| |
| |||||||
Log-Analyse und Auswertung: Trojaner von Daemon Tools LightWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
Heute, 15:19
| #1 |
| |  Trojaner von Daemon Tools Light Hallo Zusammen  am 05.05.2026 habe ich auf einem Rechner mit Windows 11 Pro das Programm Deamon Tools genutzt. Nur für eine kurze Aktion - zwischen Intsllation, Anwendung und Deinstallation des Programms lagen etwa 20 Minuten. Es war die Version DTLite1250-2433b Wie ich einen Tag später gelesen habe, ist diese Version mit Malware verseucht gewesen. Nun stellt sich für mich die Frage, ob der PC noch infiziert ist. Habe den Rechner eben nochmal hochgefahren und einen Scan mit Malwarebytes und eset ausgeführt. Malwarebytes hat nichts erkannt. eset hat etwas erkannt, woraufhin ich die Logdaten von FRST erstellen lassen habe: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 28-04-2026
durchgeführt von etalm (Administrator) auf DESKTOP-K22IQOM (LENOVO 20N5S0F600) (08-05-2026 15:06:51)
Gestartet von C:\Users\etalm\Desktop\FRST64.exe
Geladene Profile: etalm
Plattform: Microsoft Windows 11 Pro Version 25H2 26200.8246 (X64) Sprache: Englisch (Vereinigte Staaten) -> Deutsch (Deutschland)
Standard-Browser: Edge
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files (x86)\Epson Software\Epson Printer Connection Checker\EPPCCMON.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\WindowsApps\Microsoft.MixedRealityLink_26.4160.4090.0_x64__8wekyb3d8bbwe\Platform\MixedRealityLinkSvc.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SystemUWPLauncher.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_b18a4e283f67c0b5\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b18a4e283f67c0b5\igfxEM.exe
(DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_2d3e2e42e0f8523f\DAX3API.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\DAX3_S~3.INF\DAX3API.exe
(DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\tphkload.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\System32\DriverStore\FileRepository\FNCC3C~1.INF\driver\shtctky.exe
(DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\tphkload.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\System32\DriverStore\FileRepository\FNCC3C~1.INF\driver\tposd.exe
(ESET, spol. s r.o. -> ESET) C:\Users\etalm\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\Epson Software\Epson Printer Connection Checker\EPPCCMON.EXE
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATISLE.EXE
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <14>
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_2d3e2e42e0f8523f\DAX3API.exe
(services.exe ->) (Fibocom Wireless Inc. -> Fibocom Wireless Inc.) C:\Windows\Firmware\FwSwitchbin\FwSwitchService.exe
(services.exe ->) (Fibocom Wireless Inc. -> Intel) C:\Windows\System32\ModemAuthenticator.exe
(services.exe ->) (Geek Software GmbH -> Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe <2>
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b18a4e283f67c0b5\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_82b77f8c4618e2d0\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_5fe2e31c542e0065\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_389da2bfec2045ef\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_389da2bfec2045ef\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_f11b844898206530\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_06c43e1ee675eae7\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\ThunderboltService.exe
(services.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\System32\DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\tphkload.exe
(services.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\SysWOW64\EasyResume.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_ce00423f6224d769\x64\ibmpmsvc.exe
(services.exe ->) (Lenovo -> Lenovo.) C:\Windows\System32\DriverStore\FileRepository\litsdrv.inf_amd64_0fefde8b58482d0b\x64\LITSSvc.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MixedRealityLink_26.4160.4090.0_x64__8wekyb3d8bbwe\Platform\MixedRealityLinkSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26030.3011-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26030.3011-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26030.3011-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_550508a90a3c9a47\RtkAudUService64.exe <3>
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(services.exe ->) (Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated.) C:\Windows\System32\DriverStore\FileRepository\synawudfbiousbuwp.inf_amd64_203e1aa750b8f773\SynRpcServer.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2605.31181.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MixedRealityLink_26.4160.4090.0_x64__8wekyb3d8bbwe\Platform\MixedRealityPairingHelper.exe
(svchost.exe ->) (Lenovo -> Lenovo) C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.264.3.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPHelper.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [466760 2026-02-16] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [486536 2019-06-11] (Geek Software GmbH -> Geek Software GmbH)
HKU\S-1-5-21-1627592443-2344284234-108597604-1001\...\Run: [EPSDNMON] => C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE [419144 2026-01-13] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-1627592443-2344284234-108597604-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATISLE.EXE [421736 2025-10-09] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-1627592443-2344284234-108597604-1001\...\MountPoints2: {68337a1d-4876-11f1-9918-002b6794e04c} - "F:\SETUP.EXE"
HKLM\...\Print\Monitors\EPSON ET-2750 Series 64MonitorBE: C:\Windows\system32\E_YLMBSLE.DLL [184832 2025-10-09] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\Windows\system32\enppmon.dll [3167256 2024-08-30] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {D32AA835-7D23-4BFC-BB0C-90A50256949D} - System32\Tasks\EPSON ET-2750 Series Update {D70B7FD6-74F7-432F-8276-FC59836AF5C1} => C:\Windows\System32\spool\drivers\x64\3\E_YTSSLE.EXE [680440 2025-10-09] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {6003DCB1-51DF-4408-AA60-D473C8815A0F} - System32\Tasks\Lenovo\Power Manager\Background monitor => C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe [130488 2026-02-05] (Lenovo -> Lenovo)
Task: {D12E3D5F-47E3-4408-99CF-8028B7AF0ECA} - System32\Tasks\Lenovo\Power Manager\Uninstall task => C:\Windows\SysWOW64\PowerMgrInst.exe [67512 2025-11-09] (Lenovo -> )
