04-17 18:29 - 2024-02-25 17:59 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-04-17 18:29 - 2024-02-23 13:40 - 000000000 ____D C:\Users\awg-p
2024-04-17 18:22 - 2024-02-23 18:48 - 000003194 _____ C:\windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-04-17 18:22 - 2024-02-23 18:48 - 000002155 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-04-17 18:22 - 2024-02-23 14:00 - 000003596 _____ C:\windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3285610310-1678739213-2996767195-1003
2024-04-17 18:22 - 2022-11-03 06:32 - 000003756 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-04-17 18:22 - 2022-11-03 06:32 - 000003632 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

Addition

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 19.04.2024 01
durchgeführt von awg-p (27-04-2024 19:05:34)
Gestartet von C:\Users\awg-p\Desktop
Microsoft Windows 11 Home Version 23H2 22631.3447 (X64) (2024-02-23 09:10:13)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-3285610310-1678739213-2996767195-500 - Administrator - Disabled)
awg-p (S-1-5-21-3285610310-1678739213-2996767195-1003 - Administrator - Enabled) => C:\Users\awg-p
DefaultAccount (S-1-5-21-3285610310-1678739213-2996767195-503 - Limited - Disabled)
Gast (S-1-5-21-3285610310-1678739213-2996767195-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3285610310-1678739213-2996767195-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee (Enabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}
FW: McAfee (Enabled) {2FDD6819-222E-5E9F-F5E7-E13A2241D502}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

BitCleaner (HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\BitCleaner) (Version: 1.0.8.0 - BinaryLabs LTD) <==== ACHTUNG
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 124.0.2478.51 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 123.0.2420.97 - Microsoft Corporation)
Microsoft Office LTSC Professional Plus 2021 - de-de (HKLM\...\ProPlus2021Volume - de-de) (Version: 16.0.14332.20685 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.062.0326.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 125.0.2 (x64 de)) (Version: 125.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 123.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20685 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20685 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.14332.20624 - Microsoft Corporation) Hidden
PDFgear 2.1.4 (HKLM\...\{7DACF63A-4EE4-4837-9AF9-C65D4509FFB4}_is1) (Version: 2.1.4 - PDFgear)
Welcome to Primrose Lake (HKLM-x32\...\WTA-0703f9c0-d1e7-4bfc-bc54-2051f5fff4a9) (Version: 7.0.0.877 - WildTangent) Hidden
Zoom (HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\ZoomUMX) (Version: 5.17.11 (34827) - Zoom Video Communications, Inc.)

Packages:
=========

Amazon Alexa -> C:\Program Files\WindowsApps\57540AMZNMobileLLC.AmazonAlexa_3.25.1156.0_x64__22t9g3sebte08 [2024-02-23] (AMZN Mobile LLC.) [Startup Task]
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m [2024-04-26] (Advanced Micro Devices Inc.) [Startup Task]
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1300.477.0_x64__8wekyb3d8bbwe [2024-04-26] (Microsoft Corporation)
Dropbox-Sonderaktion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.23.0_x64__xbfy0k16fey96 [2024-02-23] (Dropbox Inc.)
Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_1.2.0.0_x64__v10z8vjag6ke6 [2024-02-23] (HP Inc.)
HP Audio Center -> C:\Program Files\WindowsApps\AD2F1837.HPAudioCenter_1.47.308.0_x64__v10z8vjag6ke6 [2024-03-16] (HP Inc.)
HP Enhanced Lighting -> C:\Program Files\WindowsApps\AD2F1837.HPEnhance_1.3.9.0_x64__v10z8vjag6ke6 [2024-02-23] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.5.1.0_x64__v10z8vjag6ke6 [2024-04-17] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.3.7.0_x64__v10z8vjag6ke6 [2024-02-23] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_152.1.1099.0_x64__v10z8vjag6ke6 [2024-03-16] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.34.32.0_x64__v10z8vjag6ke6 [2024-04-26] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6 [2024-04-27] (HP Inc.)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_53.21110.548.0_x64__8wekyb3d8bbwe [2024-03-16] (Microsoft Corporation)
Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.1.61781.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.91.0_x64__8wekyb3d8bbwe [2024-04-17] (Microsoft Corporation)
Microsoft.Windows.Ai.Copilot.Provider -> C:\Program Files\WindowsApps\Microsoft.Windows.Ai.Copilot.Provider_1.0.3.0_neutral__8wekyb3d8bbwe [2024-04-26] (Microsoft Corporation)
Microsoft.WindowsAppRuntime.CBS -> C:\windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2024-03-16] (Microsoft Corporation)
MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24041.33.0_x64__cw5n1h2txyewy [2024-04-26] (Microsoft Windows) [Startup Task]
myHP -> C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6 [2024-04-27] (HP Inc.) [Startup Task]
WinAppRuntime.Main.1.4 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.4_4000.1136.2333.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_5001.95.533.0_x64__8wekyb3d8bbwe [2024-04-26] (Microsoft Corp.)
Windows App Runtime DDLM 4000.1082.2259.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1082.2259.0-x6_4000.1082.2259.0_x64__8wekyb3d8bbwe [2024-04-17] (Microsoft Corporation)
Windows App Runtime DDLM 4000.1082.2259.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1082.2259.0-x8_4000.1082.2259.0_x86__8wekyb3d8bbwe [2024-04-17] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x6_4000.964.11.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x8_4000.964.11.0_x86__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2024-03-16] (Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncShell64.dll [2024-04-17] (Microsoft Corporation -> Microsoft Corporation)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon.com.lnk -> C:\Program Files (x86)\Online Services\Amazon\WizLink.exe () -> hxxp://www.amazon.com/gp/ubp/oneButton/config/redirectHome?tagbase=hpga1-ubpl&ref=aagateway-taskbar-hp

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2024-04-27 10:21 - 2024-04-27 10:21 - 003884544 _____ (Newtonsoft) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\Newtonsoft.Json\23111129c4fa2045078fdba5e71eb1eb\Newtonsoft.Json.ni.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\localhost -> localhost

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2022-05-07 07:24 - 2022-05-07 07:22 - 000000824 _____ C:\windows\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\HP Backgrounds\backgroundDefault.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\StartupApproved\StartupFolder: => "SearchEngineOptimizer.lnk"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{C50557F9-3510-4A05-A2ED-F2471BB5592B}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0F91AD0E-1ABA-455C-81FA-6BD5C6F70A55}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D189544D-1729-4942-8A47-76E0A59938BD}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{49E5F31A-AA3D-4937-84B7-79041DA8E114}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{508910A9-7935-4DB3-9DB7-0C6F02BD4161}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{9A68590A-35CB-4C56-B002-A95BE7A96617}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{628FBF04-D874-474E-9921-222BE934EBCF}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{7C913969-4D19-4D43-A7DC-7A7E9C95995B}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{CB187B70-B75E-43B8-89D8-1C6D10870086}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{295C0690-5D06-4A03-ACF4-69B20C2168D8}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{D0DF80F6-6222-48EF-B70C-9C2AD45F8B9F}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{2B53B742-A937-4B77-8B1C-522D6B787EB9}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{3366F2D5-84BE-4C7A-B66B-D55E03872275}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{77E6D11D-DF3B-4D0B-9BB6-203FE5D99E1C}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{3177C57A-C782-484C-925A-3DDAFF0D1419}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{4E94D6D3-4127-4925-9B59-F5CFE4B0BCFB}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{5CCB5A57-F383-4A3D-B842-90412C78ED5E}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{63B874B4-4B1B-4E98-9603-F7426D3F9F37}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{7658927C-5A6D-4D11-9923-28EF9A3149C2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3F64207A-EB77-4FCF-9246-9DF2844ADD66}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{361A901F-9076-46DE-8077-1B34D1A04E51}] => (Allow) C:\Users\awg-p\AppData\Local\Programs\Opera\107.0.5045.36\opera.exe => Keine Datei
FirewallRules: [{A0B08BB9-2262-4CA4-B498-7C1A4550F007}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{070D8FE2-DE6F-4073-B6B5-7EB113285406}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{12E22497-4AAB-4AA8-808D-92C1266FD17D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{154CDB5E-7557-437F-8FC4-B98EE3C3A093}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2BA2B188-0EAB-4443-8158-E83E6E94C22F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EA674CD3-7C69-4A2E-9DFD-4E0E6C2C5F59}] => (Allow) C:\Users\awg-p\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{5A18F335-5E0D-4D05-B135-2B956E88B788}] => (Allow) C:\Users\awg-p\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{36407E84-F6BA-42EE-A2B5-962470E9767E}] => (Allow) C:\Users\awg-p\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{23B4B4B2-1D08-42AE-966C-8ADA1F1144C8}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

26-04-2024 17:58:13 Windows Update
27-04-2024 17:32:46 AdwCleaner_BeforeCleaning_27/04/2024_17:32:45
27-04-2024 17:36:28 AdwCleaner_BeforeCleaning_27/04/2024_17:36:28

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren..

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren..

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren..

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren..

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]


Systemfehler:
=============
Error: (04/27/2024 06:53:24 PM) (Source: DCOM) (EventID: 10010) (User: PLANIG)
Description: Der Server "{5F7F3F7B-1177-4D4B-B1DB-BC6F671B8F25}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (04/27/2024 06:51:19 PM) (Source: DCOM) (EventID: 10010) (User: PLANIG)
Description: Der Server "{5F7F3F7B-1177-4D4B-B1DB-BC6F671B8F25}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (04/27/2024 06:01:12 PM) (Source: DCOM) (EventID: 10010) (User: PLANIG)
Description: Der Server "{283EDD52-69B2-473D-BEB6-2C0B4C01FD73}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (04/27/2024 05:50:29 PM) (Source: DCOM) (EventID: 10010) (User: PLANIG)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (04/27/2024 05:36:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "HP Insights Analytics" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/27/2024 05:36:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Microsoft Office Click-to-Run Service" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/27/2024 05:36:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "HP App Helper HSA Service" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/27/2024 05:36:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "HP Diagnostics HSA Service" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===============
Date: 2024-04-27 16:48:00
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\McAfee\wps\1.16.194.1\mc-sec-plugin-x64.dll that did not meet the Windows signing level requirements. 


==================== Speicherinformationen =========================== 

BIOS: AMI F.07 10/26/2023
Hauptplatine: HP 8B4E
Prozessor: AMD Ryzen 5 7520U with Radeon Graphics 
Prozentuale Nutzung des RAM: 34%
Installierter physikalischer RAM: 15631.41 MB
Verfügbarer physikalischer RAM: 10274.5 MB
Summe virtueller Speicher: 16655.41 MB
Verfügbarer virtueller Speicher: 9335.47 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:952.95 GB) (Free:891.13 GB) (Model: WD PC SN560 SDDPNQE-1T00-1006) (Protected) NTFS

\\?\Volume{a46c9c83-276a-49a0-9d97-191bf24071e9}\ (Windows RE tools) (Fixed) (Total:0.64 GB) (Free:0.06 GB) NTFS
\\?\Volume{da37104b-a010-42b3-8019-6bb02a24d239}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.16 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: E8E82706)

Partition: GPT.

