![]() |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Win 10 : WLAN-USB-Sticks nicht migriert - WLAN-Verbindung kann kurz etabliert werden, bricht dann wieder abWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
| | #1 |
| | Win 10 : WLAN-USB-Sticks nicht migriert - WLAN-Verbindung kann kurz etabliert werden, bricht dann wieder ab Hallo liebe Virenjäger, das Problem (nicht auf meinem PC) äußert sich wie folgt, hier der zeitliche Ablauf in Kurzform: 1. Realtek WLAN-Stick funktionierte plötzlich nicht mehr 2. Gerätemanager: Gerät funktioniert, aber in den Ereignissen "nicht migriert" 3. Im Gerätemanager deinstallieren (inkl. Treiber): keine Besserung 4. Windows Update: seit 07/2024 keine Updates mehr gefahren. Updates nachgeholt (Netzwerk per USB-Tethering problemlos möglich) 5. Diverse unnütze Tools (CCleaner, "PC-schneller-macher", etc.) entfernt 6. SFC /SCANNOW: Einige Probleme entfernt, keine Besserung 7. BIOS Update (um eine Version), keine Besserung 8. Alternativen WLAN-Stick (UGreen) ohne mein Beisein installiert, funktioniert nicht. 9. Finde neuen WLAN-Stick als Memory-Stick im Gerätemanager (??). Wieder Ereignismeldung "nicht migriert" 10. Im Gerätemanager deinstallert, Treiber heruntergeladen, über Treibersetup neu installiert 11. Wieder Ereignismeldung "nicht migriert" 12. WLAN-Verbindungsaufbau (Netzwerk sehen und auswählen, Paßwort eingeben, verbinden) dennoch erfolgreich (??) 13. Nach ca. 30 sec WLAN-Verbindung wieder weg (schlechtes Signal ausgeschlossen, Rechner steht 3m neben Fritzbox). Erneuter Aufbau nicht erfolgreich. 14. FRST ausgeführt, Logs siehe unten (FRST.txt in diesem Beitrag, Addition.txt im nächsten) 15. SFC /SCANNOW : keine Integritätsverletzungen Bei Punkt 13 begann ich mich zu fragen ob hier ein Virenbefall vorliegt. Windows Defender zeigt keine Probleme an. Es war auf dem Rechner mal ein Avira Antivir, wurde entfernt. FRST.txt: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20-11-2025
durchgeführt von Horst (Administrator) auf DESKTOP-7PAH99J (Gigabyte Technology Co., Ltd. Q170M-D3H) (04-01-2026 12:00:17)
Gestartet von B:\SIK Handy Papa 2024-10-26\EINLADUNGEN - ERREIGNISSE\Downloads\scoped_dir9560_2142170738\FRST64.exe
Geladene Profile: Horst
Plattform: Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser nicht gefunden!
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_appbroker.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe
(C:\Program Files\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Program Files\Opera\125.0.5729.49\opera_crashreporter.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2587.9.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.96\msedgewebview2.exe <6>
(DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxEM.exe
(explorer.exe ->) (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH) C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck_Broker.exe
(explorer.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> WhatsApp.Root) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2587.9.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msdt.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Program Files\Opera\opera.exe <29>
(Geek Software GmbH -> geek software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(PrintCtrl.exe ->) (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe <2>
(services.exe ->) () [Datei ist nicht signiert] C:\Windows\System32\atwtusb.exe <2>
(services.exe ->) (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (AIC Semiconductor (Shanghai) Co., Ltd. -> AIC Semiconductor) C:\Program Files\Ugreen\AicWifiService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\IntelCpHeciSvc.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\sdiagnhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [PrintDisp] => C:\WINDOWS\system32\PrintDisp.exe [595080 2019-03-21] (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [MacrokeyManager] => C:\WINDOWS\system32\WTMKM.exe [7329792 2011-06-01] () [Datei ist nicht signiert]
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [10752424 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18381792 2017-06-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1690368 2022-07-22] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [LogiBolt] => C:\Program Files\Logi\LogiBolt\LogiBolt.exe [22423104 2021-12-14] (Logitech Inc -> Logitech)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Ashampoo Backup] => "C:\Program Files\Ashampoo\Ashampoo Backup 2023\bin\backupClient-ab.exe" --hidden (Keine Datei)
HKLM\...\Run: [Ashampoo Backup PB] => C:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\backupClient-abpb.exe [955240 2023-12-05] (Ashampoo GmbH & Co. KG -> )
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [455968 2023-05-25] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Run: [PDF24] => B:\Programme\PDF24\pdf24.exe [669920 2025-06-23] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [PDF24] => C:\Program Files (x86)\PDF24\pdf24.exe [576224 2025-09-15] (Geek Software GmbH -> geek software GmbH)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ACHTUNG
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <==== ACHTUNG
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ACHTUNG
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [] => [X]
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIPGE.EXE [417776 2014-11-14] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIPGE.EXE [417776 2014-11-14] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45741280 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [LogiBolt] => C:\Program Files\Logi\LogiBolt\LogiBolt.exe [22423104 2021-12-14] (Logitech Inc -> Logitech)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [MicrosoftEdgeAutoLaunch_6E2C73815817D7E02B41C013F4C55849] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4228688 2025-12-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [Opera Stable] => C:\Program Files\Opera\opera.exe [2088408 2025-12-22] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [QMxNetworkSync] => C:\Program Files\Common Files\MAGIX Services\Update Notifier\QMxNetworkSync.exe [1027600 2023-05-22] (MAGIX Software GmbH -> MAGIX)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [Spotify] => C:\Users\Horst\AppData\Roaming\Spotify\Spotify.exe [35433288 2025-03-11] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [com.doctolib.pro.desktop] => C:\Program Files\Doctolib\Doctolib.exe [180509488 2024-07-26] (Doctolib SAS -> Doctolib)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [OpenOffice Updater] => C:\Users\Horst\AppData\Roaming\OpenOffice Updater\Updater.exe [367480 2021-07-28] (Arne Koenig -> ) <==== ACHTUNG
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\MountPoints2: {bcec7c50-56f3-11ed-b1c9-806e6f6e6963} - "E:\Adobe CS6\Set-up.exe"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Winlogon: [Shell] C:\WINDOWS\explorer.exe [6089584 2025-12-22] (Microsoft Windows -> Microsoft Corporation) <==== ACHTUNG