Task: {FB454A41-C7AD-40AB-982C-3320ACCCF410} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {938CCE8F-6503-439C-8E17-05674B879825} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {0875AAB9-C0CF-44E8-BC15-D6B0312D14AF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Keine Datei)
Task: {5188A260-FA33-4143-B77F-D52B99140ECC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26030.3011-0\MpCmdRun.exe [1790616 2026-04-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {45E692C7-1D54-41F5-ACE2-93898A0B7D16} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26030.3011-0\MpCmdRun.exe [1790616 2026-04-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {73C51A8F-CC5A-41A6-A219-AFA56FBDD657} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26030.3011-0\MpCmdRun.exe [1790616 2026-04-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {168C51C5-39EE-4CE4-8C52-06D0F92895F8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26030.3011-0\MpCmdRun.exe [1790616 2026-04-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0316BC68-92D5-4D00-B638-F368D5EC829E} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-1627592443-2344284234-108597604-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [705664 2026-05-04] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {D544DFC2-96BC-4C2E-A86A-B2C60C6F0A84} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-05-04] (Mozilla Corporation -> Mozilla Foundation)
Task: {07EA8AA0-CF12-413D-A97D-D099FD09A29E} - System32\Tasks\RtkAudUService64_BG => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_550508a90a3c9a47\RtkAudUService64.exe [1618296 2022-10-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {77A50851-B359-49A7-AF99-597370CBE78F} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4071680 2018-07-03] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\EPSON ET-2750 Series Update {D70B7FD6-74F7-432F-8276-FC59836AF5C1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSSLE.EXE:/EXE:{D70B7FD6-74F7-432F-8276-FC59836AF5C1} /F:UpdateWORKGROUP\DESKTOP-K22IQOM$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{331ecb4d-0002-437e-af99-7d7c35b8745a}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{331ecb4d-0002-437e-af99-7d7c35b8745a}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{72d80e7f-7cef-4b84-a9e1-b813916f0eb3}: [DhcpNameServer] 192.168.1.2
Tcpip\..\Interfaces\{72d80e7f-7cef-4b84-a9e1-b813916f0eb3}: [DhcpDomain] afb-production.net
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: i47vgv4z.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\etalm\AppData\Roaming\Mozilla\Firefox\Profiles\53b6c5md.default [2026-02-21]
FF ProfilePath: C:\Users\etalm\AppData\Roaming\Mozilla\Firefox\Profiles\i47vgv4z.default-release [2026-05-08]
FF Extension: (Porn/Malware Blocker) - C:\Users\etalm\AppData\Roaming\Mozilla\Firefox\Profiles\i47vgv4z.default-release\Extensions\{3df17fe5-3cb9-4b09-a704-1140eca22dfd}.xpi [2024-04-29]
FF Extension: (NoScript) - C:\Users\etalm\AppData\Roaming\Mozilla\Firefox\Profiles\i47vgv4z.default-release\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2026-05-04]
FF Extension: (Malware & URL Scanner) - C:\Users\etalm\AppData\Roaming\Mozilla\Firefox\Profiles\i47vgv4z.default-release\Extensions\{972a0f46-8ab6-4d1c-8eed-7af155f87298}.xpi [2020-05-28]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\etalm\AppData\Roaming\Mozilla\Firefox\Profiles\i47vgv4z.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2026-05-04]
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-07-03] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-07-03] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-1627592443-2344284234-108597604-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-07-03] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\etalm\AppData\Local\Microsoft\Edge\User Data\Default [2026-05-05]
Edge Extension: (Google Docs Offline) - C:\Users\etalm\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-20]
Edge Extension: (Edge relevant text changes) - C:\Users\etalm\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-02-21]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 DolbyDAXAPI; C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_2d3e2e42e0f8523f\DAX3API.exe [2549352 2024-08-16] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [206304 2020-10-02] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 FMAPOService; C:\Windows\System32\FMService64.exe [479656 2022-08-07] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 IBMPMSVC; C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_ce00423f6224d769\x64\ibmpmsvc.exe [1067920 2025-10-27] (Lenovo -> Lenovo)
R2 Lenovo Instant On; C:\Windows\SysWOW64\EasyResume.exe [2352520 2025-11-09] (Lenovo -> Lenovo Group Limited)
S4 LenovoBrightCtrl; C:\Windows\System32\DriverStore\FileRepository\litsdrv.inf_amd64_0fefde8b58482d0b\x64\BrightnessControl.exe [157008 2025-02-26] (Lenovo -> Lenovo.)
R2 LITSSVC; C:\Windows\System32\DriverStore\FileRepository\litsdrv.inf_amd64_0fefde8b58482d0b\x64\LITSSvc.exe [1143640 2025-02-26] (Lenovo -> Lenovo.)
S2 LPlatSvc; C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_ce00423f6224d769\x64\LPlatSvc.exe [895888 2025-10-27] (Lenovo -> Lenovo)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11483256 2026-05-08] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2026-05-08] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26030.3011-0\MpDefenderCoreService.exe [2088128 2026-04-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MicrosoftCopilotElevationService; C:\Program Files (x86)\Microsoft\Copilot\Application\147.0.3912.98\elevation_service.exe [3602248 2026-04-30] (Microsoft Corporation -> Microsoft Corporation)
R2 MixedRealityLinkSvc; C:\Program Files\WindowsApps\Microsoft.MixedRealityLink_26.4160.4090.0_x64__8wekyb3d8bbwe\Platform\MixedRealityLinkSvc.exe [1103432 2026-05-08] (Microsoft Corporation -> Microsoft Corporation)
R2 ModemAuthenticatorService; C:\Windows\System32\ModemAuthenticator.exe [1034672 2022-08-25] (Fibocom Wireless Inc. -> Intel)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [486536 2019-06-11] (Geek Software GmbH -> Geek Software GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [811360 2026-04-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SynHsaService; C:\Windows\System32\DriverStore\FileRepository\synawudfbiousbuwp.inf_amd64_203e1aa750b8f773\SynRpcServer.exe [188440 2024-04-15] (Synaptics Incorporated -> Synaptics Incorporated.)