==================== Ende von Addition.txt =======================

cosinus · 27.04.2024, 18:27

Scripting/Repair mit FRST64

WARNUNG AN ALLE MITLESER !!!
Dieses FRST-Script ist ausschließlich für diesen Nutzer gedacht und sollte niemals 1:1 für ein anderes System angewendet werden!

Kopiere den gesamten Inhalt der folgenden Code-Box:

Code:

ATTFilter

Start::
CloseProcesses:
FF NewTab: Mozilla\Firefox\Profiles\jxpyuy1c.default -> https://mynewtab.co?pId=CH220501&iDate=022324&searchEngine=bing
FF NewTab: Mozilla\Firefox\Profiles\4hdhweii.default-release -> https://mynewtab.co?pId=CH220501&iDate=022324&searchEngine=bing
FF SearchPlugin: C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release\searchplugins\Yahoo Search.xml [2024-02-25]
Edge HomePage: Default -> https://
Edge DefaultSearchURL: Default -> https://find.fnavigate-now.com/results.aspx?d=022324&n=0670&q={searchTerms}&gd=RD1002808&searchsource=58
Edge DefaultSearchKeyword: Default -> yahoo search
Edge Extension: (Bitcleaner Surfguard) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gidnhakgfijhghmilgiiffidakihnbnb [2024-02-23]
Edge Extension: (Edge relevant text changes) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-23]
Startup: C:\Users\awg-p\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BitCleaner Tasker.lnk [2024-02-23] <==== ACHTUNG
ShortcutTarget: BitCleaner Tasker.lnk -> C:\Users\awg-p\AppData\Roaming\BitCleaner\BitCleaner Tasker.exe (BINARYLABS LIMITED -> Binarylabs LTD) <==== ACHTUNG
Task: {A17C27BC-86A8-452D-B507-C7BD1F565471} - System32\Tasks\SEO => C:\Users\awg-p\AppData\Roaming\SEO\SEO.exe [11257440 2024-02-23] (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) <==== ACHTUNG
S3 GamesAppService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" [X]
C:\Program Files (x86)\WildTangent Games
C:\ProgramData\McAfee
C:\Users\awg-p\a8d141d5a09f7f6f1c06174f51a31262
C:\Users\awg-p\AppData\Roaming\SEO
C:\Users\awg-p\AppData\Roaming\BitCleaner
emptytemp:
End::

Starte nun FRST und klicke direkt den Reparieren Button.Wichtig: Du brauchst den Inhalt der Code-Box nirgends einfügen, da sich FRST den Code aus der Zwischenablage holt!
Das Tool führt die gewünschten Schritte aus und erstellt eine fixlog.txt im selben Verzeichnis, in dem sich FRST befindet.
Gegebenenfalls muss dein Rechner neu gestartet werden.
Poste mir den Inhalt der fixlog.txt mit deiner nächsten Antwort.

Chris0079 · 27.04.2024, 18:45

gemacht. Fehlermeldung beim Start ist nun weg.

hier die fixlog-Datei:

Code:

ATTFilter

Entfernungsergebnis von Farbar Recovery Scan Tool (x64) Version: 19.04.2024 01
durchgeführt von awg-p (27-04-2024 19:38:33) Run:1
Gestartet von C:\Users\awg-p\Desktop
Geladene Profile: awg-p
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
Start::
CloseProcesses:
FF NewTab: Mozilla\Firefox\Profiles\jxpyuy1c.default -> https://mynewtab.co?pId=CH220501&iDate=022324&searchEngine=bing
FF NewTab: Mozilla\Firefox\Profiles\4hdhweii.default-release -> https://mynewtab.co?pId=CH220501&iDate=022324&searchEngine=bing
FF SearchPlugin: C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release\searchplugins\Yahoo Search.xml [2024-02-25]
Edge HomePage: Default -> https://
Edge DefaultSearchURL: Default -> https://find.fnavigate-now.com/results.aspx?d=022324&n=0670&q={searchTerms}&gd=RD1002808&searchsource=58
Edge DefaultSearchKeyword: Default -> yahoo search
Edge Extension: (Bitcleaner Surfguard) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gidnhakgfijhghmilgiiffidakihnbnb [2024-02-23]
Edge Extension: (Edge relevant text changes) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-23]
Startup: C:\Users\awg-p\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BitCleaner Tasker.lnk [2024-02-23] <==== ACHTUNG
ShortcutTarget: BitCleaner Tasker.lnk -> C:\Users\awg-p\AppData\Roaming\BitCleaner\BitCleaner Tasker.exe (BINARYLABS LIMITED -> Binarylabs LTD) <==== ACHTUNG
Task: {A17C27BC-86A8-452D-B507-C7BD1F565471} - System32\Tasks\SEO => C:\Users\awg-p\AppData\Roaming\SEO\SEO.exe [11257440 2024-02-23] (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) <==== ACHTUNG
S3 GamesAppService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" [X]
C:\Program Files (x86)\WildTangent Games
C:\ProgramData\McAfee
C:\Users\awg-p\a8d141d5a09f7f6f1c06174f51a31262
C:\Users\awg-p\AppData\Roaming\SEO
C:\Users\awg-p\AppData\Roaming\BitCleaner
emptytemp:
End::
*****************

Prozesse erfolgreich geschlossen.
"Firefox newtab" => erfolgreich entfernt
"Firefox newtab" => erfolgreich entfernt
C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release\searchplugins\Yahoo Search.xml => erfolgreich verschoben
"Edge HomePage" => erfolgreich entfernt
"Edge DefaultSearchURL" => erfolgreich entfernt
"Edge DefaultSearchKeyword" => erfolgreich entfernt
Edge Extension: (Bitcleaner Surfguard) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gidnhakgfijhghmilgiiffidakihnbnb [2024-02-23] => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
Edge Extension: (Edge relevant text changes) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-23] => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
C:\Users\awg-p\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BitCleaner Tasker.lnk => erfolgreich verschoben
C:\Users\awg-p\AppData\Roaming\BitCleaner\BitCleaner Tasker.exe => erfolgreich verschoben
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A17C27BC-86A8-452D-B507-C7BD1F565471}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A17C27BC-86A8-452D-B507-C7BD1F565471}" => erfolgreich entfernt
C:\windows\System32\Tasks\SEO => erfolgreich verschoben
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SEO" => erfolgreich entfernt
HKLM\System\CurrentControlSet\Services\GamesAppService => erfolgreich entfernt
GamesAppService => Dienst erfolgreich entfernt
"C:\Program Files (x86)\WildTangent Games" => nicht gefunden

"C:\ProgramData\McAfee" Ordner verschieben:

C:\ProgramData\McAfee => erfolgreich verschoben

"C:\Users\awg-p\a8d141d5a09f7f6f1c06174f51a31262" Ordner verschieben:

C:\Users\awg-p\a8d141d5a09f7f6f1c06174f51a31262 => erfolgreich verschoben

"C:\Users\awg-p\AppData\Roaming\SEO" Ordner verschieben:

C:\Users\awg-p\AppData\Roaming\SEO => erfolgreich verschoben

"C:\Users\awg-p\AppData\Roaming\BitCleaner" Ordner verschieben:

C:\Users\awg-p\AppData\Roaming\BitCleaner => erfolgreich verschoben

=========== EmptyTemp: ==========

FlushDNS => abgeschlossen
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 13821528 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 85715614 B
Edge => 0 B
Firefox => 133206593 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 10508 B
systemprofile32 => 11645 B
LocalService => 107449 B
NetworkService => 120911 B
awg-p => 1178766 B

RecycleBin => 0 B
EmptyTemp: => 224.6 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 19:38:43 ====

muss ich nun nochwas tun?

cosinus · 27.04.2024, 18:48

Ok. Rechner nochmal neu starten, dann zwecks Kontrolle neue FRST-Logs.

Chris0079 · 27.04.2024, 18:55

okay, hier die entsprechenden neuen Dateien:

FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 19.04.2024 01
durchgeführt von awg-p (Administrator) auf PLANIG (HP HP All-in-One Desktop 27-cr0xxx) (27-04-2024 19:52:59)
Gestartet von C:\Users\awg-p\Desktop\FRST64.exe
Geladene Profile: awg-p
Plattform: Microsoft Windows 11 Home Version 23H2 22631.3527 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(C:\Program Files\Microsoft OneDrive\OneDrive.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\24.062.0326.0002\Microsoft.SharePoint.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\atieclxx.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\win32\HP.ContextAware.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.51\identity_helper.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\userinit.exe
(SECOMN64.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOCL64.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\atiesrxx.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_c3ef1d31421e9aea\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\SysInfoCap.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(sihost.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\LauncherRSXRuntime.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPEnhance_1.3.9.0_x64__v10z8vjag6ke6\Win32\HPEnhancedLighting.Bg.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24041.33.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\Run: [MicrosoftEdgeAutoLaunch_ED77CFC3E4CF64C17B3D9770088A7CBF] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4082112 2024-04-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [3306400 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {3343565B-1030-4748-808A-EC02E07FDF7E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [703536 2024-03-25] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {544776CD-BEDD-42F9-8DC4-42C6EB604DF5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2024-03-25] (HP Inc. -> HP Inc.)
Task: {359609F1-4D9B-4DB0-95F7-C3E4788FACFC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-03-25] (HP Inc. -> HP Inc.)
Task: {C9B6A68A-74B1-4C06-8FA6-D91E92EF36D7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-03-25] (HP Inc. -> HP Inc.)
Task: {4241405A-317D-4DDC-867D-C7FA5C4FFCC0} - System32\Tasks\HP\Consent Manager Launcher => C:\windows\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {165AEAAD-8E52-4BE4-A4EC-A396C8AE03B8} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21916864 2024-02-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {1A6C06C7-E7B6-4DF3-92A4-32679A3B8A49} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21916864 2024-02-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0D5E5F4-7ED3-4B3E-8AB8-C306B4192D93} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141384 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {10DEF74D-2C15-4B2B-BFCD-748C2EF90102} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141384 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {E7E0A0C4-04AE-4236-88E4-B0794CC589DF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpCmdRun.exe [1658408 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6FE6ADFD-7B24-4F63-95F7-78E3039596C1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpCmdRun.exe [1658408 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B27DF268-97E7-4F29-83F0-D45A6DBCD832} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpCmdRun.exe [1658408 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F15332B1-5EDB-4F55-8CD8-6F7BF3D51C78} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpCmdRun.exe [1658408 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {894A3C7F-0EE1-4790-9E17-F8038C86A1C4} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3285610310-1678739213-2996767195-1003 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [673696 2024-04-26] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {B0291056-CE7D-431E-8A9F-E79A2A321A2C} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34208 2024-04-26] (Mozilla Corporation -> Mozilla Foundation)
Task: {6A886D91-DACC-4A82-9E59-4777AF5F0A37} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206512 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {249785ED-6CE0-420E-A636-BD140E97DA3A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3285610310-1678739213-2996767195-1003 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206512 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {824C5B62-6C03-481A-A775-3CD0AD3BD675} - System32\Tasks\Opera scheduled Autoupdate 1708704095 => C:\Users\awg-p\AppData\Local\Programs\Opera\launcher.exe  --scheduledautoupdate $(Arg0) (Keine Datei)
Task: {FACB55F7-FC83-4500-ACF5-0C7AC57A5D13} - System32\Tasks\RtkAudUService64_BG => C:\windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe [1896960 2024-01-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2bd10b22-e503-4e6c-87d6-d57ffdeba0eb}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2bd10b22-e503-4e6c-87d6-d57ffdeba0eb}: [DhcpDomain] speedport.ip
Tcpip\..\Interfaces\{2bd10b22-e503-4e6c-87d6-d57ffdeba0eb}\1405F533939313638343433373: [DhcpNameServer] 10.10.100.254