HKLM\...\Windows x64\Print Processors\ActMaskR: C:\Windows\System32\spool\prtprocs\x64\ActPrint.dll [51848 2018-09-14] (ActMask Group Co., Ltd -> ActMask Co.,Ltd)
HKLM\...\Windows x64\Print Processors\hpcpp103: C:\Windows\System32\spool\prtprocs\x64\hpcpp103.dll [323584 2010-10-13] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP560 series: CNMLMA0.DLL (Keine Datei)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [336896 2009-04-03] (CANON INC.) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\EPSON XP-960 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBPGE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\EverDoc: C:\WINDOWS\system32\mfilemon.dll [972000 2016-02-17] (Open Source Developer, Lorenzo Monti -> Monti Lorenzo)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2025-11-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\143.0.7499.170\Installer\chrmstp.exe [2025-12-27] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\StartRLCMS.lnk [2021-02-24]
ShortcutTarget: StartRLCMS.lnk -> C:\ProgramData\Reallusion\RLRunUtility.exe (Reallusion Inc. -> )
BootExecute: autocheck autochk * bddel.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1A6AE2FB-C6E6-4320-B8E8-576D227C9E04} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {DB83630F-E04C-4DF1-AE07-E3A08F471FC4} - \FreeDownloadManagerNetworkMonitor -> Keine Datei <==== ACHTUNG
Task: {097F5BEC-6A24-448D-9255-3E9963341D8A} - System32\Tasks\{0882A554-C370-450E-BEA8-6C820776BEBB} => C:\Windows\System32\pcalua.exe [91136 2025-12-22] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files (x86)\Adobe\Acrobat8\Adobe Acrobat 8 Professional\instmsia.exe" -d "C:\Program Files (x86)\Adobe\Acrobat8\Adobe Acrobat 8 Professional"
Task: {45566E1D-9E2B-447E-A4FB-E0D8D0621779} - System32\Tasks\{379498D6-842E-44B9-B87D-06A708419469} => C:\Windows\System32\pcalua.exe [91136 2025-12-22] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Users\Horst\Downloads\APRO23_Win_ESD1_WWEFG.exe -d C:\Users\Horst\Downloads
Task: {0BE90A69-C33D-4C38-BC7D-B5EAAD27F8EA} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-7PAH99J-Horst => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {B42EDF9F-F32D-4E30-AB6F-E88CF0059F44} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [10752424 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {51F44CB4-2023-475C-824D-5EF6D42DB0C2} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [11065256 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {C012D1EB-A351-4A91-9F2C-223A0C7161D6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)
Task: {9ECC77DF-A90B-4E1B-80F7-188C8390619F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {F6BF46C4-BD43-4B41-B6E1-E74D89F5E48F} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "1e4c18f7-3906-405b-934e-816f7137dc7f" --version "6.38.0.11537" --silent
Task: {10C01E53-9628-4F59-BF0D-DB4A6EDC2FFF} - System32\Tasks\CCleanerSkipUAC - Horst => C:\Program Files\CCleaner\CCleaner.exe [39575776 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {64700C20-8F60-44B1-9E1C-39DFA6998F45} - System32\Tasks\EPSON XP-960 Series Update {EEA69949-4F01-4179-8AA6-3B8FC338600E} => C:\Windows\System32\spool\drivers\x64\3\E_YTSPGE.EXE [690536 2013-11-21] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Task: {762A5246-5556-4A8B-8132-59E4094E6897} - System32\Tasks\GMX Update => C:\Users\Horst\AppData\Local\1&1 Mail & Media GmbH\MCDS\1\Application\1\GMX_Update.exe [1467320 2021-04-20] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
Task: {39F54204-4FFC-47CE-B968-0767A9B1F565} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem144.0.7547.4{355534B7-F9CB-4F05-BD58-1FB49FEFDA4B} => C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.4\updater.exe [7056536 2025-12-08] (Google LLC -> Google LLC)
Task: {27DC19EB-2DF5-4D25-86F6-7E86BE21A2BF} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [11507504 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {648224D2-F2DA-4A4E-A0D4-8D912799CB57} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28946240 2025-12-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {8D455488-DB27-4886-A3FC-AE58ED370DB8} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\opushutil.exe [61728 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {4E7B3555-3E08-4099-B317-E7C1D5E2F872} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28946240 2025-12-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {53EE5140-04B4-4E25-A03C-E7EE18C1B621} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [230656 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {2BCB6923-EF1D-470C-A1DC-58AE21358096} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [230656 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {DD687DA7-3338-47B0-AFB9-C92B69375374} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [11507504 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {056825A5-328E-4D1B-B2F8-90D6829A7625} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AED84AFC-3C29-45E4-9661-30840D456B83} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {12FE138F-7FA7-4B0B-AE93-267ACD897969} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D7D2FE94-5B8C-491F-802E-7779303B0223} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9080701E-47AE-4DA5-B0A2-9573112709ED} - System32\Tasks\NCH Software\MixPadUpdateCheck => C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe [10931200 2025-11-24] (NCH Software, Inc. -> NCH Software)
Task: {EA7B1BAB-3A10-44FF-90BD-6E5A748C770B} - System32\Tasks\NCH Software\SwitchUpdateCheck => C:\Program Files (x86)\NCH Software\Switch\switch.exe [6256632 2025-12-15] (NCH Software, Inc. -> NCH Software)
Task: {383E2531-81BA-4AC7-ADBB-972DB9E5E125} - System32\Tasks\NCH Software\VideoPadCacheDeleteAll => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [15140336 2025-10-10] (NCH Software, Inc. -> NCH Software)
Task: {2A7777B1-2F10-4196-BE3F-E3737F79F729} - System32\Tasks\NCH Software\VideoPadUpdateCheck => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [15140336 2025-10-10] (NCH Software, Inc. -> NCH Software)
Task: {773D90A8-88DE-4D2E-A88E-2C5E55B51A6E} - System32\Tasks\NCH Software\WavePadUpdateCheck => C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe [10205680 2025-12-02] (NCH Software, Inc. -> NCH Software)
Task: {4C34F98E-6AB6-4B42-9880-53F5AFF56214} - System32\Tasks\Opera scheduled assistant Autoupdate 1582821198 => C:\Program Files\Opera\autoupdate\opera_autoupdate.exe [6233560 2025-12-18] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Program Files\Opera\assistant" --producttype=assistant $(Arg0)
Task: {BCD66482-BDC6-488D-8561-BCFF63B89F24} - System32\Tasks\Opera scheduled Autoupdate 1505550991 => C:\Program Files\Opera\autoupdate\opera_autoupdate.exe [6233560 2025-12-18] (Opera Norway AS -> Opera Software)
