Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.
Windows 11: Möglicher Trojanerbefall nach ausführung dubioser .exe
Guten Tag,
mein Sohn hat auf seinem Rechner eine fragwürdige .exe Datei ausgeführt. Avast hat hier direkt 2 Dateien in die Quarantäne verschoben und als Trojaner markiert welche er mitsamt dem gedownloadeten gelöscht hat.
Malwarebytes, Avast und Windows Defender sind schon über das System gelaufen. Malwarebytes hat 2 Funde angezeigt welcher aber mit seriösen Programmen zutuen haben.
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-02-2026
durchgeführt von ***** (Administrator) auf DESKTOP-JT7T9B0 (ASUS System Product Name) (07-02-2026 16:39:03)
Gestartet von C:\Users\*****\Downloads\FRST64.exe
Geladene Profile: *****
Plattform: Microsoft Windows 11 Pro Version 25H2 26200.7623 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <5>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe
(E:\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) E:\Mozilla Firefox\crashhelper.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(Mozilla Corporation -> Mozilla Corporation) E:\Mozilla Firefox\firefox.exe <16>
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe
(services.exe ->) (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Windows\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_cdf3ca3c77d5f267\logi_lamparray_service.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CredentialEnrollmentManager.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <4>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4646b47d9477048e\Display.NvContainer\NVDisplay.Container.exe <2>
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.195.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18725336 2022-05-12] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [4143440 2025-12-02] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [887976 2026-02-03] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752264 2025-12-18] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\RunOnce: [msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}] => C:\Program Files (x86)\Microsoft\EdgeWebView\Application\144.0.3719.115\Installer\setup.exe [7771728 2026-02-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3946404165-2299855374-679032929-1001\...\Run: [GogGalaxy] => E:\GOG Galaxy\GalaxyClient.exe [14592560 2025-12-20] (GOG sp. z o.o -> GOG.com)
HKU\S-1-5-21-3946404165-2299855374-679032929-1001\...\Run: [WallpaperEngine] => D:\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe [3647928 2025-02-19] (Skutta Software GmbH -> )
HKU\S-1-5-21-3946404165-2299855374-679032929-1001\...\Run: [EADM] => C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe [2736744 2024-04-21] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-3946404165-2299855374-679032929-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [41671128 2026-01-31] (Adobe Inc. -> Adobe Systems Incorporated)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\141.0.7390.77\Installer\chrmstp.exe [2025-10-14] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2026-02-05]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {DA0EEDEE-9C5F-4F42-9BAD-C53BF6388166} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1581568 2025-08-24] (Adobe Inc. -> Adobe Inc.)
Task: {B05054AB-34EA-4271-8D4A-511BC0C6D29E} - System32\Tasks\Avast Software\Avast Cleanup BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [6108464 2025-07-31] (Avast Software s.r.o. -> Gen Digital Inc.) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup" --configpath "C:\ProgramData\Avast Software\Cleanup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\Cle (Der Dateneintrag hat 53 weitere Zeichen).
Task: {BE2C4F24-2446-432F-ACC2-8567DBA12B09} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [8930096 2025-07-09] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {BDD72359-216D-4A1B-990B-7A834D1C1529} - System32\Tasks\Avast Software\Avast Driver Updater BugReport => C:\Program Files\Avast Software\Driver Updater\AvBugReport.exe [6108464 2025-07-31] (Avast Software s.r.o. -> Gen Digital Inc.) -> --send "dumps|report" --silent --product 148 --programpath "C:\Program Files\Avast Software\Driver Updater" --configpath "C:\ProgramData\Avast Software\Driver Updater" --path "C:\ProgramData\Avast Software\Driver Updater\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramD (Der Dateneintrag hat 82 weitere Zeichen).
Task: {8021A201-4B25-4434-9FEB-04A54892C143} - System32\Tasks\Avast Software\Avast Driver Updater Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-du\icarus.exe [8930096 2025-07-08] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {E3684F73-97AC-480E-8198-654D6045E73C} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5623464 2026-02-03] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B9743076-60DB-4AB5-8FEB-3CF61E25DA02} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [6193832 2025-12-11] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramDat (Der Dateneintrag hat 80 weitere Zeichen).