Edge: 
=======
Edge Profile: C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-27]
Edge Extension: (Google Docs Offline) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-27]
Edge Extension: (Edge relevant text changes) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-04-27]

FireFox:
========
FF DefaultProfile: jxpyuy1c.default
FF ProfilePath: C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\jxpyuy1c.default [2024-04-27]
FF NewTab: Mozilla\Firefox\Profiles\jxpyuy1c.default -> hxxps://mynewtab.co?pId=CH220501&iDate=022324&searchEngine=bing
FF ProfilePath: C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release [2024-04-27]
FF Extension: (AdBlocker Ultimate) - C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release\Extensions\adblockultimate@adblockultimate.net.xpi [2024-02-23]
FF Extension: (SponsorBlock für YouTube – Überspringe gesponserte Videosegmente) - C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\4hdhweii.default-release\Extensions\sponsorBlocker@ajay.app.xpi [2024-04-17]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9202360 2024-02-28] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.062.0326.0002\FileSyncHelper.exe [3512232 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
R2 HPAppHelperCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\AppHelperCap.exe [895536 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\DiagsCap.exe [894400 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe [890928 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [234968 2024-03-16] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\SysInfoCap.exe [894912 2024-03-04] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_c3ef1d31421e9aea\x64\TouchpointAnalyticsClientService.exe [493216 2024-03-03] (HP Inc. -> HP Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpDefenderCoreService.exe [1488888 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.062.0326.0002\OneDriveUpdaterService.exe [3852200 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\NisSrv.exe [3236712 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MsMpEng.exe [133600 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 amdfendrmgr; C:\windows\System32\drivers\amdfendrmgr.sys [36736 2023-05-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amduw23g; C:\windows\System32\DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\amdkmdag.sys [106589304 2024-03-03] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R0 fse; C:\windows\System32\drivers\fse.sys [218592 2024-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 HPCustomCapDriver; C:\windows\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [26648 2022-06-24] (HP Inc. -> HP Inc.)
S3 rtcx21; C:\windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
S3 vmbusproxy; C:\windows\system32\drivers\vmbusproxy.sys [94208 2024-02-23] (Microsoft Windows -> )
R0 WdBoot; C:\windows\System32\drivers\wd\WdBoot.sys [20928 2024-04-27] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\windows\System32\drivers\wd\WdFilter.sys [601376 2024-04-27] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\windows\System32\drivers\wd\WdNisDrv.sys [105760 2024-04-27] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-04-27 19:47 - 2024-04-27 19:47 - 000720948 _____ C:\windows\system32\perfh007.dat
2024-04-27 19:47 - 2024-04-27 19:47 - 000149040 _____ C:\windows\system32\perfc007.dat
2024-04-27 19:38 - 2024-04-27 19:38 - 000005097 _____ C:\Users\awg-p\Desktop\Fixlog.txt
2024-04-27 19:26 - 2024-04-27 19:28 - 000000000 ___HD C:\$WinREAgent
2024-04-27 17:36 - 2024-04-27 17:36 - 008790880 _____ (Malwarebytes) C:\Users\awg-p\Downloads\adwcleaner(1).exe
2024-04-27 17:35 - 2024-04-27 17:35 - 002589624 _____ (Malwarebytes) C:\Users\awg-p\Downloads\MBSetup(1).exe
2024-04-27 17:31 - 2024-04-27 17:32 - 000000000 ____D C:\AdwCleaner
2024-04-27 17:31 - 2024-04-27 17:31 - 008790880 _____ (Malwarebytes) C:\Users\awg-p\Downloads\adwcleaner.exe
2024-04-27 16:50 - 2024-04-27 16:50 - 000000000 ___HD C:\OneDriveTemp
2024-04-27 14:55 - 2024-04-27 15:01 - 000000000 ___HD C:\$WINDOWS.~BT
2024-04-27 11:01 - 2024-04-27 19:53 - 000019161 _____ C:\Users\awg-p\Desktop\FRST.txt
2024-04-27 11:01 - 2024-04-27 19:53 - 000000000 ____D C:\FRST
2024-04-27 10:50 - 2024-04-27 10:50 - 002394112 _____ (Farbar) C:\Users\awg-p\Downloads\FRST64.exe
2024-04-27 10:50 - 2024-04-27 10:50 - 002394112 _____ (Farbar) C:\Users\awg-p\Desktop\FRST64.exe
2024-04-27 10:43 - 2024-04-27 10:43 - 000000000 ____D C:\KPRM
2024-04-27 10:26 - 2024-04-27 10:26 - 002589624 _____ (Malwarebytes) C:\Users\awg-p\Downloads\MBSetup.exe
2024-04-26 17:44 - 2024-04-26 18:49 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-04-17 19:04 - 2024-04-17 19:04 - 000000000 ____D C:\windows\SysWOW64\DDFs
2024-04-17 19:02 - 2024-03-03 21:24 - 002100864 _____ C:\windows\system32\vulkaninfo-1-999-0-0-0.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 002100864 _____ C:\windows\system32\vulkaninfo.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 001659008 _____ C:\windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 001659008 _____ C:\windows\SysWOW64\vulkaninfo.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 001466000 _____ C:\windows\system32\vulkan-1-999-0-0-0.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 001466000 _____ C:\windows\system32\vulkan-1.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 001307344 _____ C:\windows\SysWOW64\vulkan-1-999-0-0-0.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 001307344 _____ C:\windows\SysWOW64\vulkan-1.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 000607872 _____ C:\windows\system32\GameManager64.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 000548992 _____ C:\windows\system32\libsmi_guest.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 000524416 _____ C:\windows\system32\libsmi_host.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000975488 _____ (AMD) C:\windows\system32\atieclxx.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000537104 _____ C:\windows\system32\atieah64.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000503824 _____ C:\windows\system32\EEURestart.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000462464 _____ C:\windows\SysWOW64\GameManager32.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000406032 _____ C:\windows\SysWOW64\atieah32.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000266880 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atig6txx.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000228880 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atigktxx.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000196008 _____ (AMD) C:\windows\system32\atimuixx.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000184336 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atisamu64.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000148496 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atisamu32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 011756928 _____ C:\windows\system32\amdsmi.exe
2024-04-17 19:02 - 2024-03-03 21:22 - 001617320 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\atiadlxy.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 001617320 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\atiadlxx.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000473104 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\atidemgy.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000210752 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\aticfx64.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000174672 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\aticfx32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000138768 _____ C:\windows\system32\amdxc64.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000118392 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amfrt32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000114704 _____ C:\windows\SysWOW64\amdxc32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000074768 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\ati2erec.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 002245136 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdsasrv64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 001338384 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdsacli64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 001059344 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdsacli32.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000943528 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdlvr64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000771096 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdlvr32.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000569984 _____ C:\windows\system32\amdgfxinfo64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000433792 _____ C:\windows\SysWOW64\amdgfxinfo32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 088606336 _____ C:\windows\SysWOW64\amd_comgr32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 004385296 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdadlx64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 004190224 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdadlx32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000801184 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\Rapidfire64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000678304 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\Rapidfire.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000542624 _____ C:\windows\system32\dgtrayicon.exe
2024-04-17 19:02 - 2024-03-03 21:20 - 000524816 _____ (Khronos Group) C:\windows\system32\OpenCL.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000471056 _____ C:\windows\system32\amdlogum.exe
2024-04-17 19:02 - 2024-03-03 21:20 - 000390672 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000337864 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdfendr.stz
2024-04-17 19:02 - 2024-03-03 21:20 - 000167152 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atimpc64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000158768 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atidxx64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000138224 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atimpc32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000132400 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atidxx32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000102928 _____ C:\windows\system32\clinfo.exe
2024-04-17 19:02 - 2024-03-03 21:20 - 000056264 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdfendrmgr.stz
2024-04-17 19:02 - 2024-03-03 21:20 - 000051112 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\RapidFireServer64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000048032 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\RapidFireServer.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 105400848 _____ C:\windows\system32\amd_comgr.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 019435648 _____ (Advanced Micro Devices Inc.) C:\windows\system32\amdhip64.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 001736088 _____ (AMD) C:\windows\system32\amf-mft-mjpeg-decoder64.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 001411560 _____ (AMD) C:\windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000572048 _____ C:\windows\system32\amdmiracast.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000176656 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdmmcl6.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000167264 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdpcom64.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000145536 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdmmcl.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000138336 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\amdpcom32.dll
2024-04-17 19:02 - 2024-03-03 21:18 - 000177696 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdave64.dll
2024-04-17 19:02 - 2024-03-03 21:18 - 000152240 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\amdave32.dll
2024-04-17 19:02 - 2024-03-03 20:38 - 110177296 _____ C:\windows\system32\amdxc64.so
2024-04-17 18:59 - 2024-04-17 18:59 - 000024320 _____ C:\windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-04-17 18:59 - 2024-04-17 18:59 - 000024320 _____ C:\windows\system32\IntegratedServicesRegionPolicySet.json
2024-04-17 18:37 - 2024-03-12 01:26 - 006135240 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RTKVHD64.sys