Task: {2B4826E9-83F0-4EEC-AD6E-B060778107CC} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5751664 2017-05-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {5C6012C4-50A8-48BA-8941-26B0122BE354} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [6191000 2017-05-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {7970172B-21BC-4F02-AFBC-2E844D497B48} - System32\Tasks\SEO => C:\Users\Horst\AppData\Roaming\SEO\SEO.exe (Keine Datei) <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\EPSON XP-960 Series Update {EEA69949-4F01-4179-8AA6-3B8FC338600E}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSPGE.EXE:/EXE:{EEA69949-4F01-4179-8AA6-3B8FC338600E} /F:UpdateWORKGROUP\DESKTOP-7PAH99J$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ACHTUNG (Beschränkung - Zones)
Tcpip\Parameters: [DhcpNameServer] 192.168.68.204
Tcpip\..\Interfaces\{426751f0-7da5-4fc1-9ed5-96f93f71afc4}: [DhcpNameServer] 192.168.68.204
Tcpip\..\Interfaces\{81597995-380e-4483-8ef9-4e2404d531b7}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{81597995-380e-4483-8ef9-4e2404d531b7}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{a8743275-c269-41a2-b64f-63cba816211a}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{a8743275-c269-41a2-b64f-63cba816211a}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{a8743275-c269-41a2-b64f-63cba816211a}\35F657E6462416273556475707F563335493: [DhcpNameServer] 10.10.10.254
Tcpip\..\Interfaces\{c94ac666-3758-47d9-8756-47598b969e9e}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{c94ac666-3758-47d9-8756-47598b969e9e}: [DhcpDomain] fritz.box
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <==== ACHTUNG
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default [2026-01-04]
Edge DownloadDir: Default -> G:\Downloads
Edge Notifications: Default -> hxxps://de.softonic.com; hxxps://web.whatsapp.com; hxxps://www.chip.de; hxxps://www.computerbild.de; hxxps://www.facebook.com; hxxps://www.mein-schoener-garten.de; hxxps://www.tah.de; hxxps://www.youtube.com
Edge HomePage: Default -> hxxps://
Edge Extension: (Avira Safe Shopping) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\caiblelclndcckfafdaggpephhgfpoip [2025-12-27]
Edge Extension: (Avira Password Manager) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\emgfgdclgfeldebanedpihppahgngnle [2025-03-21]
Edge Extension: (Coole Cursor für Chrome ™) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\empjidjbllcmlgaobahepkijkfmfkjdb [2023-07-30]
Edge Extension: (SFL) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\epoipicdijmpedfdkjamnjfgodfjojad [2024-10-05]
Edge Extension: (Google Docs Offline) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-12-20]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2025-12-12]
Edge Extension: (Edge relevant text changes) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge Extension: (The Mist) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\npkohagpnckpnhenpjeeggdngjphfgkn [2025-08-26]
Edge Profile: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2025-11-21]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2019-10-23] [] [ist nicht signiert]
FF Plugin: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-01-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-01-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2024-12-12] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corporation -> Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\Program Files (x86)\Common Files\Nero\BrowserPlugin\npBrowserPlugin.dll [2011-07-26] (Nero AG -> Nero AG)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2024-12-12] (Adobe Inc. -> Adobe Systems)
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default [2025-12-14]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR HomePage: Default -> hxxps://
CHR StartupUrls: Default -> "hxxps://"
CHR DefaultSearchURL: Default -> hxxps://search-io.com/search?iid=34f25b56-3e5a-4ebe-8e4b-0f07b728f16b&src=chrome&q={searchTerms}
CHR DefaultSearchKeyword: Default -> chromesearch
CHR DefaultNewTabURL: Default -> hxxps://activelysearching.com
CHR DefaultSuggestURL: Default -> hxxp://api.bing.com/osjson.aspx?query={searchTerms}
CHR Extension: (Avira Password Manager) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2025-04-18]
CHR Extension: (Avira Safe Shopping) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2025-11-13]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-12-12]
CHR Extension: (Coole Cursor für Chrome ™) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\empjidjbllcmlgaobahepkijkfmfkjdb [2024-01-01]
CHR Extension: (SFL) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\epoipicdijmpedfdkjamnjfgodfjojad [2024-10-06]
CHR Extension: (Google Docs Offline) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-11-13]
CHR Extension: (Saferduck) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjdjgnojiionckfmaobhcgeahdndmhgf [2021-08-02]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2025-12-12]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-07]
CHR HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR DefaultProfile: Default
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\opera.exe
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft, Inc. -> ArcSoft Inc.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2017-09-26] (Adobe Systems) [Datei ist nicht signiert]
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [944048 2024-12-12] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [11081128 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AicWifiServiceD80; C:\Program Files\Ugreen\AicWifiService.exe [35352 2024-03-21] (AIC Semiconductor (Shanghai) Co., Ltd. -> AIC Semiconductor)
S3 ashbackuppb; c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\backupService-abpb.exe [39272 2023-12-05] (Ashampoo GmbH & Co. KG -> )
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13419408 2025-12-16] (Microsoft Corporation -> Microsoft Corporation)
S3 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2018-02-16] (Digital Wave Ltd -> Digital Wave Ltd.)
S3 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAService.exe [133736 2025-08-27] (Intel Corporation -> Intel)
S3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAUpdateService.exe [133224 2025-08-27] (Intel Corporation -> Intel)
S3 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
S3 GMX_MailCheck_Update; C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck_Update.exe [933784 2022-08-10] (1&1 Mail & Media GmbH -> Pixality Computersysteme GmbH)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2025-12-29] (HP Inc. -> HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-13] (Macrovision Corporation) [Datei ist nicht signiert]
S4 Lightkey Service; C:\Program Files (x86)\Lightkey Sources LTD\Lightkey\LightkeyCentralService.exe [134288 2021-08-15] (LIGHTKEY SOURCES LTD -> LIGHTKEY SOURCES LTD)
S4 LightkeyNeural; C:\Program Files (x86)\Lightkey Sources LTD\Lightkey\LightkeyNeuralService.exe [43648272 2021-08-15] (LIGHTKEY SOURCES LTD -> )