Task: {B81A2059-F757-4EC9-B87C-C7A59C4CC13B} - System32\Tasks\Avast Software\Avast SecureLine VPN Emergency Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [3959464 2025-12-11] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C51F60D1-D821-4089-B205-5275E7BC0D3D} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [9176800 2025-12-09] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B2024C11-4C38-4B7B-BB76-C5DF89FF1E9E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2977504 2025-10-13] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {67570494-C023-4C1F-BCED-F404ADC55EEF} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem144.0.7547.0{5C4A42FA-B2C2-4B92-9472-3580338B41DB} => C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe [7056536 2025-11-26] (Google LLC -> Google LLC)
Task: {C89D998F-23D3-4942-ABB9-C3DC0E3FAB99} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16268592 2026-02-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {67D96D47-0E55-47BA-9A3A-DE47B4367AE3} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28622664 2026-01-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {6DAA2D58-18AB-457E-A96E-8E59C7AAE543} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [73568 2026-02-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {768F748C-DFCC-4B46-B773-D85D98D2059B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28622664 2026-01-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {19A19A59-869C-4ABE-A9CF-92896C0D7B21} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309608 2026-02-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {39297F9F-E3B9-48A3-B96F-20EBED3DE03A} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309608 2026-02-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {32992391-F522-4E6C-953C-547649FD738A} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1346856 2026-02-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {6A937301-51FB-4122-B750-1CCB27226936} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4447336 2026-01-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {566D07A7-230E-4206-AC44-02E39DBEAE05} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16268592 2026-02-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Keine Datei)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Keine Datei)
Task: {0D761667-6667-4FF5-BA32-3DA6E1153716} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (Keine Datei)
Task: {F1A8034B-8139-46F4-A6BE-22C32E9AAA67} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (Keine Datei)
Task: {2E7984CD-4467-4A03-9C5A-AB2262C215AE} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (Keine Datei)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Keine Datei)
Task: {D6DC3A18-1120-4DDD-9AD9-243F6CFD0B84} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe [1786528 2026-02-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CF3C7909-859A-4EAE-8AC6-16F4DEE3EB88} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe [1786528 2026-02-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DCA02588-3FBA-4D28-B40D-85756B24DF4A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe [1786528 2026-02-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {64C5972A-BA77-41DE-97A7-A894634E74B0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe [1786528 2026-02-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9A328E20-A81E-4FC0-A22E-2B0EFA1C91D4} - System32\Tasks\Mozilla\Firefox Default Browser Agent F60400B719B2D51E => E:\Mozilla Firefox\default-browser-agent.exe [34944 2026-02-05] (Mozilla Corporation -> Mozilla Foundation)
Task: {F20129E0-0429-49E4-B492-D3F0F7C75FF6} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3337328 2026-01-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5B315E7A-6138-478C-AC0F-DF5AD1B47DF5} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [121605552 2022-05-27] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) -> C:\Program Files (x86)\Samsung\Samsung Magician\\/AUTOHIDE
Task: {581AF20F-8789-49C4-AA38-5DEE17228988} - System32\Tasks\Ubisoft\Ubisoft Connect Background Update => E:\Uplay\Ubisoft Game Launcher\upc.exe [17246392 2026-01-31] (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{45b91815-a1a1-4717-99ad-29460e2200bb}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{45b91815-a1a1-4717-99ad-29460e2200bb}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{4dae2e36-5de2-45a6-9ca3-df783d6b134a}: [DhcpNameServer] 10.240.251.2
Tcpip\..\Interfaces\{63d0dd89-b0b2-400a-b728-0f983d82ce5c}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{ae17934b-af2a-4fb8-b399-d1b70fe54cef}: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF TaskBarID: F60400B719B2D51E -> E:\Mozilla Firefox
FF DefaultProfile: tdb0hwd4.default -> E020BA2ACACF116C
FF DefaultProfile: em7etpww.default-release -> F60400B719B2D51E
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\em7etpww.default-release [2026-02-07]
FF Extension: (Activist – Bold) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\em7etpww.default-release\Extensions\activist-bold-colorway@mozilla.org.xpi [2023-03-16]