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-04-27 19:54 - 2024-02-25 17:59 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-04-27 19:54 - 2024-02-23 18:48 - 000003194 _____ C:\windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-04-27 19:54 - 2024-02-23 18:48 - 000002155 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-04-27 19:54 - 2024-02-23 14:00 - 000003596 _____ C:\windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3285610310-1678739213-2996767195-1003
2024-04-27 19:52 - 2022-11-03 06:32 - 000000000 ____D C:\windows\system32\SleepStudy
2024-04-27 19:47 - 2022-11-03 06:39 - 001713906 _____ C:\windows\system32\PerfStringBackup.INI
2024-04-27 19:47 - 2022-05-07 07:22 - 000000000 ____D C:\windows\INF
2024-04-27 19:45 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemTemp
2024-04-27 19:43 - 2023-07-04 02:13 - 000001623 _____ C:\windows\system32\config\VSMIDK
2024-04-27 19:43 - 2022-11-03 06:32 - 000012288 ___SH C:\DumpStack.log.tmp
2024-04-27 19:43 - 2022-11-03 06:32 - 000000006 ____H C:\windows\Tasks\SA.DAT
2024-04-27 19:43 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-04-27 19:43 - 2022-05-07 07:17 - 000524288 _____ C:\windows\system32\config\BBI
2024-04-27 19:41 - 2022-05-07 07:24 - 000000000 ____D C:\windows\AppReadiness
2024-04-27 19:40 - 2022-11-03 06:32 - 000592464 _____ C:\windows\system32\FNTCACHE.DAT
2024-04-27 19:39 - 2023-10-12 06:16 - 000000000 ____D C:\windows\TextInput
2024-04-27 19:39 - 2023-10-12 06:16 - 000000000 ____D C:\windows\HoloShell
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\SysWOW64\F12
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\SysWOW64\DiagSvcs
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\UNP
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\F12
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\DiagSvcs
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___RD C:\windows\PrintDialog
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___RD C:\windows\ImmersiveControlPanel
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\UUS
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\WinMetadata
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\PerceptionSimulation
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\Dism
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemResources
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemApps
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\WinMetadata
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\WinBioPlugIns
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SystemResetPlatform
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\ShellExperiences
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Sgrm
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\PerceptionSimulation
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\oobe
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\migwiz
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\HealthAttestationClient
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Dism
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\appraiser
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\ShellExperiences
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\ShellComponents
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\BrowserCore
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\bcastdvr
2024-04-27 19:39 - 2022-05-07 07:17 - 000000000 ____D C:\windows\servicing
2024-04-27 19:38 - 2024-02-23 13:40 - 000000000 ____D C:\Users\awg-p
2024-04-27 19:33 - 2022-05-07 07:17 - 000000000 ____D C:\windows\CbsTemp
2024-04-27 19:31 - 2022-11-03 06:34 - 003214336 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintConfig.dll
2024-04-27 19:15 - 2022-11-03 06:32 - 000000000 ____D C:\windows\system32\Drivers\wd
2024-04-27 17:37 - 2023-07-04 02:19 - 000000000 ____D C:\ProgramData\HP
2024-04-27 17:32 - 2023-10-11 20:47 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2024-04-27 17:32 - 2023-07-04 03:09 - 000000000 ___HD C:\hp
2024-04-27 16:50 - 2024-02-23 14:00 - 000000000 ___RD C:\Users\awg-p\OneDrive
2024-04-27 16:48 - 2024-02-23 13:40 - 000000000 ____D C:\Users\awg-p\AppData\Local\Packages
2024-04-27 16:48 - 2022-11-03 06:35 - 000000000 ____D C:\ProgramData\Packages
2024-04-27 16:48 - 2022-05-07 07:24 - 000000000 ___HD C:\windows\ELAMBKUP
2024-04-27 16:48 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-04-27 16:47 - 2024-02-23 18:00 - 000000000 ____D C:\Users\awg-p\AppData\Roaming\Lavasoft
2024-04-27 16:46 - 2023-07-04 02:19 - 000000000 ____D C:\Program Files\HP
2024-04-27 14:56 - 2022-11-03 07:29 - 000000000 ____D C:\windows\Panther
2024-04-27 10:53 - 2024-02-23 13:59 - 000000000 ____D C:\Users\awg-p\AppData\Local\D3DSCache
2024-04-26 21:51 - 2023-10-11 20:33 - 000074298 _____ C:\windows\diagwrn.xml
2024-04-26 21:51 - 2023-10-11 20:33 - 000074298 _____ C:\windows\diagerr.xml
2024-04-26 18:50 - 2024-02-23 14:17 - 000000000 ____D C:\windows\system32\Tasks\Hewlett-Packard
2024-04-26 18:49 - 2024-02-23 18:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-04-26 18:05 - 2024-02-23 14:23 - 000000000 ____D C:\Users\awg-p\AppData\Local\CrashDumps
2024-04-26 17:59 - 2022-11-03 06:32 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-04-26 17:59 - 2022-11-03 06:32 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-04-26 17:49 - 2024-02-23 18:00 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-04-26 17:49 - 2024-02-23 13:59 - 000000000 ____D C:\Users\awg-p\AppData\Local\AMD
2024-04-18 03:00 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-04-17 19:04 - 2024-02-23 13:54 - 000000000 ____D C:\windows\system32\Microsoft-Edge-WebView
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SecureBootUpdates
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\DDFs
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\Provisioning
2024-04-17 18:44 - 2024-02-23 16:15 - 000000000 ____D C:\windows\system32\MRT
2024-04-17 18:43 - 2024-02-23 16:15 - 192651728 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2024-04-17 18:38 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SecurityHealth
2024-04-17 18:37 - 2024-02-23 18:42 - 000000000 ____D C:\Program Files\Microsoft Office
2024-04-17 18:22 - 2022-11-03 06:32 - 000003756 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-04-17 18:22 - 2022-11-03 06:32 - 000003632 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

Addition:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 19.04.2024 01
durchgeführt von awg-p (27-04-2024 19:54:47)
Gestartet von C:\Users\awg-p\Desktop
Microsoft Windows 11 Home Version 23H2 22631.3527 (X64) (2024-02-23 09:10:13)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-3285610310-1678739213-2996767195-500 - Administrator - Disabled)
awg-p (S-1-5-21-3285610310-1678739213-2996767195-1003 - Administrator - Enabled) => C:\Users\awg-p
DefaultAccount (S-1-5-21-3285610310-1678739213-2996767195-503 - Limited - Disabled)
Gast (S-1-5-21-3285610310-1678739213-2996767195-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3285610310-1678739213-2996767195-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee (Enabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}
FW: McAfee (Enabled) {2FDD6819-222E-5E9F-F5E7-E13A2241D502}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

BitCleaner (HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\BitCleaner) (Version: 1.0.8.0 - BinaryLabs LTD) <==== ACHTUNG
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 124.0.2478.51 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 123.0.2420.97 - Microsoft Corporation)
Microsoft Office LTSC Professional Plus 2021 - de-de (HKLM\...\ProPlus2021Volume - de-de) (Version: 16.0.14332.20685 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.070.0407.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 125.0.2 (x64 de)) (Version: 125.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 123.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20685 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20685 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.14332.20624 - Microsoft Corporation) Hidden
PDFgear 2.1.4 (HKLM\...\{7DACF63A-4EE4-4837-9AF9-C65D4509FFB4}_is1) (Version: 2.1.4 - PDFgear)
Welcome to Primrose Lake (HKLM-x32\...\WTA-0703f9c0-d1e7-4bfc-bc54-2051f5fff4a9) (Version: 7.0.0.877 - WildTangent) Hidden
Zoom (HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\ZoomUMX) (Version: 5.17.11 (34827) - Zoom Video Communications, Inc.)

Packages:
=========

Amazon Alexa -> C:\Program Files\WindowsApps\57540AMZNMobileLLC.AmazonAlexa_3.25.1156.0_x64__22t9g3sebte08 [2024-02-23] (AMZN Mobile LLC.) [Startup Task]
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m [2024-04-26] (Advanced Micro Devices Inc.) [Startup Task]
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1300.477.0_x64__8wekyb3d8bbwe [2024-04-26] (Microsoft Corporation)
Dropbox-Sonderaktion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.23.0_x64__xbfy0k16fey96 [2024-02-23] (Dropbox Inc.)
Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_1.2.0.0_x64__v10z8vjag6ke6 [2024-02-23] (HP Inc.)
HP Audio Center -> C:\Program Files\WindowsApps\AD2F1837.HPAudioCenter_1.47.308.0_x64__v10z8vjag6ke6 [2024-03-16] (HP Inc.)
HP Enhanced Lighting -> C:\Program Files\WindowsApps\AD2F1837.HPEnhance_1.3.9.0_x64__v10z8vjag6ke6 [2024-02-23] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.5.1.0_x64__v10z8vjag6ke6 [2024-04-17] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.3.7.0_x64__v10z8vjag6ke6 [2024-02-23] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_152.1.1099.0_x64__v10z8vjag6ke6 [2024-03-16] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.34.32.0_x64__v10z8vjag6ke6 [2024-04-26] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6 [2024-04-27] (HP Inc.)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_53.21110.548.0_x64__8wekyb3d8bbwe [2024-03-16] (Microsoft Corporation)
Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.1.61781.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.91.0_x64__8wekyb3d8bbwe [2024-04-17] (Microsoft Corporation)
Microsoft.Windows.Ai.Copilot.Provider -> C:\Program Files\WindowsApps\Microsoft.Windows.Ai.Copilot.Provider_1.0.3.0_neutral__8wekyb3d8bbwe [2024-04-26] (Microsoft Corporation)
Microsoft.WindowsAppRuntime.CBS -> C:\windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2024-03-16] (Microsoft Corporation)
MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24041.33.0_x64__cw5n1h2txyewy [2024-04-26] (Microsoft Windows) [Startup Task]
myHP -> C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6 [2024-04-27] (HP Inc.) [Startup Task]
WinAppRuntime.Main.1.4 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.4_4000.1136.2333.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_5001.95.533.0_x64__8wekyb3d8bbwe [2024-04-26] (Microsoft Corp.)
Windows App Runtime DDLM 4000.1082.2259.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1082.2259.0-x6_4000.1082.2259.0_x64__8wekyb3d8bbwe [2024-04-17] (Microsoft Corporation)
Windows App Runtime DDLM 4000.1082.2259.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1082.2259.0-x8_4000.1082.2259.0_x86__8wekyb3d8bbwe [2024-04-17] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x6_4000.964.11.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x8_4000.964.11.0_x86__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2024-04-27] (Microsoft Windows)
Windows Feature Experience Pack -> C:\windows\SystemApps\MicrosoftWindows.Client.LKG_cw5n1h2txyewy [2024-04-27] (Microsoft Windows)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon.com.lnk -> C:\Program Files (x86)\Online Services\Amazon\WizLink.exe () -> hxxp://www.amazon.com/gp/ubp/oneButton/config/redirectHome?tagbase=hpga1-ubpl&ref=aagateway-taskbar-hp

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2024-04-27 10:21 - 2024-04-27 10:21 - 000432128 _____ (HP Inc.) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\LauncherSDK\58e873e73a7080970bb793aa6f39dd73\LauncherSDK.ni.dll
2024-04-18 07:15 - 2024-04-18 07:15 - 000037888 _____ (HP Inc.) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\Logging\981d0020e47687911d5c614cba329bf1\Logging.ni.dll
2024-04-27 10:21 - 2024-04-27 10:21 - 000152576 _____ (HP Inc.) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\RpcClient\9b87e2951e5c8721bcf527e7754f7496\RpcClient.ni.dll
2024-04-27 10:21 - 2024-04-27 10:21 - 000118272 _____ (HP Inc.) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\WMISDK\eaa5211674e7ae11d4528e3d3bc9388b\WMISDK.ni.dll
2024-04-27 10:21 - 2024-04-27 10:21 - 003884544 _____ (Newtonsoft) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\Newtonsoft.Json\23111129c4fa2045078fdba5e71eb1eb\Newtonsoft.Json.ni.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\localhost -> localhost