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe [2063376 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 NeroBackItUpBackgroundService; C:\Program Files (x86)\Nero\Nero 2017\Nero BackItUp\NBService.exe [287088 2016-08-09] (Nero AG -> Nero AG)
S3 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [Datei ist nicht signiert]
R2 OptionsPlusUpdaterService; C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe [18135808 2023-11-15] (Logitech Inc -> Logitech, Inc.)
S3 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [576224 2025-09-15] (Geek Software GmbH -> geek software GmbH)
S3 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [Datei ist nicht signiert]
S3 RLHostService; C:\Program Files (x86)\Common Files\Reallusion\RLHostService\RLHostService.exe [280072 2021-02-25] (Reallusion Inc. -> Reallusion.Inc)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803064 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe [4426832 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe [290704 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WTService; C:\WINDOWS\system32\atwtusb.exe [916992 2011-04-27] () [Datei ist nicht signiert]
S3 LibreOfficeMaintenance; "B:\Program Files\LibreOffice\program\update_service.exe" [X]
S4 RunSwUSB; C:\Windows\runSW.exe [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 aicloadfw; C:\WINDOWS\System32\drivers\aicloadfw.sys [1060984 2024-05-08] (AIC Semiconductor (Shanghai) Co., Ltd. -> )
R3 aicusbwifi; C:\WINDOWS\System32\drivers\aicusbwifi.sys [1219688 2024-05-13] (AIC Semiconductor (Shanghai) Co., Ltd. -> )
R1 cdrbsdrv; C:\Windows\System32\Drivers\cdrbsdrv.sys [39208 2006-08-25] (B.H.A Corporation -> B.H.A Corporation)
S3 cpuz161; C:\ProgramData\CPUID Software\cpu-z\KICxMQHHatRI [44680 2025-12-22] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [175824 2024-10-17] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [32240 2020-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Dev47Apps)
S3 DroidCamVideo; C:\WINDOWS\System32\drivers\droidcamvideo.sys [33768 2020-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d.inf_amd64_7e337195b92a35b6\e1d.sys [611936 2023-08-31] (Intel Corporation -> Intel Corporation)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-03-14] (Martin Malik - REALiX -> REALiX(tm))
R3 int0800; C:\WINDOWS\System32\drivers\flashud.sys [79624 2022-01-25] (Intel Corporation -> Intel Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333192 2025-12-22] (Microsoft Windows -> Microsoft Corporation)
S3 MirayVirtualDisk; C:\WINDOWS\System32\drivers\mvdo.sys [405200 2022-10-14] (Miray Software AG -> Miray)
S3 mmrv-abpb; C:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\mmrv-abpb.sys [59424 2023-12-05] (Ashampoo GmbH & Co. KG -> )
R3 moufiltr; C:\WINDOWS\System32\drivers\moufiltr.sys [7680 2009-03-08] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
S3 NewAudioTechnologySpatialSoundCard; C:\WINDOWS\System32\drivers\vacnatkd.sys [114008 2020-06-15] (New Audio Technology GmbH -> NEW AUDIO TECHNOLOGY)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2019-07-16] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 PCWinSoft; C:\WINDOWS\System32\drivers\scrcamnetdriver_x64.sys [241800 2012-10-12] (PCWinSoft Systems Informatica Ltda -> Windows (R) Server 2003 DDK provider)
R0 PxHlpa64; C:\WINDOWS\System32\drivers\PxHlpa64.sys [56336 2013-10-16] (Corel Corporation -> Corel Corporation)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12423864 2025-08-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174264 2024-10-17] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 vhidmini; C:\WINDOWS\System32\drivers\walvhid.sys [7552 2009-08-26] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21928 2025-12-22] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [635272 2025-12-22] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102792 2025-12-22] (Microsoft Windows -> Microsoft Corporation)
U3 aswbdisk; kein ImagePath
U1 avgbdisk; kein ImagePath
U3 dmwappushsvc; kein ImagePath
S3 MpKsl508b8475; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B783D0E7-2F4D-4516-A1FB-5BFAE2CE29B6}\MpKslDrv.sys [X]
S3 MpKsl621d7010; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B783D0E7-2F4D-4516-A1FB-5BFAE2CE29B6}\MpKslDrv.sys [X]
S3 MpKsl7b9fff18; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B783D0E7-2F4D-4516-A1FB-5BFAE2CE29B6}\MpKslDrv.sys [X]
S3 MpKsle9233a68; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B783D0E7-2F4D-4516-A1FB-5BFAE2CE29B6}\MpKslDrv.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Drei Monate (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-01-04 11:59 - 2026-01-04 12:01 - 000000000 ____D C:\FRST
2026-01-04 11:57 - 2026-01-04 11:57 - 000003326 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2026-01-04 11:57 - 2026-01-04 11:57 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2026-01-04 11:13 - 2026-01-04 11:15 - 544383370 _____ C:\Users\Horst\Documents\registry 2026-01-04.reg
2026-01-04 10:49 - 2026-01-04 11:58 - 000004944 _____ C:\WINDOWS\AicWifiServiceLog.txt
2026-01-04 10:49 - 2026-01-04 10:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ugreen
2026-01-04 10:49 - 2026-01-04 10:49 - 000000000 ____D C:\Program Files\Ugreen
2026-01-04 10:49 - 2024-05-13 06:05 - 001219688 _____ C:\WINDOWS\system32\Drivers\aicusbwifi.sys
2026-01-04 10:49 - 2024-05-08 03:42 - 001060984 _____ C:\WINDOWS\system32\Drivers\aicloadfw.sys
2026-01-04 10:48 - 2024-11-29 06:51 - 000000000 ____D C:\Users\Horst\Desktop\CM762_Driver_V1.2
2025-12-30 17:39 - 2025-12-30 17:39 - 000000000 ____D C:\Users\Horst\Desktop\2012_06_16 - Goldene Hochzeit Waltraud und Wilfried in Alten´s Ruh´, Wunstorf__ Sicherheitskopie in FOTO_Laufwerk Z
2025-12-29 15:49 - 2026-01-02 20:35 - 000000000 ____D C:\Users\Horst\Desktop\Urlaub Eifel
2025-12-27 20:34 - 2025-12-27 20:38 - 000000000 ___HD C:\$WinREAgent
2025-12-23 21:55 - 2025-12-23 21:55 - 000500736 _____ (Realtek) C:\WINDOWS\SwUSB.exe
2025-12-23 21:55 - 2025-12-23 21:55 - 000044760 _____ () C:\WINDOWS\runSW umbenannt.exe
2025-12-23 21:43 - 2025-12-23 21:43 - 000000000 ____D C:\Program Files (x86)\Cisco
2025-12-23 21:37 - 2025-12-23 21:37 - 000003542 _____ C:\WINDOWS\system32\Tasks\SEO
2025-12-23 20:48 - 2025-12-23 20:48 - 000000887 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2025-12-23 20:48 - 2025-12-23 20:48 - 000000000 ____D C:\Users\Horst\AppData\Local\VS Revo Group
2025-12-22 23:20 - 2025-12-22 23:20 - 000000000 ____D C:\Users\Horst\Desktop\mb_bios_ga-q170m-d3h_f23d
2025-12-22 23:11 - 2025-12-22 23:11 - 000000884 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2025-12-22 23:11 - 2025-12-22 23:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2025-12-22 23:11 - 2025-12-22 23:11 - 000000000 ____D C:\ProgramData\CPUID Software
2025-12-22 23:11 - 2025-12-22 23:11 - 000000000 ____D C:\Program Files\CPUID