FF Extension: (Tampermonkey) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\em7etpww.default-release\Extensions\firefox@tampermonkey.net.xpi [2025-11-27]
FF Extension: (uBlock Origin) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\em7etpww.default-release\Extensions\uBlock0@raymondhill.net.xpi [2026-01-31]
FF Extension: (Stay secure with CyberGhost VPN Free Proxy) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\em7etpww.default-release\Extensions\{585280b0-ee78-428a-92c5-3fb3c0b85460}.xpi [2025-10-03]
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\tdb0hwd4.default [2022-12-18]
FF Extension: (SteamDB) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\tdb0hwd4.default\Extensions\firefox-extension@steamdb.info.xpi [2022-11-07]
FF Extension: (hotfix-update-xpi-intermediate) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\tdb0hwd4.default\Extensions\hotfix-update-xpi-intermediate@mozilla.com.xpi [2019-05-15]
FF Extension: (Hotspot Shield Free VPN Proxy - Unlimited VPN) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\tdb0hwd4.default\Extensions\hotspot-shield@anchorfree.com.xpi [2020-12-15]
FF Extension: (uBlock Origin) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\tdb0hwd4.default\Extensions\uBlock0@raymondhill.net.xpi [2022-11-15]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\tdb0hwd4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2022-12-05]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-01-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-01-31] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.481.0 -> C:\Program Files (x86)\Java\jre1.8.0_481\bin\dtplugin\npDeployJava1.dll [2025-12-18] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.481.0 -> C:\Program Files (x86)\Java\jre1.8.0_481\bin\plugin2\npjp2.dll [2025-12-18] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2026-02-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-08] (Microsoft Corporation -> Microsoft Corporation)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\*****\AppData\Local\Microsoft\Edge\User Data\Default [2025-10-10]
Edge Extension: (Google Docs Offline) - C:\Users\*****\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-10-10]
Edge Extension: (Edge relevant text changes) - C:\Users\*****\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-15]
Edge HKU\S-1-5-19\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]
Edge HKU\S-1-5-20\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]
Edge HKU\S-1-5-21-3946404165-2299855374-679032929-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]
Chrome:
=======
CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default [2026-01-12]
CHR Extension: (Google Docs Offline) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-09-20]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-12-11]
CHR HKLM\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKU\S-1-5-21-3946404165-2299855374-679032929-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174584 2025-08-24] (Adobe Inc. -> Adobe Inc.)
S2 AsusUpdateCheck; C:\WINDOWS\System32\AsusUpdateCheck.exe [845256 2026-02-07] (ASUSTeK Computer Inc. -> )
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7844520 2026-02-03] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [1039528 2026-02-03] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2635432 2026-02-03] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [1092776 2026-02-03] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastCleanupSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [20681008 2025-07-31] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 AvastDriverUpdSvc; C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe [18335536 2025-07-31] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2024-09-24] (Avast Software s.r.o. -> AVAST Software)
S4 AvmSwitchUsb; C:\Program Files (x86)\avmwlanstick\AVMSwitchUsb.exe [125440 2015-10-01] () [Datei ist nicht signiert]
S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [2567304 2024-04-27] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [18991400 2024-11-06] (BattlEye Innovations e.K. -> )
S4 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13263248 2026-01-30] (Microsoft Corporation -> Microsoft Corporation)
S2 DtsHPXV2Apo4Service; C:\WINDOWS\System32\DTS\HP\APO4x\DtsHPXV2Apo4Service.exe [367608 2023-11-22] (HP Inc. -> DTS Inc.)
S4 EAAntiCheatService; C:\Program Files\EA\AC\eaanticheat.gameservice.exe [164234488 2025-12-06] (Electronic Arts, Inc. -> Electronic Arts)
S4 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [14991976 2024-04-21] (Electronic Arts, Inc. -> Electronic Arts)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1137904 2024-07-13] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [959216 2025-11-30] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 EpicGamesUpdater; E:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3344336 2025-12-18] (Epic Games Inc. -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [381416 2024-07-13] (Epic Games Inc. -> Epic Games, Inc.)