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2022-05-07 07:24 - 2022-05-07 07:22 - 000000824 _____ C:\windows\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\HP Backgrounds\backgroundDefault.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\StartupApproved\StartupFolder: => "SearchEngineOptimizer.lnk"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{C50557F9-3510-4A05-A2ED-F2471BB5592B}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0F91AD0E-1ABA-455C-81FA-6BD5C6F70A55}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D189544D-1729-4942-8A47-76E0A59938BD}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{49E5F31A-AA3D-4937-84B7-79041DA8E114}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{508910A9-7935-4DB3-9DB7-0C6F02BD4161}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{9A68590A-35CB-4C56-B002-A95BE7A96617}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{628FBF04-D874-474E-9921-222BE934EBCF}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{7C913969-4D19-4D43-A7DC-7A7E9C95995B}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{CB187B70-B75E-43B8-89D8-1C6D10870086}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{295C0690-5D06-4A03-ACF4-69B20C2168D8}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{D0DF80F6-6222-48EF-B70C-9C2AD45F8B9F}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{2B53B742-A937-4B77-8B1C-522D6B787EB9}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{3366F2D5-84BE-4C7A-B66B-D55E03872275}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{77E6D11D-DF3B-4D0B-9BB6-203FE5D99E1C}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{3177C57A-C782-484C-925A-3DDAFF0D1419}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{4E94D6D3-4127-4925-9B59-F5CFE4B0BCFB}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{5CCB5A57-F383-4A3D-B842-90412C78ED5E}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{63B874B4-4B1B-4E98-9603-F7426D3F9F37}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{7658927C-5A6D-4D11-9923-28EF9A3149C2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3F64207A-EB77-4FCF-9246-9DF2844ADD66}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{361A901F-9076-46DE-8077-1B34D1A04E51}] => (Allow) C:\Users\awg-p\AppData\Local\Programs\Opera\107.0.5045.36\opera.exe => Keine Datei
FirewallRules: [{A0B08BB9-2262-4CA4-B498-7C1A4550F007}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{070D8FE2-DE6F-4073-B6B5-7EB113285406}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{12E22497-4AAB-4AA8-808D-92C1266FD17D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{154CDB5E-7557-437F-8FC4-B98EE3C3A093}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2BA2B188-0EAB-4443-8158-E83E6E94C22F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EA674CD3-7C69-4A2E-9DFD-4E0E6C2C5F59}] => (Allow) C:\Users\awg-p\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{5A18F335-5E0D-4D05-B135-2B956E88B788}] => (Allow) C:\Users\awg-p\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{36407E84-F6BA-42EE-A2B5-962470E9767E}] => (Allow) C:\Users\awg-p\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{23B4B4B2-1D08-42AE-966C-8ADA1F1144C8}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

26-04-2024 17:58:13 Windows Update
27-04-2024 17:32:46 AdwCleaner_BeforeCleaning_27/04/2024_17:32:45
27-04-2024 17:36:28 AdwCleaner_BeforeCleaning_27/04/2024_17:36:28

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (04/27/2024 07:40:16 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Name der fehlerhaften Anwendung: MpDefenderCoreService.exe, Version: 4.18.24040.1, Zeitstempel: 0xdf33d040
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.22621.3374, Zeitstempel: 0xeae8eecc
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000000000008ebdf
ID des fehlerhaften Prozesses: 0x0x1384
Startzeit der fehlerhaften Anwendung: 0x0x1da98c9f69b090e
Pfad der fehlerhaften Anwendung: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpDefenderCoreService.exe
Pfad des fehlerhaften Moduls: C:\windows\SYSTEM32\ntdll.dll
Berichtskennung: 882f4069-8f1d-467d-9a89-df98ae105074
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/27/2024 07:40:14 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Name der fehlerhaften Anwendung: svchost.exe_hns, Version: 10.0.22621.1, Zeitstempel: 0x6dc5c2a5
Name des fehlerhaften Moduls: hostnetsvc.dll, Version: 10.0.22621.3527, Zeitstempel: 0x3ce8c55f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000005f6ef
ID des fehlerhaften Prozesses: 0x0xc18
Startzeit der fehlerhaften Anwendung: 0x0x1da98c9f5c82084
Pfad der fehlerhaften Anwendung: C:\windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: c:\windows\system32\hostnetsvc.dll
Berichtskennung: 4edbc6e3-84d5-4d62-ae99-34dc74c7409f
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/27/2024 07:38:50 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren..

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren..

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren..


Systemfehler:
=============
Error: (04/27/2024 07:52:09 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: )
Description: Für den Miniport "Microsoft Wi-Fi Direct Virtual Adapter #2, {5c10fc0c-ba9e-4d38-85ad-a095e0d659ca}" ist das Ereignis "74" aufgetreten.

Error: (04/27/2024 07:42:45 PM) (Source: DCOM) (EventID: 10010) (User: PLANIG)
Description: Der Server "Microsoft.AAD.BrokerPlugin_1000.19580.1000.0_neutral_neutral_cw5n1h2txyewy!Windows.Security.Authentication.Web.Core.BackgroundGetTokenTask.ClassId.WebAccountProvider" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (04/27/2024 07:40:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "hns" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/27/2024 07:40:14 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des Assistenten für das Sprachpaket-Setup. Führen Sie einen Neustart des Systems aus, und führen Sie den Assistenten erneut aus.

Error: (04/27/2024 07:38:34 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/27/2024 07:38:34 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "HP Insights Analytics" wurde unerwartet beendet. Dies ist bereits 3 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 90000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/27/2024 07:38:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "HP App Helper HSA Service" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (04/27/2024 07:38:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "HP Diagnostics HSA Service" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.


Windows Defender:
================
Date: 2024-04-27 19:25:58
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {C65D64F4-0296-48DB-BAFC-153EBB79D322}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

CodeIntegrity:
===============
Date: 2024-04-27 19:40:19
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system. 

Date: 2024-04-27 16:48:00
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\McAfee\wps\1.16.194.1\mc-sec-plugin-x64.dll that did not meet the Windows signing level requirements. 


==================== Speicherinformationen =========================== 

BIOS: AMI F.07 10/26/2023
Hauptplatine: HP 8B4E
Prozessor: AMD Ryzen 5 7520U with Radeon Graphics 
Prozentuale Nutzung des RAM: 32%
Installierter physikalischer RAM: 15631.41 MB
Verfügbarer physikalischer RAM: 10538.02 MB
Summe virtueller Speicher: 16655.41 MB
Verfügbarer virtueller Speicher: 9662.92 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:952.95 GB) (Free:887.77 GB) (Model: WD PC SN560 SDDPNQE-1T00-1006) (Protected) NTFS

\\?\Volume{a46c9c83-276a-49a0-9d97-191bf24071e9}\ (Windows RE tools) (Fixed) (Total:0.64 GB) (Free:0.06 GB) NTFS
\\?\Volume{da37104b-a010-42b3-8019-6bb02a24d239}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.16 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: E8E82706)

Partition: GPT.

==================== Ende von Addition.txt =======================

cosinus · 27.04.2024, 19:14

Das sieht besser aus, aber das Firefoxprofil gefällt mir noch nicht.

Firefox-Neuinstallation

Bitte den Firefox komplett neu installieren. Sichere - falls wichtig - vorher wichtige Lesezeichen, gespeicherte Passwörter etc.

1. aktuelles Firefox-Setup (für 64-Bit-Windows) runterladen
2. Firefox deinstallieren
3. den Ordner C:\Programme\Mozilla Firefox manuell löschen falls noch vorhanden
4. Firefox neu installieren über die in (1) heruntergeladene Setupdatei
5. Anschließend nochmal ein neues Profil erstellen siehe Profilverwaltung von Firefox

Chris0079 · 27.04.2024, 19:39

erledigt...

hier nochmal die neuen Dateien:

FRST

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 19.04.2024 01
durchgeführt von awg-p (Administrator) auf PLANIG (HP HP All-in-One Desktop 27-cr0xxx) (27-04-2024 20:37:45)
Gestartet von C:\Users\awg-p\Desktop\FRST64.exe
Geladene Profile: awg-p
Plattform: Microsoft Windows 11 Home Version 23H2 22631.3527 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\amdow.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe <6>
(DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\atieclxx.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\win32\HP.ContextAware.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <14>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(SECOMN64.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOCL64.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\atiesrxx.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_c3ef1d31421e9aea\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\SysInfoCap.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe <2>
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPEnhance_1.3.9.0_x64__v10z8vjag6ke6\Win32\HPEnhancedLighting.Bg.exe
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\Run: [MicrosoftEdgeAutoLaunch_ED77CFC3E4CF64C17B3D9770088A7CBF] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4082112 2024-04-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [3306528 2024-04-27] (Microsoft Corporation -> Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {3343565B-1030-4748-808A-EC02E07FDF7E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [703536 2024-03-25] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {544776CD-BEDD-42F9-8DC4-42C6EB604DF5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2024-03-25] (HP Inc. -> HP Inc.)
Task: {359609F1-4D9B-4DB0-95F7-C3E4788FACFC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-03-25] (HP Inc. -> HP Inc.)
Task: {C9B6A68A-74B1-4C06-8FA6-D91E92EF36D7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-03-25] (HP Inc. -> HP Inc.)
Task: {4241405A-317D-4DDC-867D-C7FA5C4FFCC0} - System32\Tasks\HP\Consent Manager Launcher => C:\windows\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {165AEAAD-8E52-4BE4-A4EC-A396C8AE03B8} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21916864 2024-02-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {1A6C06C7-E7B6-4DF3-92A4-32679A3B8A49} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21916864 2024-02-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0D5E5F4-7ED3-4B3E-8AB8-C306B4192D93} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141384 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {10DEF74D-2C15-4B2B-BFCD-748C2EF90102} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141384 2024-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {E7E0A0C4-04AE-4236-88E4-B0794CC589DF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpCmdRun.exe [1658408 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6FE6ADFD-7B24-4F63-95F7-78E3039596C1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpCmdRun.exe [1658408 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B27DF268-97E7-4F29-83F0-D45A6DBCD832} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpCmdRun.exe [1658408 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F15332B1-5EDB-4F55-8CD8-6F7BF3D51C78} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpCmdRun.exe [1658408 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {05B42EFA-9CB3-4BF7-852F-E46DD2038FE0} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3285610310-1678739213-2996767195-1003 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [673696 2024-04-19] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {CA017B5D-6F42-4C79-AF6F-A3419916FC96} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34208 2024-04-19] (Mozilla Corporation -> Mozilla Foundation)
Task: {77CC6AF0-1DCA-4610-89D4-BBE7F548B47C} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4207120 2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {249785ED-6CE0-420E-A636-BD140E97DA3A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3285610310-1678739213-2996767195-1003 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4207120 2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {824C5B62-6C03-481A-A775-3CD0AD3BD675} - System32\Tasks\Opera scheduled Autoupdate 1708704095 => C:\Users\awg-p\AppData\Local\Programs\Opera\launcher.exe  --scheduledautoupdate $(Arg0) (Keine Datei)
Task: {FACB55F7-FC83-4500-ACF5-0C7AC57A5D13} - System32\Tasks\RtkAudUService64_BG => C:\windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe [1896960 2024-01-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2bd10b22-e503-4e6c-87d6-d57ffdeba0eb}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2bd10b22-e503-4e6c-87d6-d57ffdeba0eb}: [DhcpDomain] speedport.ip
Tcpip\..\Interfaces\{2bd10b22-e503-4e6c-87d6-d57ffdeba0eb}\1405F533939313638343433373: [DhcpNameServer] 10.10.100.254