2025-12-22 22:35 - 2025-12-22 22:35 - 000000000 ____D C:\inetpub
2025-12-22 22:20 - 2025-12-22 22:20 - 000023734 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-12-22 22:17 - 2025-12-22 22:17 - 000023734 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-12-22 21:57 - 2024-10-17 03:54 - 000174264 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2025-12-22 21:51 - 2024-10-17 03:53 - 000175824 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2025-12-22 21:43 - 2025-12-22 21:43 - 000004006 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1505550991
2025-12-22 21:43 - 2025-12-22 21:43 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2025-12-22 19:38 - 2025-12-23 18:28 - 005616792 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-12-21 14:33 - 2025-12-21 14:33 - 000000000 ____D C:\Users\Horst\.openjfx
2025-12-21 14:33 - 2025-12-21 14:33 - 000000000 ____D C:\Users\Horst\.deepartcreator
2025-12-21 14:29 - 2025-12-18 12:31 - 000001513 _____ C:\Users\Horst\Desktop\Aktivierungsanleitung.txt
2025-12-21 14:27 - 2025-12-21 14:28 - 393076295 _____ C:\Users\Horst\Downloads\CHIP_-_DeepArt_Creator (2).zip
2025-12-21 14:26 - 2025-12-21 14:27 - 393076295 _____ C:\Users\Horst\Downloads\CHIP_-_DeepArt_Creator.zip
2025-12-21 14:25 - 2025-12-21 14:26 - 005235880 _____ (BurdaForward GmbH) C:\Users\Horst\Documents\Vollversion_ Deep Art Creator - KI-Bildgenerator - CHIP Installer _35vFv.exe
2025-12-19 19:24 - 2025-12-19 19:27 - 000000000 ____D C:\Users\Horst\Desktop\VIDEOBEARBEITUNG MUSIK - RECORDER - SOUNDBEARBEITUNG
2025-12-18 20:52 - 2025-12-18 20:52 - 000000039 _____ C:\Users\Horst\AppData\Local\kritadisplayrc
2025-12-18 12:19 - 2025-12-18 12:19 - 005235880 _____ (BurdaForward GmbH) C:\Users\Horst\Documents\Vollversion_ BeckerCAD 12 3D - CHIP Installer _fhw6v.exe
2025-12-18 11:18 - 2025-12-18 11:18 - 000000000 ____D C:\Users\Horst\Documents\VideoPad Projekte
2025-12-17 19:06 - 2025-12-17 19:06 - 000001373 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad Video-Editor.lnk
2025-12-17 19:06 - 2025-12-17 19:06 - 000001347 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Switch Audio-Converter.lnk
2025-12-17 19:05 - 2025-12-17 19:05 - 000001415 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn Disc-Brennprogramm.lnk
2025-12-17 19:05 - 2025-12-17 19:05 - 000001357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MixPad Musikstudio-Software.lnk
2025-12-17 19:05 - 2025-12-17 19:05 - 000000000 ____D C:\Users\Horst\Documents\Mixpad Projects
2025-12-17 19:04 - 2025-12-17 19:04 - 000001353 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Audio-Editor.lnk
2025-12-17 18:59 - 2025-12-17 18:59 - 000001233 _____ C:\Users\Public\Desktop\MyKeyFinder.lnk
2025-12-17 18:59 - 2025-12-17 18:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyKeyFinder
2025-12-17 18:59 - 2025-12-17 18:59 - 000000000 ____D C:\Program Files (x86)\MyKeyFinder
2025-12-17 18:53 - 2026-01-02 23:32 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Ashampoo Snap 16
2025-12-17 18:00 - 2025-12-18 21:50 - 000000000 ____D C:\Users\Horst\HDR Projects 9 Pro
2025-12-17 17:52 - 2025-12-17 17:53 - 227531339 _____ C:\Users\Horst\Downloads\CHIP-Ashampoo_Snap_16.zip
2025-12-17 17:47 - 2025-12-17 17:48 - 008688680 _____ (Abelssoft ) C:\Users\Horst\Documents\MyKeyFinder_setup.exe
2025-12-17 17:36 - 2025-12-17 17:36 - 029255160 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Horst\Documents\ashampoo_winoptimizer_27_47122.exe
2025-12-16 15:04 - 2025-12-16 15:04 - 001262796 _____ C:\Users\Horst\Downloads\CHIP_Ascomp_Backup_Maker.zip
2025-12-16 15:02 - 2025-12-16 15:02 - 005235880 _____ (BurdaForward GmbH) C:\Users\Horst\Documents\Vollversion_ Backup Maker Professional - CHIP Installer _hEj6v.exe
2025-12-15 23:23 - 2025-12-15 23:23 - 000000000 ____D C:\Users\Horst\Desktop\IMG_20241214_214816_DRO.sharpendata
2025-12-15 22:36 - 2025-12-15 22:37 - 378915001 _____ C:\Users\Horst\Downloads\3-in1-Paket_fuer_Schwarz-Weiss-Fotografie (2).zip
2025-12-15 22:10 - 2025-12-15 22:10 - 000001474 _____ C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WO27.lnk
2025-12-15 22:05 - 2025-12-15 22:05 - 000000000 ____D C:\WINDOWS\SysWOW64\Translation
2025-12-15 22:05 - 2025-12-15 22:05 - 000000000 ____D C:\WINDOWS\SysWOW64\data
2025-12-15 19:43 - 2025-12-15 22:44 - 000000000 ____D C:\Users\Horst\BlackWhite Projects 6 Pro
2025-12-15 19:36 - 2025-12-15 19:37 - 378915001 _____ C:\Users\Horst\Downloads\3-in1-Paket_fuer_Schwarz-Weiss-Fotografie.zip
2025-12-15 19:27 - 2025-12-15 19:53 - 000000000 ____D C:\Users\Horst\AppData\Roaming\neroaiu
2025-12-15 19:27 - 2025-12-15 19:27 - 000000000 ____D C:\Users\Horst\Documents\NeroAIU
2025-12-15 19:16 - 2025-12-15 19:16 - 000000000 ____D C:\WINDOWS\nsxCDF2.tmp
2025-12-15 19:15 - 2025-12-15 19:35 - 000000000 ____D C:\Users\Horst\AppData\Roaming\nerostart
2025-12-15 19:12 - 2025-12-15 19:13 - 165313141 _____ C:\Users\Horst\Downloads\CHIP_Nero_AI_Image_Upscaler_Pro (2).zip
2025-12-15 19:10 - 2025-12-15 19:11 - 165313141 _____ C:\Users\Horst\Downloads\CHIP_Nero_AI_Image_Upscaler_Pro.zip
2025-12-15 19:06 - 2025-12-15 19:06 - 016754854 _____ C:\Users\Horst\Downloads\CHIP_Wise_Care_365 (2).zip
2025-12-15 13:24 - 2025-12-15 13:24 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Wise Utilities
2025-12-14 22:57 - 2025-12-23 21:15 - 000000004 ___SH C:\WINDOWS\wisefs.dat
2025-12-12 11:26 - 2025-12-12 11:26 - 000002134 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audials Vision SE 2026.lnk
2025-12-12 11:21 - 2025-12-12 11:21 - 006762626 _____ C:\Users\Horst\Downloads\CHIP_Audials_Vision_2026_SE (3).zip
2025-12-12 11:17 - 2025-12-12 11:17 - 006762626 _____ C:\Users\Horst\Downloads\CHIP_Audials_Vision_2026_SE (2).zip
2025-12-12 11:13 - 2025-12-12 11:13 - 006762626 _____ C:\Users\Horst\Downloads\CHIP_Audials_Vision_2026_SE.zip
2025-12-12 11:11 - 2025-12-12 11:11 - 005235880 _____ (BurdaForward GmbH) C:\Users\Horst\Documents\Vollversion_ Audials Vision 2026 SE - CHIP Installer _pderv.exe
2025-12-12 10:19 - 2025-12-15 19:16 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2025-12-06 20:12 - 2025-12-06 20:12 - 000000000 ____D C:\Users\Horst\.ms-ad
2025-12-05 22:37 - 2025-12-05 22:37 - 001860782 _____ C:\Users\Horst\Documents\NIK-ColorEfex.pdf
2025-12-02 14:15 - 2025-12-02 14:15 - 000000000 ____D C:\Plugins SHARPEN #5 professional
2025-12-02 14:14 - 2025-12-02 14:15 - 000000000 ____D C:\Anleitungsvideos
2025-12-01 20:43 - 2025-12-01 20:43 - 000000000 ____D C:\Users\Horst\.fop
2025-11-29 11:27 - 2025-11-29 11:27 - 000000000 ____D C:\Users\Horst\AppData\Roaming\com.example
2025-11-29 11:23 - 2025-11-29 11:23 - 025196296 _____ (WinZip Computing) C:\Users\Horst\Documents\winzip77-bing.exe
2025-11-28 19:37 - 2025-11-28 19:38 - 005235880 _____ (BurdaForward GmbH) C:\Users\Horst\Documents\7-Zip (64 Bit) - CHIP Installer _suDJv.exe
2025-11-26 17:34 - 2025-11-26 17:34 - 000000000 ____D C:\WINDOWS\SysWOW64\Sfxs