S4 GalaxyClientService; E:\GOG Galaxy\GalaxyClientService.exe [2443312 2025-12-20] (GOG sp. z o.o -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7657008 2025-08-25] (GOG sp. z o.o -> GOG.com)
S3 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [141680 2025-10-20] (Microsoft Corporation -> Microsoft Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [206808 2022-05-12] (Logitech Inc -> Logitech Inc.)
R2 logi_lamparray_service; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_cdf3ca3c77d5f267\logi_lamparray_service.exe [9903656 2024-04-17] (Logitech Inc -> Logitech, Inc.)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11255744 2026-02-07] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-08-02] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe [2067464 2026-02-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4646b47d9477048e\Display.NvContainer\NVDisplay.Container.exe [1275624 2025-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
S4 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1565304 2025-12-11] (Rockstar Games, Inc. -> Rockstar Games)
S4 SamsungMagicianSVC; C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe [360368 2022-05-27] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [14622376 2025-12-11] (Gen Digital Inc. -> Gen Digital Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803088 2025-11-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\Wellbia.com\ucldr_battlegrounds_gl.exe [5084200 2024-01-12] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 UpcElevationService; C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher Core\UpcElevationService.exe [351928 2026-01-31] (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [62279264 2025-12-02] (Riot Games, Inc. -> Riot Games, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe [4435096 2026-02-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe [290744 2026-02-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [26193816 2025-08-14] (KRAFTON, Inc. -> KRAFTON, Inc.)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [54752 2022-12-15] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amduw23g; C:\WINDOWS\System32\DriverStore\FileRepository\u0400644.inf_amd64_9691c8ee1bbfcbb7\B399690\amdkmdag.sys [100084632 2024-02-27] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [286816 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [435808 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [304736 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [88160 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [29144 2025-08-02] (Microsoft Windows Early Launch Anti-Malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [32864 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [289888 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [586336 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [97376 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [73312 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [898656 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1315424 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [231008 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [404064 2026-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 aswVpnRdr; C:\WINDOWS\System32\drivers\aswVpnRdr.sys [85776 2025-02-06] (Microsoft Windows Hardware Compatibility Publisher -> Avast Software)
S3 aswWireGuard; C:\WINDOWS\System32\drivers\aswWireguard.sys [174912 2025-06-10] (Microsoft Windows Hardware Compatibility Publisher -> Avast Software)
S3 avmeject; C:\WINDOWS\System32\drivers\avmeject.sys [14120 2015-10-01] (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
S3 AWCCDriver; C:\WINDOWS\System32\drivers\AWCCDriver.sys [43496 2022-12-11] (IndiLogic LLC -> Dell Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [602112 2025-07-08] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-07-08] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-05-19] (Microsoft Corporation) [Datei ist nicht signiert]
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82352 2026-02-07] (Microsoft Windows -> Microsoft Corporation)
R3 LGBusEnum; C:\WINDOWS\system32\drivers\LGBusEnum64.sys [46264 2022-05-12] (Logitech Inc -> Logitech Inc.)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore64.sys [76480 2022-05-12] (Logitech Inc -> Logitech Inc.)
R3 LGVirHid; C:\WINDOWS\system32\drivers\LGVirHid64.sys [34496 2022-05-12] (Logitech Inc -> Logitech Inc.)