Edge: 
=======
Edge Profile: C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-27]
Edge Extension: (Google Docs Offline) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-27]
Edge Extension: (Edge relevant text changes) - C:\Users\awg-p\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-04-27]

FireFox:
========
FF DefaultProfile: jxpyuy1c.default
FF ProfilePath: C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\jxpyuy1c.default [2024-04-27]
FF NewTab: Mozilla\Firefox\Profiles\jxpyuy1c.default -> hxxps://mynewtab.co?pId=CH220501&iDate=022324&searchEngine=bing
FF ProfilePath: C:\Users\awg-p\AppData\Roaming\Mozilla\Firefox\Profiles\eef7328t.default-release-1714242988390 [2024-04-27]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9202360 2024-02-28] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncHelper.exe [3507728 2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
R2 HPAppHelperCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\AppHelperCap.exe [895536 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\DiagsCap.exe [894400 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe [890928 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [234968 2024-03-16] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\SysInfoCap.exe [894912 2024-03-04] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_c3ef1d31421e9aea\x64\TouchpointAnalyticsClientService.exe [493216 2024-03-03] (HP Inc. -> HP Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpDefenderCoreService.exe [1488888 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.070.0407.0003\OneDriveUpdaterService.exe [3848208 2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\NisSrv.exe [3236712 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MsMpEng.exe [133600 2024-04-27] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 amdfendrmgr; C:\windows\System32\drivers\amdfendrmgr.sys [36736 2023-05-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amduw23g; C:\windows\System32\DriverStore\FileRepository\u0400805.inf_amd64_413b1e20f1db5673\B400360\amdkmdag.sys [106589304 2024-03-03] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R0 fse; C:\windows\System32\drivers\fse.sys [218592 2024-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 HPCustomCapDriver; C:\windows\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [26648 2022-06-24] (HP Inc. -> HP Inc.)
S3 rtcx21; C:\windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
S3 vmbusproxy; C:\windows\system32\drivers\vmbusproxy.sys [94208 2024-02-23] (Microsoft Windows -> )
R0 WdBoot; C:\windows\System32\drivers\wd\WdBoot.sys [20928 2024-04-27] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\windows\System32\drivers\wd\WdFilter.sys [601376 2024-04-27] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\windows\System32\drivers\wd\WdNisDrv.sys [105760 2024-04-27] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-04-27 20:35 - 2024-04-27 20:36 - 000000000 ____D C:\windows\system32\Tasks\Mozilla
2024-04-27 20:35 - 2024-04-27 20:35 - 000002041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Privater Modus.lnk
2024-04-27 20:35 - 2024-04-27 20:35 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-04-27 20:35 - 2024-04-27 20:35 - 000001000 _____ C:\Users\Public\Desktop\Firefox.lnk
2024-04-27 20:35 - 2024-04-27 20:35 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-04-27 20:35 - 2024-04-27 20:35 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-04-27 20:34 - 2024-04-27 20:35 - 063855008 _____ (Mozilla) C:\Users\awg-p\Downloads\Firefox Setup 125.0.2.exe
2024-04-27 19:47 - 2024-04-27 19:47 - 000720948 _____ C:\windows\system32\perfh007.dat
2024-04-27 19:47 - 2024-04-27 19:47 - 000149040 _____ C:\windows\system32\perfc007.dat
2024-04-27 19:26 - 2024-04-27 19:28 - 000000000 ___HD C:\$WinREAgent
2024-04-27 17:36 - 2024-04-27 17:36 - 008790880 _____ (Malwarebytes) C:\Users\awg-p\Downloads\adwcleaner(1).exe
2024-04-27 17:35 - 2024-04-27 17:35 - 002589624 _____ (Malwarebytes) C:\Users\awg-p\Downloads\MBSetup(1).exe
2024-04-27 17:31 - 2024-04-27 17:32 - 000000000 ____D C:\AdwCleaner
2024-04-27 17:31 - 2024-04-27 17:31 - 008790880 _____ (Malwarebytes) C:\Users\awg-p\Downloads\adwcleaner.exe
2024-04-27 16:50 - 2024-04-27 16:50 - 000000000 ___HD C:\OneDriveTemp
2024-04-27 14:55 - 2024-04-27 15:01 - 000000000 ___HD C:\$WINDOWS.~BT
2024-04-27 11:01 - 2024-04-27 20:38 - 000019601 _____ C:\Users\awg-p\Desktop\FRST.txt
2024-04-27 11:01 - 2024-04-27 20:37 - 000000000 ____D C:\FRST
2024-04-27 10:50 - 2024-04-27 10:50 - 002394112 _____ (Farbar) C:\Users\awg-p\Downloads\FRST64.exe
2024-04-27 10:50 - 2024-04-27 10:50 - 002394112 _____ (Farbar) C:\Users\awg-p\Desktop\FRST64.exe
2024-04-27 10:43 - 2024-04-27 10:43 - 000000000 ____D C:\KPRM
2024-04-27 10:26 - 2024-04-27 10:26 - 002589624 _____ (Malwarebytes) C:\Users\awg-p\Downloads\MBSetup.exe
2024-04-17 19:04 - 2024-04-17 19:04 - 000000000 ____D C:\windows\SysWOW64\DDFs
2024-04-17 19:02 - 2024-03-03 21:24 - 002100864 _____ C:\windows\system32\vulkaninfo-1-999-0-0-0.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 002100864 _____ C:\windows\system32\vulkaninfo.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 001659008 _____ C:\windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 001659008 _____ C:\windows\SysWOW64\vulkaninfo.exe
2024-04-17 19:02 - 2024-03-03 21:24 - 001466000 _____ C:\windows\system32\vulkan-1-999-0-0-0.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 001466000 _____ C:\windows\system32\vulkan-1.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 001307344 _____ C:\windows\SysWOW64\vulkan-1-999-0-0-0.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 001307344 _____ C:\windows\SysWOW64\vulkan-1.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 000607872 _____ C:\windows\system32\GameManager64.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 000548992 _____ C:\windows\system32\libsmi_guest.dll
2024-04-17 19:02 - 2024-03-03 21:24 - 000524416 _____ C:\windows\system32\libsmi_host.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000975488 _____ (AMD) C:\windows\system32\atieclxx.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000537104 _____ C:\windows\system32\atieah64.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000503824 _____ C:\windows\system32\EEURestart.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000462464 _____ C:\windows\SysWOW64\GameManager32.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000406032 _____ C:\windows\SysWOW64\atieah32.exe
2024-04-17 19:02 - 2024-03-03 21:23 - 000266880 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atig6txx.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000228880 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atigktxx.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000196008 _____ (AMD) C:\windows\system32\atimuixx.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000184336 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atisamu64.dll
2024-04-17 19:02 - 2024-03-03 21:23 - 000148496 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atisamu32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 011756928 _____ C:\windows\system32\amdsmi.exe
2024-04-17 19:02 - 2024-03-03 21:22 - 001617320 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\atiadlxy.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 001617320 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\atiadlxx.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000473104 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\atidemgy.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000210752 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\aticfx64.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000174672 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\aticfx32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000138768 _____ C:\windows\system32\amdxc64.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000118392 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amfrt32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000114704 _____ C:\windows\SysWOW64\amdxc32.dll
2024-04-17 19:02 - 2024-03-03 21:22 - 000074768 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\ati2erec.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 002245136 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdsasrv64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 001338384 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdsacli64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 001059344 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdsacli32.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000943528 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdlvr64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000771096 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdlvr32.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000569984 _____ C:\windows\system32\amdgfxinfo64.dll
2024-04-17 19:02 - 2024-03-03 21:21 - 000433792 _____ C:\windows\SysWOW64\amdgfxinfo32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 088606336 _____ C:\windows\SysWOW64\amd_comgr32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 004385296 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdadlx64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 004190224 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\amdadlx32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000801184 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\Rapidfire64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000678304 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\Rapidfire.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000542624 _____ C:\windows\system32\dgtrayicon.exe
2024-04-17 19:02 - 2024-03-03 21:20 - 000524816 _____ (Khronos Group) C:\windows\system32\OpenCL.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000471056 _____ C:\windows\system32\amdlogum.exe
2024-04-17 19:02 - 2024-03-03 21:20 - 000390672 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000337864 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdfendr.stz
2024-04-17 19:02 - 2024-03-03 21:20 - 000167152 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atimpc64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000158768 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\atidxx64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000138224 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atimpc32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000132400 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\atidxx32.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000102928 _____ C:\windows\system32\clinfo.exe
2024-04-17 19:02 - 2024-03-03 21:20 - 000056264 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\amdfendrmgr.stz
2024-04-17 19:02 - 2024-03-03 21:20 - 000051112 _____ (Advanced Micro Devices, Inc.) C:\windows\system32\RapidFireServer64.dll
2024-04-17 19:02 - 2024-03-03 21:20 - 000048032 _____ (Advanced Micro Devices, Inc.) C:\windows\SysWOW64\RapidFireServer.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 105400848 _____ C:\windows\system32\amd_comgr.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 019435648 _____ (Advanced Micro Devices Inc.) C:\windows\system32\amdhip64.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 001736088 _____ (AMD) C:\windows\system32\amf-mft-mjpeg-decoder64.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 001411560 _____ (AMD) C:\windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000572048 _____ C:\windows\system32\amdmiracast.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000176656 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdmmcl6.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000167264 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdpcom64.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000145536 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdmmcl.dll
2024-04-17 19:02 - 2024-03-03 21:19 - 000138336 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\amdpcom32.dll
2024-04-17 19:02 - 2024-03-03 21:18 - 000177696 _____ (Advanced Micro Devices, Inc. ) C:\windows\system32\amdave64.dll
2024-04-17 19:02 - 2024-03-03 21:18 - 000152240 _____ (Advanced Micro Devices, Inc. ) C:\windows\SysWOW64\amdave32.dll
2024-04-17 19:02 - 2024-03-03 20:38 - 110177296 _____ C:\windows\system32\amdxc64.so
2024-04-17 18:59 - 2024-04-17 18:59 - 000024320 _____ C:\windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-04-17 18:59 - 2024-04-17 18:59 - 000024320 _____ C:\windows\system32\IntegratedServicesRegionPolicySet.json
2024-04-17 18:37 - 2024-03-12 01:26 - 006135240 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RTKVHD64.sys