2025-11-26 17:34 - 2025-11-26 17:34 - 000000000 ____D C:\WINDOWS\SysWOW64\lang
2025-11-26 17:34 - 2025-11-26 17:34 - 000000000 ____D C:\WINDOWS\SysWOW64\Icons
2025-11-26 17:34 - 2025-11-26 17:34 - 000000000 ____D C:\WINDOWS\SysWOW64\HELP
2025-11-23 23:14 - 2026-01-02 20:04 - 000000000 ____D C:\Users\Horst\Desktop\BILDBEARBEITUNG - CAT - PRESETS - HINTERGRÜNDE
2025-11-23 20:48 - 2025-12-18 19:41 - 000000000 ____D C:\Users\Horst\Sharpen 5 Pro
2025-11-22 19:44 - 2025-11-22 19:44 - 000000000 ____D C:\WINDOWS\nstEAB2.tmp
2025-11-21 19:55 - 2025-11-21 19:55 - 002566832 _____ C:\Users\Horst\Documents\FreeImage_23-04-25.zip
2025-11-21 18:25 - 2025-11-21 18:27 - 000000000 ____D C:\Users\Horst\Desktop\2017 Weihnachten
2025-11-20 21:14 - 2025-11-20 21:44 - 1152595296 _____ C:\Users\Horst\Documents\LUT-1_professional_Video-Anleitung.zip
2025-11-20 20:24 - 2025-11-20 20:23 - 006588086 _____ C:\Users\Horst\Documents\SHARPEN projects professional - Handbuch.pdf
2025-11-16 20:03 - 2025-11-16 20:03 - 000000000 ____D C:\Users\Horst\Documents\makehuman
2025-11-15 16:11 - 2025-12-20 23:39 - 000000000 ____D C:\Users\Horst\Desktop\Wartung
2025-11-14 21:31 - 2025-11-14 21:31 - 000004214 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1582821198
2025-11-14 15:28 - 2025-11-14 15:28 - 213710989 _____ C:\Users\Horst\Documents\70-Free-Overlays-Download-by-Fotoworkshop-Stuttgart-de.zip
2025-11-13 21:55 - 2025-12-31 13:35 - 000000000 ____D C:\Users\Horst\Desktop\2015-25-12 - Heiligabend__Sicherheitskopie in Laufwerk SIKO Foto (Z)
2025-11-13 21:55 - 2025-11-13 21:59 - 000000000 ____D C:\Users\Horst\Desktop\2015-23-07 - Ballonflug - Datensicherung in Laufwerk SIKO Foto (Z)
2025-11-11 21:35 - 2025-11-11 21:35 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoZoom Pro 9
2025-11-11 21:35 - 2025-11-11 21:35 - 000000000 ____D C:\Program Files\PhotoZoom Pro 9
2025-11-11 21:03 - 2025-11-11 21:03 - 000097970 _____ C:\Users\Horst\Documents\franzis.de_checkout_finish_sUniqueID_90X17340YY668854P.pdf
2025-11-11 20:30 - 2025-11-11 20:33 - 559563662 _____ C:\Users\Horst\Documents\31607-3_SHARPEN-projects-5-professional_winde.zip
2025-11-08 21:22 - 2025-11-08 21:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2025-11-08 21:20 - 2025-11-08 21:22 - 000000000 ____D C:\Program Files (x86)\PDF24
2025-11-06 12:33 - 2025-11-06 12:33 - 000001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CS2.lnk
2025-11-04 22:18 - 2025-11-04 22:23 - 000012705 _____ C:\Users\Horst\P1070679_80_81_82_83_84_85.neatProject
2025-11-04 22:18 - 2025-11-04 22:23 - 000000000 ____D C:\Users\Horst\P1070679_80_81_82_83_84_85.neatdata
2025-11-04 22:14 - 2025-11-04 22:14 - 000003409 _____ C:\Users\Horst\Meine Farb-Ebenen.cml
2025-10-30 19:15 - 2025-10-30 19:15 - 000024660 _____ C:\Users\Horst\Documents\pastor-juergen-**********-20251029-140445.pdf
2025-10-29 22:38 - 2025-10-29 22:40 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2025-10-29 19:13 - 2025-10-29 19:12 - 000369631 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_12h43m37s (1).pdf
2025-10-29 19:13 - 2025-10-29 19:12 - 000346536 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_12h17m48s (1).pdf
2025-10-29 19:13 - 2025-10-29 19:12 - 000204195 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_18h27m15s (1).pdf
2025-10-29 18:38 - 2025-10-29 18:36 - 000369631 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_12h43m37s.pdf
2025-10-29 18:38 - 2025-10-29 18:36 - 000346536 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_12h17m48s.pdf
2025-10-29 18:38 - 2025-10-29 18:36 - 000204195 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_18h27m15s.pdf
2025-10-29 18:34 - 2025-10-29 18:33 - 000346536 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_ - Citycare24- 12h17m48s.pdf
2025-10-29 18:09 - 2025-10-29 18:09 - 000329024 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_12h43m37s.tif
2025-10-29 11:19 - 2025-10-29 11:19 - 000000000 ____D C:\WINDOWS\nsqDED5.tmp
2025-10-28 22:34 - 2025-10-28 22:34 - 000000000 ____D C:\Program Files (x86)\LibreOffice Maintenance Service
2025-10-28 20:59 - 2025-10-28 20:59 - 011965080 _____ (WiseCleaner.com ) C:\Users\Horst\Documents\WDRSetup_6.2.2.520.exe
2025-10-24 11:26 - 2025-10-24 11:26 - 000000000 ____D C:\WINDOWS\nsv5D78.tmp
2025-10-23 21:15 - 2025-10-23 21:15 - 000000000 ____D C:\Users\Horst\Documents\Adobe Scripts
2025-10-23 20:40 - 2025-11-20 11:08 - 000000000 ____D C:\Users\Horst\ProjectData
2025-10-21 14:53 - 2025-10-21 14:53 - 000000000 ____D C:\ProgramData\MuseHubUpdater
2025-10-16 18:52 - 2025-10-16 18:52 - 000159724 _____ C:\Users\Horst\Documents\Nora001.pdf
2025-10-15 18:11 - 2025-10-15 18:11 - 000002233 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2025-10-14 19:27 - 2025-10-14 19:27 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Avanquest
2025-10-13 21:27 - 2025-10-13 21:27 - 000000000 ____D C:\ProgramData\Avanquest
2025-10-13 21:25 - 2025-10-13 21:26 - 014920672 _____ (Avanquest Software) C:\Users\Horst\Documents\inPixioPhotoStudio12Installer.exe
==================== Drei Monate (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-01-04 12:02 - 2022-10-28 20:19 - 000000000 ____D C:\Users\Horst\AppData\Local\LogiOptionsPlus
2026-01-04 12:00 - 2021-12-17 20:42 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-01-04 12:00 - 2020-09-17 18:06 - 001722792 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-01-04 12:00 - 2019-12-07 15:51 - 000743714 _____ C:\WINDOWS\system32\perfh007.dat
2026-01-04 12:00 - 2019-12-07 15:51 - 000150136 _____ C:\WINDOWS\system32\perfc007.dat
2026-01-04 12:00 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2026-01-04 11:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2026-01-04 11:55 - 2024-01-02 15:42 - 000008192 ___SH C:\DumpStack.log.tmp
2026-01-04 11:55 - 2020-09-17 18:14 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-01-04 11:55 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-01-04 11:55 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-01-04 11:55 - 2017-09-16 09:33 - 000000000 __SHD C:\Users\Horst\IntelGraphicsProfiles
2026-01-04 11:55 - 2017-09-16 09:33 - 000000000 ____D C:\Intel
2026-01-04 11:55 - 2016-07-16 12:47 - 000000227 _____ C:\WINDOWS\win.ini
2026-01-04 11:23 - 2020-09-17 17:54 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-01-04 10:56 - 2020-09-17 17:55 - 000000000 ____D C:\Users\Horst
2026-01-04 10:18 - 2024-07-09 18:27 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2026-01-04 10:18 - 2019-10-03 16:59 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2026-01-03 23:33 - 2017-09-26 18:03 - 000000000 ____D C:\Users\Horst\AppData\Local\Adobe
2026-01-03 15:52 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\appcompat
2026-01-02 18:19 - 2024-11-26 22:18 - 000000000 ____D C:\Users\Horst\Desktop\NOCH ZUORDNEN
2026-01-02 15:37 - 2018-05-28 14:05 - 000000000 ____D C:\Users\Horst\AppData\Local\D3DSCache
2026-01-01 23:51 - 2022-11-30 12:39 - 000000000 ____D C:\Users\Horst\Color Projects 6 Pro