R3 logi_lamparray; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_cdf3ca3c77d5f267\logi_lamparray.sys [98864 2024-04-17] (Logitech Inc -> Logitech, Inc.)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-08-02] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-02-07] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-11-13] (Nvidia Corporation -> NVIDIA Corporation)
R3 rt25cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt25cx21x64.inf_amd64_8e61b4ea25373168\rt25cx21x64.sys [887776 2024-10-21] (Realtek Semiconductor Corp. -> Realtek)
R0 SCMNdisP; C:\WINDOWS\System32\DRIVERS\scmndisp.sys [29472 2012-09-05] (NETGEAR -> SerComm Corporation)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [44293288 2025-12-01] (Riot Games, Inc. -> Riot Games, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21888 2026-02-07] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [635272 2026-02-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102832 2026-02-07] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [215864 2024-05-25] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 EAAntiCheat; system32\drivers\eaanticheat.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-02-07 16:39 - 2026-02-07 16:39 - 000034145 _____ C:\Users\*****\Downloads\FRST.txt
2026-02-07 16:38 - 2026-02-07 16:39 - 000000000 ____D C:\FRST
2026-02-07 16:35 - 2026-02-07 16:35 - 002447360 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe
2026-02-07 16:31 - 2026-02-07 16:33 - 000000000 ____D C:\AdwCleaner
2026-02-07 16:31 - 2026-02-07 16:31 - 009629128 _____ (Malwarebytes) C:\Users\*****\Downloads\adwcleaner.exe
2026-02-07 10:45 - 2026-02-07 10:45 - 000001449 _____ C:\Users\Public\Desktop\NVIDIA App.lnk
2026-02-07 10:45 - 2026-01-16 16:37 - 000161912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap32v.dll
2026-02-07 10:45 - 2026-01-16 16:37 - 000060568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2026-02-07 10:44 - 2026-02-07 10:44 - 000745650 _____ C:\WINDOWS\system32\perfh007.dat
2026-02-07 10:44 - 2026-02-07 10:44 - 000158752 _____ C:\WINDOWS\system32\perfc007.dat
2026-02-07 10:44 - 2026-02-07 10:44 - 000000000 ____D C:\Users\*****\AppData\Roaming\Sun
2026-02-07 10:43 - 2026-02-07 10:44 - 000000000 ____D C:\Program Files (x86)\Java
2026-02-07 10:43 - 2026-02-07 10:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2026-02-07 10:43 - 2025-12-18 15:01 - 000178872 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2026-02-07 10:31 - 2026-02-07 10:31 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2026-02-07 10:30 - 2026-02-07 12:38 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-02-07 10:30 - 2026-02-07 10:30 - 000000000 ____D C:\WINDOWS\Panther
2026-02-07 04:59 - 2026-02-07 04:59 - 000000000 ____D C:\Users\*****\ipsniff
2026-02-07 04:59 - 2026-02-07 04:59 - 000000000 ____D C:\Users\*****\AppData\Roaming\decontev
2026-02-06 17:04 - 2026-02-06 17:04 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-02-03 19:08 - 2026-02-03 19:08 - 000323752 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2026-01-31 22:33 - 2026-01-31 22:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\Ubisoft
2026-01-31 22:33 - 2026-01-31 22:33 - 000000000 ____D C:\Program Files (x86)\Ubisoft
2026-01-31 18:38 - 2026-02-01 13:05 - 000000179 _____ C:\Users\*****\Desktop\Enlightment.txt
2026-01-11 22:41 - 2026-01-11 22:41 - 000000000 ____D C:\ProgramData\dbg
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-02-07 16:33 - 2024-12-27 01:42 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2026-02-07 16:33 - 2022-12-11 17:27 - 000000000 ____D C:\ProgramData\NVIDIA
2026-02-07 16:22 - 2023-01-25 21:34 - 000000000 ____D C:\Users\*****\Desktop\Präsi
2026-02-07 16:14 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-02-07 15:27 - 2025-07-17 20:02 - 000000000 ____D C:\SteamLibrary
2026-02-07 14:32 - 2024-12-27 01:39 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-02-07 12:27 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-02-07 11:44 - 2022-12-11 18:43 - 000000000 ____D C:\Users\*****\AppData\Roaming\RenPy
2026-02-07 11:41 - 2022-12-11 17:21 - 000000000 ____D C:\Users\*****\AppData\Local\D3DSCache