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-04-27 20:38 - 2024-02-23 18:00 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-04-27 20:05 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemTemp
2024-04-27 20:04 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-04-27 19:55 - 2022-05-07 07:22 - 000000000 ____D C:\windows\INF
2024-04-27 19:54 - 2024-02-25 17:59 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-04-27 19:54 - 2024-02-23 18:48 - 000003194 _____ C:\windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-04-27 19:54 - 2024-02-23 18:48 - 000002155 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-04-27 19:54 - 2024-02-23 14:00 - 000003596 _____ C:\windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3285610310-1678739213-2996767195-1003
2024-04-27 19:52 - 2022-11-03 06:32 - 000000000 ____D C:\windows\system32\SleepStudy
2024-04-27 19:47 - 2022-11-03 06:39 - 001713906 _____ C:\windows\system32\PerfStringBackup.INI
2024-04-27 19:43 - 2023-07-04 02:13 - 000001623 _____ C:\windows\system32\config\VSMIDK
2024-04-27 19:43 - 2022-11-03 06:32 - 000012288 ___SH C:\DumpStack.log.tmp
2024-04-27 19:43 - 2022-11-03 06:32 - 000000006 ____H C:\windows\Tasks\SA.DAT
2024-04-27 19:43 - 2022-05-07 07:17 - 000524288 _____ C:\windows\system32\config\BBI
2024-04-27 19:41 - 2022-05-07 07:24 - 000000000 ____D C:\windows\AppReadiness
2024-04-27 19:40 - 2022-11-03 06:32 - 000592464 _____ C:\windows\system32\FNTCACHE.DAT
2024-04-27 19:39 - 2023-10-12 06:16 - 000000000 ____D C:\windows\TextInput
2024-04-27 19:39 - 2023-10-12 06:16 - 000000000 ____D C:\windows\HoloShell
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\SysWOW64\F12
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\SysWOW64\DiagSvcs
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\UNP
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\F12
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\DiagSvcs
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___RD C:\windows\PrintDialog
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ___RD C:\windows\ImmersiveControlPanel
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\UUS
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\WinMetadata
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\PerceptionSimulation
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\Dism
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemResources
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemApps
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\WinMetadata
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\WinBioPlugIns
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SystemResetPlatform
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\ShellExperiences
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Sgrm
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\PerceptionSimulation
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\oobe
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\migwiz
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\HealthAttestationClient
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Dism
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\appraiser
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\ShellExperiences
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\ShellComponents
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\BrowserCore
2024-04-27 19:39 - 2022-05-07 07:24 - 000000000 ____D C:\windows\bcastdvr
2024-04-27 19:39 - 2022-05-07 07:17 - 000000000 ____D C:\windows\servicing
2024-04-27 19:38 - 2024-02-23 13:40 - 000000000 ____D C:\Users\awg-p
2024-04-27 19:33 - 2022-05-07 07:17 - 000000000 ____D C:\windows\CbsTemp
2024-04-27 19:31 - 2022-11-03 06:34 - 003214336 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintConfig.dll
2024-04-27 19:15 - 2022-11-03 06:32 - 000000000 ____D C:\windows\system32\Drivers\wd
2024-04-27 17:37 - 2023-07-04 02:19 - 000000000 ____D C:\ProgramData\HP
2024-04-27 17:32 - 2023-10-11 20:47 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2024-04-27 17:32 - 2023-07-04 03:09 - 000000000 ___HD C:\hp
2024-04-27 16:50 - 2024-02-23 14:00 - 000000000 ___RD C:\Users\awg-p\OneDrive
2024-04-27 16:48 - 2024-02-23 13:40 - 000000000 ____D C:\Users\awg-p\AppData\Local\Packages
2024-04-27 16:48 - 2022-11-03 06:35 - 000000000 ____D C:\ProgramData\Packages
2024-04-27 16:48 - 2022-05-07 07:24 - 000000000 ___HD C:\windows\ELAMBKUP
2024-04-27 16:48 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-04-27 16:47 - 2024-02-23 18:00 - 000000000 ____D C:\Users\awg-p\AppData\Roaming\Lavasoft
2024-04-27 16:46 - 2023-07-04 02:19 - 000000000 ____D C:\Program Files\HP
2024-04-27 14:56 - 2022-11-03 07:29 - 000000000 ____D C:\windows\Panther
2024-04-27 10:53 - 2024-02-23 13:59 - 000000000 ____D C:\Users\awg-p\AppData\Local\D3DSCache
2024-04-26 21:51 - 2023-10-11 20:33 - 000074298 _____ C:\windows\diagwrn.xml
2024-04-26 21:51 - 2023-10-11 20:33 - 000074298 _____ C:\windows\diagerr.xml
2024-04-26 18:50 - 2024-02-23 14:17 - 000000000 ____D C:\windows\system32\Tasks\Hewlett-Packard
2024-04-26 18:05 - 2024-02-23 14:23 - 000000000 ____D C:\Users\awg-p\AppData\Local\CrashDumps
2024-04-26 17:59 - 2022-11-03 06:32 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-04-26 17:59 - 2022-11-03 06:32 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-04-26 17:49 - 2024-02-23 13:59 - 000000000 ____D C:\Users\awg-p\AppData\Local\AMD
2024-04-18 03:00 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-04-17 19:04 - 2024-02-23 13:54 - 000000000 ____D C:\windows\system32\Microsoft-Edge-WebView
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SecureBootUpdates
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\DDFs
2024-04-17 19:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\Provisioning
2024-04-17 18:44 - 2024-02-23 16:15 - 000000000 ____D C:\windows\system32\MRT
2024-04-17 18:43 - 2024-02-23 16:15 - 192651728 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2024-04-17 18:38 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SecurityHealth
2024-04-17 18:37 - 2024-02-23 18:42 - 000000000 ____D C:\Program Files\Microsoft Office
2024-04-17 18:22 - 2022-11-03 06:32 - 000003756 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-04-17 18:22 - 2022-11-03 06:32 - 000003632 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

Addition:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 19.04.2024 01
durchgeführt von awg-p (27-04-2024 20:38:50)
Gestartet von C:\Users\awg-p\Desktop
Microsoft Windows 11 Home Version 23H2 22631.3527 (X64) (2024-02-23 09:10:13)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-3285610310-1678739213-2996767195-500 - Administrator - Disabled)
awg-p (S-1-5-21-3285610310-1678739213-2996767195-1003 - Administrator - Enabled) => C:\Users\awg-p
DefaultAccount (S-1-5-21-3285610310-1678739213-2996767195-503 - Limited - Disabled)
Gast (S-1-5-21-3285610310-1678739213-2996767195-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3285610310-1678739213-2996767195-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee (Enabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}
FW: McAfee (Enabled) {2FDD6819-222E-5E9F-F5E7-E13A2241D502}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

BitCleaner (HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\BitCleaner) (Version: 1.0.8.0 - BinaryLabs LTD) <==== ACHTUNG
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 124.0.2478.51 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 123.0.2420.97 - Microsoft Corporation)
Microsoft Office LTSC Professional Plus 2021 - de-de (HKLM\...\ProPlus2021Volume - de-de) (Version: 16.0.14332.20685 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.070.0407.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 125.0.2 (x64 de)) (Version: 125.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 125.0.2 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20685 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20685 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.14332.20624 - Microsoft Corporation) Hidden
PDFgear 2.1.4 (HKLM\...\{7DACF63A-4EE4-4837-9AF9-C65D4509FFB4}_is1) (Version: 2.1.4 - PDFgear)
Welcome to Primrose Lake (HKLM-x32\...\WTA-0703f9c0-d1e7-4bfc-bc54-2051f5fff4a9) (Version: 7.0.0.877 - WildTangent) Hidden
Zoom (HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\ZoomUMX) (Version: 5.17.11 (34827) - Zoom Video Communications, Inc.)

Packages:
=========

Amazon Alexa -> C:\Program Files\WindowsApps\57540AMZNMobileLLC.AmazonAlexa_3.25.1156.0_x64__22t9g3sebte08 [2024-02-23] (AMZN Mobile LLC.) [Startup Task]
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.20029.0_x64__0a9344xs7nr4m [2024-04-26] (Advanced Micro Devices Inc.) [Startup Task]
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1300.477.0_x64__8wekyb3d8bbwe [2024-04-26] (Microsoft Corporation)
Dropbox-Sonderaktion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.23.0_x64__xbfy0k16fey96 [2024-02-23] (Dropbox Inc.)
Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_1.2.0.0_x64__v10z8vjag6ke6 [2024-02-23] (HP Inc.)
HP Audio Center -> C:\Program Files\WindowsApps\AD2F1837.HPAudioCenter_1.47.308.0_x64__v10z8vjag6ke6 [2024-03-16] (HP Inc.)
HP Enhanced Lighting -> C:\Program Files\WindowsApps\AD2F1837.HPEnhance_1.3.9.0_x64__v10z8vjag6ke6 [2024-02-23] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.5.1.0_x64__v10z8vjag6ke6 [2024-04-17] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.3.7.0_x64__v10z8vjag6ke6 [2024-02-23] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_152.1.1099.0_x64__v10z8vjag6ke6 [2024-03-16] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.34.32.0_x64__v10z8vjag6ke6 [2024-04-26] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.6.0_x64__v10z8vjag6ke6 [2024-04-27] (HP Inc.)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_53.21110.548.0_x64__8wekyb3d8bbwe [2024-03-16] (Microsoft Corporation)
Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.1.61781.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.91.0_x64__8wekyb3d8bbwe [2024-04-17] (Microsoft Corporation)
Microsoft.Windows.Ai.Copilot.Provider -> C:\Program Files\WindowsApps\Microsoft.Windows.Ai.Copilot.Provider_1.0.3.0_neutral__8wekyb3d8bbwe [2024-04-26] (Microsoft Corporation)
Microsoft.WindowsAppRuntime.CBS -> C:\windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2024-03-16] (Microsoft Corporation)
MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24041.33.0_x64__cw5n1h2txyewy [2024-04-26] (Microsoft Windows) [Startup Task]
myHP -> C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6 [2024-04-27] (HP Inc.) [Startup Task]
WinAppRuntime.Main.1.4 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.4_4000.1136.2333.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_5001.95.533.0_x64__8wekyb3d8bbwe [2024-04-26] (Microsoft Corp.)
Windows App Runtime DDLM 4000.1082.2259.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1082.2259.0-x6_4000.1082.2259.0_x64__8wekyb3d8bbwe [2024-04-17] (Microsoft Corporation)
Windows App Runtime DDLM 4000.1082.2259.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1082.2259.0-x8_4000.1082.2259.0_x86__8wekyb3d8bbwe [2024-04-17] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x6_4000.964.11.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x8_4000.964.11.0_x86__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2024-04-27] (Microsoft Windows)
Windows Feature Experience Pack -> C:\windows\SystemApps\MicrosoftWindows.Client.LKG_cw5n1h2txyewy [2024-04-27] (Microsoft Windows)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.070.0407.0003\FileSyncShell64.dll [2024-04-27] (Microsoft Corporation -> Microsoft Corporation)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon.com.lnk -> C:\Program Files (x86)\Online Services\Amazon\WizLink.exe () -> hxxp://www.amazon.com/gp/ubp/oneButton/config/redirectHome?tagbase=hpga1-ubpl&ref=aagateway-taskbar-hp