2025-12-31 22:28 - 2017-12-05 15:17 - 000000000 ____D C:\Users\Horst\AppData\Local\CrashDumps
2025-12-30 12:18 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-12-30 12:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-12-30 12:18 - 2018-07-19 10:05 - 000000000 ____D C:\ProgramData\Packages
2025-12-29 15:16 - 2017-12-06 14:17 - 000000000 ____D C:\Users\Horst\AppData\Local\Packages
2025-12-29 15:15 - 2024-09-04 20:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2025-12-29 15:15 - 2024-01-20 23:25 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2025-12-28 14:07 - 2024-02-25 23:05 - 000000000 ____D C:\Users\Horst\Desktop\Heizkesel_Puffer_Ausfall_Warttung
2025-12-28 14:04 - 2023-01-14 17:28 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-12-28 13:34 - 2020-05-24 13:32 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-12-28 13:25 - 2020-09-17 18:14 - 000003754 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-12-28 13:25 - 2020-09-17 18:14 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-12-27 22:39 - 2017-09-25 18:58 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-12-27 22:28 - 2020-09-17 18:14 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2025-12-27 21:55 - 2025-08-08 17:57 - 000000000 ____D C:\Users\Horst\Desktop\HAUS UND GARTEN WESTERENDE UND GARTEN BOKELOH__Sicherheitskopie in Laufwerk EXT. (Y)
2025-12-27 20:55 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-12-23 21:43 - 2020-12-03 20:48 - 000000000 ____D C:\Program Files (x86)\Realtek
2025-12-23 21:43 - 2017-09-16 09:23 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2025-12-23 21:25 - 2021-05-25 18:32 - 000000000 ____D C:\Users\Public\Documents\Ashampoo
2025-12-23 21:25 - 2020-02-02 23:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2025-12-23 21:25 - 2020-02-02 23:35 - 000000000 ____D C:\Program Files (x86)\Ashampoo
2025-12-23 21:20 - 2022-07-27 21:23 - 000000000 ____D C:\Program Files (x86)\Wise
2025-12-23 21:10 - 2023-12-19 18:52 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Lavasoft
2025-12-23 21:10 - 2023-12-19 18:52 - 000000000 ____D C:\Users\Horst\AppData\Local\Lavasoft
2025-12-23 20:48 - 2021-12-26 18:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2025-12-23 20:48 - 2021-12-26 18:46 - 000000000 ____D C:\Program Files\Revo Uninstaller
2025-12-23 18:52 - 2017-09-25 19:20 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
2025-12-23 18:47 - 2020-07-09 20:33 - 000000000 ____D C:\Users\Horst\AppData\Roaming\TuneIn
2025-12-23 18:07 - 2025-07-23 20:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice
2025-12-23 18:03 - 2020-09-05 11:21 - 000000000 ____D C:\Program Files\Reallusion
2025-12-23 17:09 - 2020-02-13 22:16 - 000000000 ____D C:\Users\Horst\AppData\Roaming\SoftMaker
2025-12-23 17:08 - 2020-09-12 18:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Faceware
2025-12-23 17:08 - 2020-09-12 18:24 - 000000000 ____D C:\Program Files\Faceware
2025-12-23 17:05 - 2019-11-27 21:14 - 000000000 ____D C:\ProgramData\NCH Software
2025-12-23 17:05 - 2019-11-27 21:14 - 000000000 ____D C:\Program Files (x86)\NCH Software
2025-12-23 17:05 - 2017-10-02 19:42 - 000000000 ____D C:\Users\Horst\AppData\Roaming\NCH Software
2025-12-23 16:56 - 2017-09-26 14:42 - 000000000 ____D C:\ProgramData\Adobe
2025-12-23 16:56 - 2017-09-09 21:34 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Adobe
2025-12-23 16:55 - 2022-07-27 18:20 - 000000000 ____D C:\Users\Horst\AppData\Roaming\com.adobe.dunamis
2025-12-23 16:55 - 2017-09-26 22:18 - 000000000 ____D C:\Program Files\Common Files\Adobe
2025-12-23 16:52 - 2017-09-26 21:15 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2025-12-22 22:55 - 2023-12-13 18:39 - 000000000 ____D C:\Program Files\Common Files\MAGIX Services
2025-12-22 22:35 - 2024-07-23 19:12 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-12-22 22:35 - 2023-12-14 03:56 - 000000000 ____D C:\WINDOWS\InboxApps
2025-12-22 22:35 - 2019-12-07 15:54 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2025-12-22 22:35 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2025-12-22 22:35 - 2019-12-07 15:52 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\USOPrivate
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2025-12-22 22:35 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2025-12-22 22:16 - 2020-09-17 17:57 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-12-22 21:59 - 2023-10-05 15:46 - 000000000 ____D C:\Users\Horst\AppData\Local\Ashampoo Backup
2025-12-22 21:59 - 2017-10-29 10:59 - 000000000 ____D C:\Program Files (x86)\Nero
2025-12-22 21:55 - 2017-09-16 10:07 - 218369424 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-12-22 21:55 - 2017-09-16 10:07 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-12-22 21:53 - 2022-08-17 18:01 - 000000000 ____D C:\Program Files\dotnet
2025-12-22 21:53 - 2017-09-16 09:37 - 000000000 ____D C:\ProgramData\Package Cache
2025-12-22 21:52 - 2025-04-08 19:24 - 000000000 ____D C:\Program Files (x86)\dotnet
2025-12-22 21:52 - 2018-05-28 13:53 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-12-22 21:51 - 2023-05-24 14:32 - 000000000 ____D C:\Program Files\RUXIM
2025-12-22 21:43 - 2017-09-16 09:36 - 000000000 ____D C:\Program Files\Opera
2025-12-22 21:39 - 2020-07-21 18:51 - 000000000 ____D C:\Program Files (x86)\BraveSoftware
2025-12-22 20:39 - 2020-07-21 18:51 - 000000000 ____D C:\Users\Horst\AppData\Local\BraveSoftware
2025-12-22 20:38 - 2017-09-16 09:36 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Opera Software
2025-12-22 20:38 - 2017-09-16 09:36 - 000000000 ____D C:\Users\Horst\AppData\Local\Opera Software
2025-12-22 19:24 - 2020-11-05 17:52 - 000000000 ____D C:\Users\Horst\AppData\Local\ElevatedDiagnostics
2025-12-21 21:33 - 2024-09-19 21:42 - 000000000 ____D C:\Users\Horst\Projects Series
2025-12-21 13:17 - 2019-06-22 10:49 - 000000000 ____D C:\ProgramData\Reallusion
2025-12-20 23:38 - 2024-12-27 19:30 - 000000000 ____D C:\Users\Horst\Desktop\SAUERBRATEN
2025-12-19 21:06 - 2020-03-02 19:34 - 000000132 _____ C:\Users\Horst\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2025-12-19 19:45 - 2018-03-22 22:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Franzis
2025-12-19 19:44 - 2021-12-22 20:45 - 000000000 ____D C:\ProgramData\Audials
2025-12-19 19:43 - 2020-02-13 19:00 - 000000000 ____D C:\Program Files\Ashampoo
2025-12-18 20:52 - 2019-10-24 18:05 - 000038066 _____ C:\Users\Horst\AppData\Local\kritarc
2025-12-18 20:52 - 2019-10-24 18:05 - 000000000 ____D C:\Users\Horst\AppData\Roaming\krita
2025-12-18 11:27 - 2017-12-28 22:49 - 000000000 ____D C:\Users\Horst\AppData\LocalLow\Temp
2025-12-17 19:16 - 2023-12-06 19:00 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Ashampoo Snap
2025-12-17 18:59 - 2018-01-22 19:11 - 000000000 ____D C:\Users\Horst\AppData\Local\Abelssoft
2025-12-17 17:58 - 2023-03-08 14:53 - 000000000 ____D C:\Program Files\Franzis