2026-02-07 11:24 - 2025-08-02 12:11 - 000000000 ____D C:\Users\*****\AppData\Local\Malwarebytes
2026-02-07 10:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-02-07 10:52 - 2023-01-26 21:00 - 000002080 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2026-02-07 10:52 - 2023-01-19 22:42 - 000002092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-02-07 10:48 - 2022-12-11 21:36 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-02-07 10:46 - 2025-08-02 12:11 - 000245864 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2026-02-07 10:45 - 2024-12-27 01:42 - 000003834 _____ C:\WINDOWS\system32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2026-02-07 10:45 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-02-07 10:45 - 2022-12-11 17:27 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2026-02-07 10:44 - 2024-12-27 01:44 - 001729504 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-02-07 10:40 - 2024-07-19 15:00 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2026-02-07 10:37 - 2025-07-17 21:14 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-02-07 10:37 - 2024-12-27 01:42 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-02-07 10:37 - 2024-12-27 01:40 - 000069350 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-02-07 10:37 - 2022-12-11 21:36 - 000901328 _____ () C:\WINDOWS\system32\wpbbin.exe
2026-02-07 10:37 - 2022-12-11 21:36 - 000845256 _____ C:\WINDOWS\system32\AsusUpdateCheck.exe
2026-02-07 10:37 - 2022-12-11 21:36 - 000012288 ___SH C:\DumpStack.log.tmp
2026-02-07 10:37 - 2022-12-11 18:50 - 000000000 ____D C:\ProgramData\AVAST Software
2026-02-07 10:31 - 2024-04-01 08:21 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2026-02-07 10:30 - 2024-12-26 19:24 - 000000000 ____D C:\Users\*****
2026-02-07 05:40 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2026-02-07 05:27 - 2022-12-17 14:27 - 000000000 ____D C:\World_of_Tanks_EU
2026-02-07 05:27 - 2022-12-11 18:37 - 000000000 ____D C:\Users\*****\AppData\Roaming\discord
2026-02-07 04:22 - 2022-12-11 18:38 - 000000000 ____D C:\Users\*****\AppData\Local\Discord
2026-02-07 04:01 - 2022-12-11 21:36 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-02-07 01:22 - 2021-04-10 15:57 - 000002257 _____ C:\Users\*****\Desktop\Discord.lnk
2026-02-06 23:11 - 2022-12-11 18:34 - 000000000 ____D C:\Program Files\Common Files\PUBG
2026-02-06 22:33 - 2022-12-11 18:47 - 000000000 ____D C:\Users\*****\AppData\Local\Ubisoft Game Launcher
2026-02-06 17:04 - 2022-12-11 19:29 - 000000790 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-02-05 22:34 - 2022-12-11 18:47 - 000000000 ____D C:\Users\*****\AppData\Local\Warframe
2026-02-05 19:28 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-02-05 19:01 - 2022-12-11 18:34 - 000000000 ____D C:\Program Files\Microsoft Office
2026-02-04 22:04 - 2022-12-11 21:41 - 000000000 ____D C:\Users\*****\AppData\Local\Packages
2026-02-04 22:04 - 2022-12-11 21:41 - 000000000 ____D C:\ProgramData\Packages
2026-02-03 23:08 - 2025-09-13 17:31 - 000002960 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskCachedFiles
2026-02-03 23:08 - 2024-12-27 01:42 - 000003682 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-02-03 23:08 - 2024-12-27 01:42 - 000003456 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-02-03 19:08 - 2024-09-24 21:44 - 001315424 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSP.sys
2026-02-03 19:08 - 2024-09-24 21:44 - 000898656 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2026-02-03 19:08 - 2024-09-24 21:44 - 000586336 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2026-02-03 19:08 - 2024-09-24 21:44 - 000435808 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2026-02-03 19:08 - 2024-09-24 21:44 - 000404064 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswVmm.sys
2026-02-03 19:08 - 2024-09-24 21:44 - 000304736 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2026-02-03 19:08 - 2024-09-24 21:44 - 000289888 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2026-02-03 19:08 - 2024-09-24 21:44 - 000286816 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArPot.sys