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2024-04-27 10:21 - 2024-04-27 10:21 - 000432128 _____ (HP Inc.) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\LauncherSDK\58e873e73a7080970bb793aa6f39dd73\LauncherSDK.ni.dll
2024-04-18 07:15 - 2024-04-18 07:15 - 000037888 _____ (HP Inc.) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\Logging\981d0020e47687911d5c614cba329bf1\Logging.ni.dll
2024-04-27 10:21 - 2024-04-27 10:21 - 000152576 _____ (HP Inc.) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\RpcClient\9b87e2951e5c8721bcf527e7754f7496\RpcClient.ni.dll
2024-04-27 10:21 - 2024-04-27 10:21 - 000118272 _____ (HP Inc.) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\WMISDK\eaa5211674e7ae11d4528e3d3bc9388b\WMISDK.ni.dll
2024-04-27 10:21 - 2024-04-27 10:21 - 003884544 _____ (Newtonsoft) [Datei ist nicht signiert] C:\windows\assembly\NativeImages_v4.0.30319_64\Newtonsoft.Json\23111129c4fa2045078fdba5e71eb1eb\Newtonsoft.Json.ni.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-02-23] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\localhost -> localhost

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2022-05-07 07:24 - 2022-05-07 07:22 - 000000824 _____ C:\windows\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\HP Backgrounds\backgroundDefault.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKU\S-1-5-21-3285610310-1678739213-2996767195-1003\...\StartupApproved\StartupFolder: => "SearchEngineOptimizer.lnk"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{C50557F9-3510-4A05-A2ED-F2471BB5592B}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0F91AD0E-1ABA-455C-81FA-6BD5C6F70A55}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D189544D-1729-4942-8A47-76E0A59938BD}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{49E5F31A-AA3D-4937-84B7-79041DA8E114}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{508910A9-7935-4DB3-9DB7-0C6F02BD4161}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{9A68590A-35CB-4C56-B002-A95BE7A96617}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{628FBF04-D874-474E-9921-222BE934EBCF}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{7C913969-4D19-4D43-A7DC-7A7E9C95995B}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{CB187B70-B75E-43B8-89D8-1C6D10870086}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{295C0690-5D06-4A03-ACF4-69B20C2168D8}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{D0DF80F6-6222-48EF-B70C-9C2AD45F8B9F}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{2B53B742-A937-4B77-8B1C-522D6B787EB9}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{3366F2D5-84BE-4C7A-B66B-D55E03872275}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{77E6D11D-DF3B-4D0B-9BB6-203FE5D99E1C}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{3177C57A-C782-484C-925A-3DDAFF0D1419}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{4E94D6D3-4127-4925-9B59-F5CFE4B0BCFB}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{5CCB5A57-F383-4A3D-B842-90412C78ED5E}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{63B874B4-4B1B-4E98-9603-F7426D3F9F37}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2401.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{7658927C-5A6D-4D11-9923-28EF9A3149C2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{361A901F-9076-46DE-8077-1B34D1A04E51}] => (Allow) C:\Users\awg-p\AppData\Local\Programs\Opera\107.0.5045.36\opera.exe => Keine Datei
FirewallRules: [{A0B08BB9-2262-4CA4-B498-7C1A4550F007}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{070D8FE2-DE6F-4073-B6B5-7EB113285406}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{12E22497-4AAB-4AA8-808D-92C1266FD17D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{154CDB5E-7557-437F-8FC4-B98EE3C3A093}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2BA2B188-0EAB-4443-8158-E83E6E94C22F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EA674CD3-7C69-4A2E-9DFD-4E0E6C2C5F59}] => (Allow) C:\Users\awg-p\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{5A18F335-5E0D-4D05-B135-2B956E88B788}] => (Allow) C:\Users\awg-p\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{36407E84-F6BA-42EE-A2B5-962470E9767E}] => (Allow) C:\Users\awg-p\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{23B4B4B2-1D08-42AE-966C-8ADA1F1144C8}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

26-04-2024 17:58:13 Windows Update
27-04-2024 17:32:46 AdwCleaner_BeforeCleaning_27/04/2024_17:32:45
27-04-2024 17:36:28 AdwCleaner_BeforeCleaning_27/04/2024_17:36:28

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (04/27/2024 07:40:16 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Name der fehlerhaften Anwendung: MpDefenderCoreService.exe, Version: 4.18.24040.1, Zeitstempel: 0xdf33d040
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.22621.3374, Zeitstempel: 0xeae8eecc
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000000000008ebdf
ID des fehlerhaften Prozesses: 0x0x1384
Startzeit der fehlerhaften Anwendung: 0x0x1da98c9f69b090e
Pfad der fehlerhaften Anwendung: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.1-0\MpDefenderCoreService.exe
Pfad des fehlerhaften Moduls: C:\windows\SYSTEM32\ntdll.dll
Berichtskennung: 882f4069-8f1d-467d-9a89-df98ae105074
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/27/2024 07:40:14 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Name der fehlerhaften Anwendung: svchost.exe_hns, Version: 10.0.22621.1, Zeitstempel: 0x6dc5c2a5
Name des fehlerhaften Moduls: hostnetsvc.dll, Version: 10.0.22621.3527, Zeitstempel: 0x3ce8c55f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000005f6ef
ID des fehlerhaften Prozesses: 0x0xc18
Startzeit der fehlerhaften Anwendung: 0x0x1da98c9f5c82084
Pfad der fehlerhaften Anwendung: C:\windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: c:\windows\system32\hostnetsvc.dll
Berichtskennung: 4edbc6e3-84d5-4d62-ae99-34dc74c7409f
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/27/2024 07:38:50 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren..

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren..

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]

Error: (04/27/2024 04:49:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren..


Systemfehler:
=============
Error: (04/27/2024 08:32:14 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: )
Description: Für den Miniport "Microsoft Wi-Fi Direct Virtual Adapter #2, {5c10fc0c-ba9e-4d38-85ad-a095e0d659ca}" ist das Ereignis "74" aufgetreten.

Error: (04/27/2024 07:52:09 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: )
Description: Für den Miniport "Microsoft Wi-Fi Direct Virtual Adapter #2, {5c10fc0c-ba9e-4d38-85ad-a095e0d659ca}" ist das Ereignis "74" aufgetreten.

Error: (04/27/2024 07:42:45 PM) (Source: DCOM) (EventID: 10010) (User: PLANIG)
Description: Der Server "Microsoft.AAD.BrokerPlugin_1000.19580.1000.0_neutral_neutral_cw5n1h2txyewy!Windows.Security.Authentication.Web.Core.BackgroundGetTokenTask.ClassId.WebAccountProvider" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (04/27/2024 07:40:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "hns" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/27/2024 07:40:14 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des Assistenten für das Sprachpaket-Setup. Führen Sie einen Neustart des Systems aus, und führen Sie den Assistenten erneut aus.

Error: (04/27/2024 07:38:34 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/27/2024 07:38:34 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "HP Insights Analytics" wurde unerwartet beendet. Dies ist bereits 3 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 90000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/27/2024 07:38:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "HP App Helper HSA Service" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.


Windows Defender:
================
Date: 2024-04-27 19:25:58
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {C65D64F4-0296-48DB-BAFC-153EBB79D322}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

CodeIntegrity:
===============
Date: 2024-04-27 19:40:19
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system. 

Date: 2024-04-27 16:48:00
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\McAfee\wps\1.16.194.1\mc-sec-plugin-x64.dll that did not meet the Windows signing level requirements. 


==================== Speicherinformationen =========================== 

BIOS: AMI F.07 10/26/2023
Hauptplatine: HP 8B4E
Prozessor: AMD Ryzen 5 7520U with Radeon Graphics 
Prozentuale Nutzung des RAM: 34%
Installierter physikalischer RAM: 15631.41 MB
Verfügbarer physikalischer RAM: 10161.36 MB
Summe virtueller Speicher: 16655.41 MB
Verfügbarer virtueller Speicher: 9168.94 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:952.95 GB) (Free:887.42 GB) (Model: WD PC SN560 SDDPNQE-1T00-1006) (Protected) NTFS

\\?\Volume{a46c9c83-276a-49a0-9d97-191bf24071e9}\ (Windows RE tools) (Fixed) (Total:0.64 GB) (Free:0.06 GB) NTFS
\\?\Volume{da37104b-a010-42b3-8019-6bb02a24d239}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.16 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: E8E82706)

Partition: GPT.

==================== Ende von Addition.txt =======================

cosinus · 27.04.2024, 19:50

Da ist immer noch dieser Mist drin:

Zitat:

FF NewTab: Mozilla\Firefox\Profiles\jxpyuy1c.default -> hxxps://mynewtab.co?pId=CH220501&iDate=022324&searchEngine=bing

Hast du auch ein neues Profil erstellt und das alte gelöscht?

Chris0079 · 27.04.2024, 19:52

ja, hab ich nach der Anleitung gemacht.
Ich kann aber auch ganz auf den Firefox verzichten und nutze dann Chrome oder sowas?!

27.04.2024, 17:51	#6
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows 11 home: Seo Shell-Benachrichtigungssymbol kann nicht entfernt werden Dann bitte jetzt neue FRST-Logs. __________________ --> Windows 11 home: Seo Shell-Benachrichtigungssymbol kann nicht entfernt werden

27.04.2024, 18:48	#10
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows 11 home: Seo Shell-Benachrichtigungssymbol kann nicht entfernt werden Ok. Rechner nochmal neu starten, dann zwecks Kontrolle neue FRST-Logs. __________________ Logfiles bitte immer in CODE-Tags posten

Windows 11 home: Seo Shell-Benachrichtigungssymbol kann nicht entfernt werden

Log-Analyse und Auswertung: Windows 11 home: Seo Shell-Benachrichtigungssymbol kann nicht entfernt werden