R2 TbtP2pShortcutService; C:\Windows\TbtP2pShortcutService.exe [256368 2022-12-15] (Intel Corporation -> Intel Corporation)
R2 TPHKLOAD; C:\Windows\System32\DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\TPHKLOAD.exe [473760 2021-10-22] (Lenovo -> Lenovo Group Limited)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26030.3011-0\NisSrv.exe [4480592 2026-04-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26030.3011-0\MsMpEng.exe [290744 2026-04-19] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 AKCCID; C:\Windows\System32\drivers\AKCCID.sys [57280 2019-10-30] (Alcorlink Corp. -> Generic)
R3 cxwmbclass; C:\Windows\System32\DriverStore\FileRepository\netwmbclass.inf_amd64_7e33f06b13d0c370\cxwmbclass.sys [167936 2026-04-20] (Microsoft Windows -> Microsoft Corporation)
S3 flashUsbWdf; C:\Windows\System32\drivers\flashUsbWdf.sys [47784 2020-06-15] (Intel Corporation -> emsys Embedded Systems GmbH)
R3 GlPciSD; C:\Windows\System32\drivers\GlPciSD.sys [486520 2020-10-21] (GENESYS LOGIC, INC. -> Genesys Logic)
R3 IBMPMDRV; C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_ce00423f6224d769\x64\ibmpmdrv.sys [56720 2025-10-27] (Lenovo -> Lenovo)
R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [82352 2026-02-22] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [235584 2026-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [22120 2026-05-08] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [245864 2026-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 PMDRVS; C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_ce00423f6224d769\x64\pmdrvs.sys [42384 2025-10-27] (Lenovo -> Lenovo)
R3 UDE; C:\Windows\System32\drivers\UDE.sys [344496 2022-08-25] (Fibocom Wireless Inc. -> Intel Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [21888 2026-04-19] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [647560 2026-04-19] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [100744 2026-04-19] (Microsoft Windows -> Microsoft Corporation)
R3 WiMan; C:\Windows\System32\DriverStore\FileRepository\wiman.inf_amd64_39b0d69e31702623\WiMan\WiMan.sys [169568 2022-07-11] (Intel Corporation -> Intel Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-05-08 15:06 - 2026-05-08 15:07 - 000024467 _____ C:\Users\etalm\Desktop\FRST.txt
2026-05-08 15:06 - 2026-05-08 15:07 - 000000000 ____D C:\FRST
2026-05-08 15:05 - 2026-05-08 15:05 - 002447360 _____ (Farbar) C:\Users\etalm\Desktop\FRST64.exe
2026-05-08 14:36 - 2026-05-08 15:07 - 000000000 ____D C:\Users\etalm\AppData\Local\Malwarebytes
2026-05-08 14:36 - 2026-05-08 14:36 - 000002100 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-05-08 14:36 - 2026-05-08 14:36 - 000002088 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2026-05-08 14:36 - 2026-05-08 14:36 - 000000000 ____D C:\Users\etalm\AppData\Local\Sentry
2026-05-08 14:35 - 2026-05-08 14:35 - 000001385 _____ C:\Users\etalm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2026-05-08 14:35 - 2026-05-08 14:35 - 000001279 _____ C:\Users\etalm\Desktop\ESET Online Scanner.lnk
2026-05-08 14:35 - 2026-05-08 14:35 - 000000000 ____D C:\Users\etalm\AppData\Local\ESET
2026-05-08 14:34 - 2026-05-08 14:34 - 008412528 _____ (ESET) C:\Users\etalm\Downloads\esetonlinescanner.exe
2026-05-08 14:32 - 2026-05-08 14:32 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-05-08 14:32 - 2026-05-08 14:32 - 000000000 ____D C:\Program Files\Malwarebytes
2026-05-08 14:31 - 2026-05-08 14:31 - 002851456 _____ (Malwarebytes) C:\Users\etalm\Downloads\MBSetup(1).exe
2026-05-05 14:08 - 2026-05-05 14:08 - 000000000 ____D C:\Users\etalm\AppData\Roaming\OpenOffice
2026-05-05 14:05 - 2026-05-05 14:05 - 000001132 _____ C:\Users\Public\Desktop\OpenOffice 4.1.16.lnk
2026-05-05 14:05 - 2026-05-05 14:05 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.16
2026-05-05 14:05 - 2026-05-05 14:05 - 000000000 ____D C:\Program Files (x86)\OpenOffice 4
2026-05-05 14:03 - 2026-05-05 14:03 - 000000000 ____D C:\Users\etalm\AppData\Roaming\Microsoft\Word
2026-05-05 14:03 - 2026-05-05 14:03 - 000000000 ____D C:\Users\etalm\AppData\Roaming\Microsoft\UProof
2026-05-05 14:03 - 2026-05-05 14:03 - 000000000 ____D C:\Users\etalm\AppData\Roaming\Microsoft\Proof
2026-05-05 14:03 - 2026-05-05 14:03 - 000000000 ____D C:\Users\etalm\AppData\Roaming\Microsoft\Office
2026-05-05 14:03 - 2026-05-05 14:03 - 000000000 ____D C:\Users\etalm\AppData\Roaming\Microsoft\Document Building Blocks
2026-05-05 14:03 - 2026-05-05 14:03 - 000000000 ____D C:\Users\etalm\AppData\Roaming\Microsoft\Bibliography
2026-05-05 14:03 - 2026-05-05 14:03 - 000000000 ____D C:\Users\etalm\AppData\Roaming\Microsoft\AddIns
2026-05-05 14:01 - 2026-05-05 14:01 - 000002729 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2026-05-05 14:01 - 2026-05-05 14:01 - 000002662 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2026-05-05 14:01 - 2026-05-05 14:01 - 000002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2026-05-05 14:01 - 2026-05-05 14:01 - 000002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2026-05-05 14:01 - 2026-05-05 14:01 - 000002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2026-05-05 14:01 - 2026-05-05 14:01 - 000002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2026-05-05 14:01 - 2026-05-05 14:01 - 000002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2026-05-05 14:01 - 2026-05-05 14:01 - 000002642 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2026-05-05 14:01 - 2026-05-05 14:01 - 000002628 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2026-05-05 14:01 - 2026-05-05 14:01 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2026-05-05 14:01 - 2026-05-05 14:01 - 000000000 ____D C:\Users\etalm\Desktop\OpenOffice 4.1.16 (de) Installation Files
2026-05-05 14:00 - 2026-05-05 14:00 - 000000000 ____D C:\Windows\PCHEALTH
2026-05-05 14:00 - 2026-05-05 14:00 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2026-05-05 14:00 - 2026-05-05 14:00 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-05-05 14:00 - 2026-05-05 14:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2026-05-05 14:00 - 2026-05-05 14:00 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2026-05-05 13:56 - 2026-05-05 14:01 - 000000000 ____D C:\Windows\SHELLNEW
2026-05-05 13:56 - 2026-05-05 14:00 - 177246992 _____ (Apache Software Foundation) C:\Users\etalm\Downloads\Apache_OpenOffice_4.1.16_Win_x86_install_de.exe
2026-05-05 13:55 - 2026-05-05 14:00 - 000000000 ____D C:\Program Files\Microsoft Office
2026-05-05 13:55 - 2026-05-05 13:55 - 000000000 __RHD C:\MSOCache
2026-05-05 13:55 - 2026-05-05 13:55 - 000000000 ____D C:\Program Files\Microsoft Analysis Services
2026-05-05 13:55 - 2026-05-05 13:55 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2026-05-05 13:55 - 2026-05-05 13:55 - 000000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2026-05-05 13:43 - 2026-05-05 13:43 - 000000000 ____D C:\Users\etalm\AppData\Local\Microsoft Help