2025-12-16 20:21 - 2018-05-21 09:52 - 000000000 ____D C:\Users\Horst\AppData\Local\PlaceholderTileLogoFolder
2025-12-16 18:30 - 2021-12-22 20:22 - 000000000 ____D C:\Users\Horst\AppData\Roaming\ASCOMP Software
2025-12-16 15:06 - 2020-11-05 18:43 - 000000000 ____D C:\Users\Horst\AppData\Local\Avira
2025-12-16 13:51 - 2023-01-14 17:28 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-12-15 23:48 - 2017-09-25 18:58 - 000000000 ____D C:\Users\Horst\AppData\Local\Google
2025-12-15 22:14 - 2019-12-03 14:55 - 000000000 ____D C:\Users\Horst\AppData\Roaming\dvdcss
2025-12-15 22:14 - 2019-09-30 13:28 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Notepad++
2025-12-15 19:27 - 2017-12-03 23:33 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Nero
2025-12-15 19:27 - 2017-10-29 11:05 - 000000000 ____D C:\ProgramData\Nero
2025-12-14 23:39 - 2024-01-17 18:08 - 000000000 ____D C:\Users\_ashbackuppb_
2025-12-14 22:42 - 2023-04-15 18:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\InPixio
2025-12-14 22:42 - 2020-11-05 19:08 - 000000000 ____D C:\Program Files\CCleaner
2025-12-13 20:31 - 2020-12-01 19:50 - 000000000 ____D C:\Program Files\7-Zip
2025-12-12 15:35 - 2017-10-02 19:41 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Intel
2025-12-12 11:27 - 2021-12-22 20:32 - 000000000 ____D C:\Users\Horst\AppData\Local\Audials
2025-12-12 11:26 - 2023-12-08 18:18 - 000000000 ____D C:\Program Files\Audials
2025-12-05 22:38 - 2024-01-03 18:42 - 000000000 ___HD C:\Users\Horst\.opera
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2020-04-14 21:18 - 2020-04-14 21:20 - 332627677 _____ () C:\Program Files\makehuman-1.1.1-win32.zip
2019-06-24 16:49 - 2017-11-19 12:51 - 000004286 _____ () C:\Program Files (x86)\FalcoGo.ico
2019-06-24 16:49 - 2017-11-19 12:53 - 000000044 _____ () C:\Program Files (x86)\FalcoGo.url
2019-06-24 16:49 - 2016-01-05 12:37 - 000004286 _____ () C:\Program Files (x86)\FalconLine.ico
2019-06-24 16:49 - 2016-01-05 12:25 - 000000047 _____ () C:\Program Files (x86)\FalconLine.url
2019-06-24 16:49 - 2016-12-21 00:39 - 000004286 _____ () C:\Program Files (x86)\FalcoSpace.ico
2019-06-24 16:49 - 2016-12-21 00:36 - 000000047 _____ () C:\Program Files (x86)\FalcoSpace.url
2019-07-07 16:36 - 2019-07-07 16:36 - 007315103 _____ () C:\Program Files (x86)\picturenaut_3_2_1690.zip
2011-01-12 01:00 - 2011-01-12 01:00 - 000146944 _____ () C:\Program Files (x86)\Common Files\dsfFLACDecoder.dll
2011-01-12 01:00 - 2011-01-12 01:00 - 000221184 _____ () C:\Program Files (x86)\Common Files\dsfFLACEncoder.dll
2011-01-12 01:00 - 2011-01-12 01:00 - 000204800 _____ () C:\Program Files (x86)\Common Files\dsfNativeFLACSource.dll
2012-05-11 13:16 - 2012-05-11 13:16 - 000171520 _____ () C:\Program Files (x86)\Common Files\dsfOggDemux2.dll
2011-01-12 01:00 - 2011-01-12 01:00 - 000240128 _____ () C:\Program Files (x86)\Common Files\dsfVorbisDecoder.dll
2009-07-11 22:08 - 2009-07-11 22:08 - 000001860 _____ () C:\Program Files (x86)\Common Files\Microsoft.VC90.CRT.manifest
2011-04-18 21:51 - 2011-04-18 21:51 - 000569680 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\MSVCP90.dll
2011-04-18 21:51 - 2011-04-18 21:51 - 000653136 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\MSVCR90.dll
2010-12-16 20:39 - 2010-12-16 20:39 - 000412672 _____ (Google) C:\Program Files (x86)\Common Files\vp8decoder.dll
2010-12-16 20:39 - 2010-12-16 20:39 - 000701440 _____ (Google) C:\Program Files (x86)\Common Files\vp8encoder.dll
2010-12-16 20:39 - 2010-12-16 20:39 - 000302592 _____ (Google) C:\Program Files (x86)\Common Files\webmmux.dll
2010-12-16 20:39 - 2010-12-16 20:39 - 000292352 _____ (Google) C:\Program Files (x86)\Common Files\webmsplit.dll
2011-01-12 01:00 - 2011-01-12 01:00 - 000030208 _____ () C:\Program Files (x86)\Common Files\wmpinfo.dll
2022-01-20 17:17 - 2022-01-20 17:17 - 000000246 _____ () C:\Users\Horst\AppData\Roaming\.ptbt1
2018-02-23 23:17 - 2021-11-30 17:09 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-AIFF-Format - Voreinstellungen
2018-02-24 22:58 - 2024-01-22 20:27 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-BMP-Format - Voreinstellungen
2021-01-09 20:05 - 2021-04-05 22:13 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-GIF-Format - Voreinstellungen
2020-03-02 19:34 - 2025-12-19 21:06 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2017-11-08 18:21 - 2024-08-06 18:07 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-Targa-Format - Voreinstellungen
2020-06-11 21:39 - 2020-06-11 21:39 - 001456142 _____ () C:\Users\Horst\AppData\Roaming\AvidLink_Install.log
2020-11-12 20:48 - 2024-10-27 20:01 - 000000632 _____ () C:\Users\Horst\AppData\Roaming\com.cloudapp.windows.plist
2019-10-24 22:10 - 2025-11-24 22:03 - 000000128 _____ () C:\Users\Horst\AppData\Roaming\FotoSketcher.ini
2019-04-05 14:25 - 2019-04-05 14:26 - 000000112 _____ () C:\Users\Horst\AppData\Roaming\main.ini
2019-07-07 16:08 - 2020-06-27 17:41 - 000000009 _____ () C:\Users\Horst\AppData\Roaming\tabbles_hwnd_main
2019-07-07 16:08 - 2020-06-27 17:41 - 000000009 _____ () C:\Users\Horst\AppData\Roaming\tabbles_hwnd_quick_link
2020-05-24 19:15 - 2020-05-24 19:15 - 000018687 _____ () C:\Users\Horst\AppData\Roaming\unins000.dat
2020-05-24 19:15 - 2020-05-24 19:15 - 000013844 _____ () C:\Users\Horst\AppData\Roaming\unins000.msg
2017-11-02 22:54 - 2024-01-11 23:48 - 000001456 _____ () C:\Users\Horst\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2025-12-15 23:48 - 2025-12-15 23:48 - 000111621 _____ () C:\Users\Horst\AppData\Local\dxdiag.log
2025-10-14 20:57 - 2025-12-18 13:06 - 000008180 _____ () C:\Users\Horst\AppData\Local\krita-sysinfo.log
2019-10-24 18:05 - 2025-12-18 20:52 - 000176896 _____ () C:\Users\Horst\AppData\Local\krita.log
2020-07-01 20:54 - 2025-12-18 13:05 - 000051362 _____ () C:\Users\Horst\AppData\Local\kritacrash.log
2025-12-18 20:52 - 2025-12-18 20:52 - 000000039 _____ () C:\Users\Horst\AppData\Local\kritadisplayrc
2019-10-24 18:05 - 2025-12-18 20:52 - 000038066 _____ () C:\Users\Horst\AppData\Local\kritarc
2020-08-06 16:28 - 2020-08-06 16:28 - 000000057 _____ () C:\Users\Horst\AppData\Local\makehuman.conf
2018-10-04 11:18 - 2022-10-28 20:35 - 000000309 _____ () C:\Users\Horst\AppData\Local\oobelibMkey.log
2025-09-16 12:48 - 2025-09-16 12:48 - 000000768 _____ () C:\Users\Horst\AppData\Local\recently-used.xbel
2017-10-01 20:45 - 2020-07-15 20:43 - 000007600 _____ () C:\Users\Horst\AppData\Local\Resmon.ResmonCfg
2022-11-26 18:42 - 2022-12-09 20:24 - 000139264 _____ () C:\Users\Horst\AppData\Local\Tempwd.tmp
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
|
| Themen zu Win 10 : WLAN-USB-Sticks nicht migriert - WLAN-Verbindung kann kurz etabliert werden, bricht dann wieder ab |
| antivir, avira, cursor, firefox, frage, google, homepage, installation, internet, internet explorer, mozilla, musik, netzwerk, nicht migriert, problem, prozesse, realtek, registry, rundll, server, services.exe, software, svchost.exe, system, updates, windows, wlan-usb |