2026-02-03 19:08 - 2024-09-24 21:44 - 000097376 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2026-02-03 19:08 - 2024-09-24 21:44 - 000088160 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2026-02-03 19:08 - 2024-09-24 21:44 - 000073312 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2026-02-03 19:08 - 2024-09-24 21:44 - 000032864 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2026-02-03 19:08 - 2024-09-24 21:44 - 000021088 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2026-02-03 19:08 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-02-02 18:27 - 2022-12-11 18:38 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Excel
2026-02-02 17:24 - 2022-12-11 18:41 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Word
2026-01-31 22:38 - 2022-12-11 18:48 - 000000000 ____D C:\Users\*****\AppData\Local\BattlEye
2026-01-29 18:39 - 2025-02-15 23:36 - 000000000 ____D C:\Users\*****\Documents\Assassin's Creed Unity
2026-01-24 22:18 - 2022-12-11 18:38 - 000000000 ____D C:\Users\*****\AppData\Local\CrashDumps
2026-01-17 22:23 - 2023-01-07 17:34 - 000000000 ____D C:\Users\*****\AppData\Roaming\.minecraft
2026-01-16 17:03 - 2024-12-24 16:29 - 001310832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2026-01-16 17:03 - 2024-12-24 16:29 - 001115760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2026-01-16 17:03 - 2022-12-11 17:27 - 000290928 _____ C:\WINDOWS\system32\FvSDK_x64.dll
2026-01-16 17:03 - 2022-12-11 17:27 - 000264816 _____ C:\WINDOWS\SysWOW64\FvSDK_x86.dll
2026-01-16 16:37 - 2022-12-11 17:27 - 000185464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2026-01-16 16:37 - 2022-12-11 17:27 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2026-01-16 00:29 - 2024-12-27 01:42 - 000003542 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-01-16 00:27 - 2024-12-27 01:39 - 000325208 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-01-16 00:25 - 2024-04-01 17:36 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-01-16 00:25 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-01-16 00:25 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-01-16 00:25 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-01-16 00:25 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-01-16 00:25 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-01-16 00:25 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-01-16 00:25 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-01-16 00:25 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-01-16 00:25 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-01-15 20:15 - 2024-10-09 21:01 - 134222904 _____ C:\WINDOWS\392667600.dat
2026-01-15 20:08 - 2022-12-11 18:49 - 000000000 ____D C:\ProgramData\Riot Games
2026-01-15 19:59 - 2024-04-28 16:46 - 000000000 ____D C:\Users\*****\AppData\Roaming\riot-client-ux
2026-01-13 23:18 - 2023-10-29 12:23 - 000000000 ____D C:\ProgramData\Packer
2026-01-13 23:17 - 2022-12-11 18:38 - 000000000 ____D C:\Users\*****\AppData\Roaming\EasyAntiCheat
2026-01-13 21:06 - 2024-12-27 01:42 - 003276800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-01-12 19:46 - 2022-12-11 17:23 - 000002258 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-01-12 19:46 - 2022-12-11 17:23 - 000002217 _____ C:\Users\Public\Desktop\Google Chrome.lnk
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2023-08-26 14:38 - 2023-09-05 18:01 - 000000170 _____ () C:\Users\*****\AppData\Roaming\BattleBitConfig.ini
2023-09-05 18:43 - 2023-09-05 18:43 - 000000019 _____ () C:\Users\*****\AppData\Roaming\BattleBitMutedPlayers.ini
2024-12-16 20:22 - 2024-12-16 20:22 - 000000048 ____R () C:\Users\*****\AppData\Local\E234B8748ABB76AC94B6B54DE3E7EE44
2022-12-11 18:48 - 2025-07-18 22:26 - 000007592 _____ () C:\Users\*****\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Themen zu Windows 11: Möglicher Trojanerbefall nach ausführung dubioser .exe
Zum Thema Windows 11: Möglicher Trojanerbefall nach ausführung dubioser .exe - Guten Tag,
mein Sohn hat auf seinem Rechner eine fragwürdige .exe Datei ausgeführt. Avast hat hier direkt 2 Dateien in die Quarantäne verschoben und als Trojaner markiert welche er mitsamt - Windows 11: Möglicher Trojanerbefall nach ausführung dubioser .exe...
Gestern, 17:27
Baum-Darstellung