2026-05-05 13:40 - 2026-05-05 14:07 - 000000000 ____D C:\Users\etalm\AppData\Local\BrightData
2026-05-05 13:40 - 2026-05-05 14:07 - 000000000 ____D C:\ProgramData\BrightData
2026-05-05 13:40 - 2026-05-05 13:40 - 000710486 _____ C:\Windows\system32\perfh007.dat
2026-05-05 13:40 - 2026-05-05 13:40 - 000151408 _____ C:\Windows\system32\perfc007.dat
2026-05-05 13:40 - 2026-05-05 13:40 - 000000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2026-05-05 13:40 - 2026-05-05 13:40 - 000000000 ____D C:\Users\etalm\AppData\Local\Disc_Soft_Limited
2026-05-05 13:39 - 2026-05-05 14:07 - 000000000 ____D C:\Users\etalm\AppData\Roaming\Disc-Soft
2026-05-05 13:39 - 2026-05-05 14:07 - 000000000 ____D C:\ProgramData\Disc-Soft
2026-05-05 13:39 - 2026-05-05 13:39 - 000000000 ____D C:\Users\Public\Documents\Catch!
2026-05-05 13:33 - 2026-05-05 13:33 - 000000448 _____ C:\ProgramData\ntuser.pol
2026-05-05 13:33 - 2026-05-05 13:33 - 000000000 ____D C:\Users\etalm\Downloads\Rufus
2026-05-05 13:29 - 2026-05-05 13:30 - 000000065 _____ C:\Users\etalm\Downloads\rufus.ini
2026-05-05 13:29 - 2026-05-05 13:29 - 001946984 _____ (Akeo Consulting) C:\Users\etalm\Downloads\rufus-portable.exe
2026-05-05 13:06 - 2026-05-05 13:06 - 000000000 ____D C:\Users\etalm\AppData\Local\Backup
2026-05-04 09:24 - 2026-05-08 14:47 - 000000000 ____D C:\Windows\CbsTemp
2026-05-04 09:02 - 2026-05-05 13:34 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-04-20 20:42 - 2026-04-20 20:42 - 000083946 _____ C:\Windows\SysWOW64\ctac.json
2026-04-20 20:42 - 2026-04-20 20:42 - 000083946 _____ C:\Windows\system32\ctac.json
2026-04-20 20:42 - 2026-04-20 20:42 - 000036843 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-04-20 20:42 - 2026-04-20 20:42 - 000036843 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2026-04-20 20:42 - 2026-04-20 20:42 - 000004575 _____ C:\Windows\system32\ResPriUHMImageList
2026-04-20 20:42 - 2026-04-20 20:42 - 000004575 _____ C:\Windows\system32\ResPriLMImageList
2026-04-20 20:42 - 2026-04-20 20:42 - 000004575 _____ C:\Windows\system32\ResPriImageList
2026-04-20 20:42 - 2026-04-20 20:42 - 000004575 _____ C:\Windows\system32\ResPriHMImageList
2026-04-20 14:16 - 2026-04-20 14:16 - 000000000 ____D C:\Users\etalm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox Web-Apps
2026-04-09 11:48 - 2026-05-05 14:07 - 000000000 ____D C:\Users\etalm\AppData\Local\CrashDumps
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-05-08 15:06 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SystemTemp
2026-05-08 14:56 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-05-08 14:56 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\AppReadiness
2026-05-08 14:45 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-05-08 14:36 - 2024-04-01 09:26 - 000000000 ___HD C:\Windows\ELAMBKUP
2026-05-08 14:36 - 2024-04-01 09:24 - 000000000 ____D C:\Windows\INF
2026-05-08 14:11 - 2026-02-21 20:09 - 000000000 ____D C:\Users\etalm\AppData\Local\D3DSCache
2026-05-08 13:48 - 2026-02-21 20:09 - 000000000 __SHD C:\Users\etalm\IntelGraphicsProfiles
2026-05-05 14:09 - 2026-02-21 20:09 - 000000000 ____D C:\Users\etalm\AppData\Local\Packages
2026-05-05 14:01 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2026-05-05 13:56 - 2024-04-01 09:26 - 000000167 _____ C:\Windows\win.ini
2026-05-05 13:56 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-05-05 13:54 - 2026-02-21 20:14 - 000000000 ___RD C:\Users\etalm\OneDrive
2026-05-05 13:40 - 2026-02-21 19:33 - 001637736 _____ C:\Windows\system32\PerfStringBackup.INI
2026-05-05 13:35 - 2026-01-29 13:18 - 000001606 _____ C:\Windows\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-05-05 13:34 - 2026-02-21 20:18 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-05-05 13:34 - 2026-01-29 13:15 - 000000000 ____D C:\Intel
2026-05-05 13:34 - 2026-01-29 13:14 - 000012288 ___SH C:\DumpStack.log.tmp
2026-05-05 13:34 - 2026-01-29 13:14 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-05-05 13:34 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\Drivers\DriverData
2026-05-05 13:34 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\ServiceState
2026-05-05 13:34 - 2024-04-01 09:21 - 000524288 _____ C:\Windows\system32\config\BBI
2026-05-05 13:26 - 2026-02-21 20:18 - 000001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-05-05 13:12 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\SecurityHealth
2026-05-04 09:25 - 2026-03-10 13:38 - 000000951 _____ C:\Windows\Tasks\EPSON ET-2750 Series Update {D70B7FD6-74F7-432F-8276-FC59836AF5C1}.job
2026-05-04 09:25 - 2026-01-29 13:14 - 000296984 _____ C:\Windows\system32\FNTCACHE.DAT
2026-05-04 09:24 - 2026-01-16 15:00 - 000000000 ____D C:\Windows\SysWOW64\de
2026-05-04 09:24 - 2025-09-15 21:47 - 000000000 ____D C:\Windows\system32\ruxim
2026-05-04 09:24 - 2024-04-01 10:03 - 000000000 ____D C:\Windows\system32\Microsoft-Edge-WebView
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ___SD C:\Windows\SysWOW64\F12
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\UUS
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\vi-VN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\ur-PK
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\ug-CN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\tt-RU
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\te-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\ta-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\sq-AL
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\setup
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\quz-PE
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\qps-plocm
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\qps-ploc
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\pa-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\or-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\oobe
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\nn-NO
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\ne-NP
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\mt-MT
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\mr-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\ml-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\mk-MK
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\mi-NZ
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\lo-LA
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\lb-LU
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\kok-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\kn-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\km-KH
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\kk-KZ
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\ka-GE
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\is-IS
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\InstallShield
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\id-ID
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\hy-AM
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\hi-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\gu-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\gl-ES
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\gd-GB
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\ga-IE
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\fil-PH
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\fa-IR
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\eu-ES
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\es-MX
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\Dism
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\cy-GB
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\ca-ES
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\bn-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\be-BY
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\as-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\am-ET
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\af-ZA
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SystemResources
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\WinMetadata
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\vi-VN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\ur-PK
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\ug-CN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\tt-RU
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\te-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\ta-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\sq-AL
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\ShellExperiences
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\setup
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\quz-PE
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\qps-plocm
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\qps-ploc
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\pa-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\or-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\oobe
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\nn-NO
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\ne-NP
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\mt-MT
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\mr-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\ml-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\mk-MK
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\mi-NZ
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\migwiz
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\lv-LV
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\lt-LT
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\lo-LA
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\lb-LU
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\kok-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\kn-IN
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\km-KH
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\kk-KZ
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\ka-GE
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\is-IS
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\id-ID
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\hy-AM
2026-05-04 09:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\hi-IN
2026-05-04 09:23 - 2026-01-16 15:00 - 000000000 ____D C:\Windows\system32\de
2026-05-04 09:23 - 2024-04-01 10:03 - 000000000 ____D C:\Windows\InboxApps
2026-05-04 09:23 - 2024-04-01 10:03 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ___SD C:\Windows\system32\F12
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\HealthAttestationClient
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\gu-IN
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\gl-ES
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\gd-GB
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\ga-IE
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\fil-PH
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\fa-IR
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\eu-ES
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\et-EE
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\es-MX
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\Dism
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\cy-GB
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\ca-ES
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\bn-IN
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\be-BY
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\as-IN
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\appraiser
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\am-ET
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\af-ZA
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\ShellExperiences
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\ShellComponents
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\Provisioning
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\PolicyDefinitions
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\DiagTrack
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\BrowserCore
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\bcastdvr
2026-05-04 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\appcompat
2026-05-04 09:23 - 2024-04-01 09:21 - 000000000 ____D C:\Windows\servicing
2026-05-04 08:58 - 2026-01-29 13:15 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-05-04 08:57 - 2024-04-01 09:26 - 000282624 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2026-05-04 08:57 - 2024-04-01 09:26 - 000235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
2026-05-04 08:54 - 2026-01-29 13:15 - 000003830 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{5C808A71-2620-4A38-92B4-D12F77A2BBB2}
2026-05-04 08:54 - 2026-01-29 13:15 - 000003704 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{6CC800E1-3408-4071-9336-2FF5652233BA}
2026-04-20 20:48 - 2026-01-29 13:14 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-04-20 20:42 - 2026-01-29 13:16 - 003268096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2026-04-20 20:34 - 2026-03-27 17:57 - 000000000 ____D C:\Windows\system32\MRT
2026-04-20 20:31 - 2026-03-27 17:57 - 218249592 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2026-04-20 20:02 - 2026-02-21 20:19 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2026-04-20 20:02 - 2026-02-21 20:18 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-04-19 14:47 - 2026-01-29 13:14 - 000000000 ____D C:\Windows\system32\Drivers\wd
2026-04-13 10:28 - 2026-02-21 20:01 - 000000000 ____D C:\ProgramData\Whesvc
2026-04-09 11:11 - 2026-02-21 20:18 - 000000000 ____D C:\Users\etalm\Desktop\daten210226
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-04-2026
durchgeführt von etalm (08-05-2026 15:08:59)
Gestartet von C:\Users\etalm\Desktop
Microsoft Windows 11 Pro Version 25H2 26200.8246 (X64) (2026-02-21 17:24:26)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-1627592443-2344284234-108597604-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1627592443-2344284234-108597604-503 - Limited - Disabled)
etalm (S-1-5-21-1627592443-2344284234-108597604-1001 - Administrators - Enabled) => C:\Users\etalm
Gast (S-1-5-21-1627592443-2344284234-108597604-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1627592443-2344284234-108597604-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Malwarebytes (Disabled - Out of date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 147.0.3912.98 - Microsoft Corporation)
EPSON ET-2750 Series Printer Uninstall (HKLM\...\EPSON ET-2750 Series) (Version: - Seiko Epson Corporation)
Epson Photo+ (HKLM-x32\...\{7567FF8A-79D8-4B03-B03C-4EBBB7AC9433}) (Version: 4.0.4.0 - Seiko Epson Corporation)
Epson Printer Connection Checker (HKLM-x32\...\{781FE583-2E59-4304-83F2-C229E5F61C2A}) (Version: 3.4.3.0 - Seiko Epson Corporation)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{D41ABA09-11DA-4A3E-A7D8-CD6C7A7603EE}) (Version: 5.0.1 - Seiko Epson Corporation)
EPSON-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.57.0.0 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{92DCE546-2A73-4BCF-ADA5-0E6BD95E6B61}) (Version: 3.2.0.0 - Seiko Epson Corporation)
Malwarebytes version 5.5.5.253 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.5.5.253 - Malwarebytes)
Microsoft Access MUI (German) 2016 (HKLM\...\{90160000-0015-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2016 (HKLM\...\{90160000-0090-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 147.0.3912.98 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 147.0.3912.98 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2016 (HKLM\...\{90160000-0016-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2016 (HKLM\...\{90160000-00BA-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2016 (HKLM\...\{90160000-0044-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2016 (HKLM\...\{90160000-00C1-0000-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2016 – Deutsch (HKLM\...\{90160000-001F-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2016 (HKLM\...\{90160000-00E1-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2016 (HKLM\...\{90160000-00E2-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2016 (HKLM\...\{90160000-0011-0000-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft Office Proofing (German) 2016 (HKLM\...\{90160000-002C-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2016 - English (HKLM\...\{90160000-001F-0409-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2016 (HKLM\...\{90160000-00C1-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2016 (HKLM\...\{90160000-006E-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2016 (HKLM\...\{90160000-00A1-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2016 (HKLM\...\{90160000-001A-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2016 (HKLM\...\{90160000-0018-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2016 (HKLM\...\{90160000-0019-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Skype for Business MUI (German) 2016 (HKLM\...\{90160000-012B-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.24212 (HKLM-x32\...\{844ECB74-9B63-3D5C-958C-30BD23F19EE4}) (Version: 14.0.24212 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.24212 (HKLM-x32\...\{37B55901-995A-3650-80B1-BBFD047E2911}) (Version: 14.0.24212 - Microsoft Corporation) Hidden
Microsoft Word MUI (German) 2016 (HKLM\...\{90160000-001B-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox) (Version: 150.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 147.0.2 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 147.0.2 (x64 de)) (Version: 147.0.2 - Mozilla)
OpenOffice 4.1.16 (HKLM-x32\...\{EFFC58BF-BB04-4252-8661-34BDD68C2E72}) (Version: 4.116.9816 - Apache Software Foundation)
Outils de vérification linguistique 2016 de Microsoft Office*- Français (HKLM\...\{90160000-001F-040C-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
PDF24 Creator 8.9.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.322.9 - Tracker Software Products Ltd)
Strumenti di correzione di Microsoft Office 2016 - Italiano (HKLM\...\{90160000-001F-0410-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2026-02-21] (INTEL CORP) [Startup Task]
AppUp.ThunderboltControlCenter -> C:\Program Files\WindowsApps\AppUp.ThunderboltControlCenter_1.0.37.0_x64__8j3eq9eme6ctt [2026-02-21] (INTEL CORP)
Dolby Audio Premium -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAudioPremium_3.30201.210.0_x64__rz1tebttyb220 [2026-02-21] (Dolby Laboratories)
Journal -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJournal_1.25336.1113.0_x64__8wekyb3d8bbwe [2026-02-21] (Microsoft Corporation)
Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2026-05-08] ()
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.103.0_x64__8wekyb3d8bbwe [2026-01-29] (Microsoft Corp.)
Microsoft.MixedRealityLink -> C:\Program Files\WindowsApps\Microsoft.MixedRealityLink_26.4160.4090.0_x64__8wekyb3d8bbwe [2026-05-08] (Microsoft Corporation) [Startup Task]
PrebootManager -> C:\Program Files\WindowsApps\SynapticsIncorporated.SynapticsUtilities_1.1.20.0_x64__807d65c4rvak2 [2026-02-21] (Synaptics Incorporated)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2026-02-21] (Realtek Semiconductor Corp)
Synaptics TouchPad Control Panel -> C:\Program Files\WindowsApps\SynapticsIncorporated.SynapticsControlPanel_19005.19110.0.0_x64__807d65c4rvak2 [2026-02-21] (Synaptics Incorporated)
Synaptics Trackpoint Control Panel -> C:\Program Files\WindowsApps\SynapticsIncorporated.241916F58D6E7_19005.19110.0.0_x64__807d65c4rvak2 [2026-02-21] (Synaptics Incorporated)
WinAppRuntime.Main.1.8 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.8_8000.806.2252.0_x64__8wekyb3d8bbwe [2026-04-19] (Microsoft Corp.)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1627592443-2344284234-108597604-1001_Classes\CLSID\{6e1f4e4d-65f7-4c83-be2e-9e6683cda268}\localserver32 -> "C:\Program Files\ESET\ESET Security\egui.exe" -ToastActivated => Keine Datei
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-05-08] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-05-08] (Malwarebytes Inc -> Malwarebytes)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Drivers32: [MidisrvTransferComplete] => 1
HKLM\...\Drivers32: [midi1] => C:\Windows\system32\wdmaud2.drv [143360 2026-04-20] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Drivers32: [midi1] => C:\Windows\SysWOW64\wdmaud2.drv [94720 2026-04-20] (Microsoft Windows -> Microsoft Corporation)
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\etalm\Downloads\epson666832eu.exe:MBAM.Zone.Identifier [247]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\camsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{75416E63-5912-4DFA-AE8F-3EFACCAFFB14} => ""="NvmeDisk"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{75416E63-5912-4DFA-AE8F-3EFACCAFFB14} => ""="NvmeDisk"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2024-04-01 09:26 - 2026-02-21 20:15 - 000003085 _____ C:\Windows\system32\drivers\etc\hosts
0.0.0.0 vortex.data.microsoft.com
0.0.0.0 vortex-win.data.microsoft.com
0.0.0.0 telecommand.telemetry.microsoft.com
0.0.0.0 telecommand.telemetry.microsoft.com.nsatc.net
0.0.0.0 oca.telemetry.microsoft.com
0.0.0.0 sqm.telemetry.microsoft.com
0.0.0.0 sqm.telemetry.microsoft.com.nsatc.net
0.0.0.0 watson.telemetry.microsoft.com
0.0.0.0 watson.telemetry.microsoft.com.nsatc.net
0.0.0.0 redir.metaservices.microsoft.com
0.0.0.0 choice.microsoft.com
0.0.0.0 choice.microsoft.com.nsatc.net
0.0.0.0 wes.df.telemetry.microsoft.com
0.0.0.0 services.wes.df.telemetry.microsoft.com
0.0.0.0 sqm.df.telemetry.microsoft.com
0.0.0.0 telemetry.microsoft.com
0.0.0.0 watson.ppe.telemetry.microsoft.com
0.0.0.0 telemetry.appex.bing.net
0.0.0.0 telemetry.urs.microsoft.com
0.0.0.0 telemetry.appex.bing.net:443
0.0.0.0 settings-sandbox.data.microsoft.com
0.0.0.0 survey.watson.microsoft.com
0.0.0.0 watson.live.com
0.0.0.0 watson.microsoft.com
0.0.0.0 statsfe2.ws.microsoft.com
0.0.0.0 corpext.msitadfs.glbdns2.microsoft.com
0.0.0.0 compatexchange.cloudapp.net
0.0.0.0 a-0001.a-msedge.net
0.0.0.0 statsfe2.update.microsoft.com.akadns.net
0.0.0.0 sls.update.microsoft.com.akadns.net
==================== Network ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
DNS Servers: 192.168.178.1
ist aktiviert.
Network Binding:
=============
Mobilfunk 6: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 15: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 11: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 12: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 16: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 9: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 3: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 17: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 10: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 4: Fibocom L850-GL -> cxwmbclass.sys
Ethernet: Intel(R) Ethernet Connection (6) I219-LM -> e1d68x64.sys
Mobilfunk 7: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 2: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 13: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 8: Fibocom L850-GL -> cxwmbclass.sys
WLAN: Intel(R) Wireless-AC 9560 160MHz -> Netwtw08.sys
Mobilfunk 14: Fibocom L850-GL -> cxwmbclass.sys
Mobilfunk 5: Fibocom L850-GL -> cxwmbclass.sys
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1627592443-2344284234-108597604-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\etalm\Desktop\Screenshot 2026-05-05 141335.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKU\S-1-5-21-1627592443-2344284234-108597604-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_C2824391337F58541441BF81CB483A3F"
HKU\S-1-5-21-1627592443-2344284234-108597604-1001\...\StartupApproved\Run: => "OneDrive"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{C5F21C0D-2F30-4723-9DCB-9F94845D6AE7}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5FFC6E8A-CDBF-42D0-8902-109C3CB72E94}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{309E49F9-41FB-4763-A75A-69EC855D3A0E}] => (Allow) C:\Users\etalm\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => Keine Datei
FirewallRules: [{B32AA8E6-541C-4495-A558-FB5ABA301DF0}] => (Allow) C:\Users\etalm\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => Keine Datei
FirewallRules: [{DF771A14-6580-40D4-B585-43FFABAEEB99}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{725E8CC3-3234-4D14-B8BB-5D5D6280623B}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7E2BC27E-A737-4817-94FD-A07BCC3F92DF}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3FC7E547-D61A-421C-81D4-4BC8BAFDCF1E}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AFD59959-235A-492A-B436-855981161298}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D41CF1FC-58F7-4AC7-B554-E62A588123CE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MixedRealityLink_26.4160.4090.0_x64__8wekyb3d8bbwe\Platform\MrBackgroundHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{30DCD109-1B3F-4E39-A94F-3D629285B5D7}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MixedRealityLink_26.4160.4090.0_x64__8wekyb3d8bbwe\Platform\MrBackgroundHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C22742EF-0D07-4DC1-A56A-8DE2B8183F39}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MixedRealityLink_26.4160.4090.0_x64__8wekyb3d8bbwe\Platform\MrBackgroundHost.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
04-05-2026 08:55:35 Windows Update
05-05-2026 13:43:19 Installed Microsoft Office Professional Plus 2016
08-05-2026 14:46:30 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (05/05/2026 02:07:10 PM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-K22IQOM)
Description: Fehlerhafter Anwendungsname: DTLite.exe, Version: 12.5.0.2433, Zeitstempel: 0x69f209e4
Fehlerhafter Modulname: KERNELBASE.dll, Version: 10.0.26100.8246, Zeitstempel: 0x208e0cb7
Ausnahmecode: 0xe0434352
Fehleroffset: 0x00000000000c79da
Fehlerhafte Prozess-ID: 0x974
Fehlerhafte Anwendungsstartzeit: 0x1dcdc87b076575e
Fehlerhafter Anwendungspfad: C:\Program Files\DAEMON Tools Lite\DTLite.exe
Fehlerhafter Modulpfad: C:\Windows\System32\KERNELBASE.dll
Berichts-ID: 2175bde1-e328-4c81-9706-14569c339ce5
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (05/05/2026 02:07:09 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: DTLite.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.IO.DirectoryNotFoundException
bei System.IO.__Error.WinIOError(Int32, System.String)
bei System.IO.File.InternalDelete(System.String, Boolean)
bei DotNetCommon.BaseApp.CleanAllSettings()
bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
bei System.Threading.ThreadHelper.ThreadStart()
Error: (05/05/2026 01:54:17 PM) (Source: MsiInstaller) (EventID: 1044) (User: DESKTOP-K22IQOM)
Description: C:\MSOCache\All Users\{90160000-006E-0407-1000-0000000FF1CE}-C\ShellUI.MST(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (05/05/2026 01:49:37 PM) (Source: MsiInstaller) (EventID: 1044) (User: DESKTOP-K22IQOM)
Description: C:\MSOCache\All Users\{90160000-006E-0407-1000-0000000FF1CE}-C\ShellUI.MST(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (05/05/2026 01:44:23 PM) (Source: MsiInstaller) (EventID: 1044) (User: DESKTOP-K22IQOM)
Description: C:\MSOCache\All Users\{90160000-006E-0407-1000-0000000FF1CE}-C\ShellUI.MST(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (05/05/2026 01:27:00 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5
Error: (05/05/2026 01:02:54 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
Error: (05/04/2026 08:59:24 AM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
Systemfehler:
=============
Error: (05/08/2026 02:49:04 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9NZKPSTSNW4P-Microsoft.XboxGamingOverlay
Error: (05/08/2026 02:25:49 PM) (Source: nhi) (EventID: 9006) (User: )
Description: An error was detected.
Error message: Error code: 0xDC, Sub error code: 0x7C
Error: (05/08/2026 02:25:49 PM) (Source: nhi) (EventID: 9006) (User: )
Description: An error was detected.
Error message: Error code: 0xDC, Sub error code: 0xB1
Error: (05/08/2026 02:25:49 PM) (Source: nhi) (EventID: 9006) (User: )
Description: An error was detected.
Error message: Error code: 0xE0, Sub error code: 0x4E
Error: (05/08/2026 02:25:49 PM) (Source: nhi) (EventID: 9006) (User: )
Description: An error was detected.
Error message: Error code: 0x12D, Sub error code: 0x75
Error: (05/08/2026 02:13:22 PM) (Source: nhi) (EventID: 9006) (User: )
Description: An error was detected.
Error message: Error code: 0xDC, Sub error code: 0x7C
Error: (05/08/2026 02:13:22 PM) (Source: nhi) (EventID: 9006) (User: )
Description: An error was detected.
Error message: Error code: 0xDC, Sub error code: 0xB1
Error: (05/08/2026 02:13:22 PM) (Source: nhi) (EventID: 9006) (User: )
Description: An error was detected.
Error message: Error code: 0xE0, Sub error code: 0x4E
Windows Defender:
================
Date: 2026-03-27 18:15:37
Description:
Microsoft Defender Antivirus šĉαⁿ ħãŝ вèėň ѕŧθφρεđ ъёƒόřĕ ĉǿмρłęťíοй.%ή %тŜçдⁿ ЇĐ:%ъ{E088957E-1B04-42C4-9C58-F52AB59913DA}%ⁿ %ţЅćαη Τурē:%вAntimalware%η %ťŞċαή Рǻřămεţęяś:%вSchnellüberprüfung%π %τŮѕéř:%ъNT-AUTORITÄT\SYSTEM%ⁿ %τŞтòφ Яęάşőⁿ:%ьЃΡÇ čбʼnиěċŧíоñ ŗύйđòώη
Date: 2026-03-27 16:58:30
Description:
Microsoft Defender Antivirus šĉαⁿ ħãŝ вèėň ѕŧθφρεđ ъёƒόřĕ ĉǿмρłęťíοй.%ή %тŜçдⁿ ЇĐ:%ъ{6D1CFEFB-ADE2-48D8-A9DA-5F1E51F35052}%ⁿ %ţЅćαη Τурē:%вAntimalware%η %ťŞċαή Рǻřămεţęяś:%вSchnellüberprüfung%π %τŮѕéř:%ъNT-AUTORITÄT\SYSTEM%ⁿ %τŞтòφ Яęάşőⁿ:%ьЃΡÇ čбʼnиěċŧíоñ ŗύйđòώη
Date: 2026-03-02 18:45:04
Description:
Microsoft Defender Antivirus šĉαⁿ ħãŝ вèėň ѕŧθφρεđ ъёƒόřĕ ĉǿмρłęťíοй.%ή %тŜçдⁿ ЇĐ:%ъ{D166F20C-D95B-4FFC-B8B3-9A78BBAF58DA}%ⁿ %ţЅćαη Τурē:%вAntimalware%η %ťŞċαή Рǻřămεţęяś:%вSchnellüberprüfung%π %τŮѕéř:%ъNT-AUTORITÄT\SYSTEM%ⁿ %τŞтòφ Яęάşőⁿ:%ьГΡĊ čόⁿήеĉτïòŋ řũηδőωŋ
Date: 2026-03-02 18:31:34
Description:
Microsoft Defender Antivirus šĉαⁿ ħãŝ вèėň ѕŧθφρεđ ъёƒόřĕ ĉǿмρłęťíοй.%ή %тŜçдⁿ ЇĐ:%ъ{74B88CF8-ADCD-4E45-B2E6-24CDB2207B7B}%ⁿ %ţЅćαη Τурē:%вAntimalware%η %ťŞċαή Рǻřămεţęяś:%вSchnellüberprüfung%π %τŮѕéř:%ъNT-AUTORITÄT\SYSTEM%ⁿ %τŞтòφ Яęάşőⁿ:%ьГΡĊ čόⁿήеĉτïòŋ řũηδőωŋ
Date: 2026-02-21 19:15:39
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=SettingsModifier:Win32/PossibleHostsFileHijack&threatid=14994&enterprise=0
Name: SettingsModifier:Win32/PossibleHostsFileHijack
Schweregrad: Mittel
Kategorie: Einstellungsveränderer
Pfad: file:_C:\Windows\System32\drivers\etc\hosts
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: DESKTOP-K22IQOM\etalm
Prozessname: C:\Windows\System32\cmd.exe
Sicherheitsversion: AV: 1.437.1.0, AS: 1.437.1.0, NIS: 1.437.1.0
Modulversion: AM: 1.1.25080.5, NIS: 1.1.25080.5
CodeIntegrity:
===============
Date: 2026-05-08 14:36:26
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Mozilla Firefox\firefox.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
Date: 2026-05-05 13:12:21
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Windows signing level requirements.
Date: 2026-05-05 13:07:55
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Windows signing level requirements.
==================== Speicherinformationen ===========================
BIOS: LENOVO N2IETA2W (1.80 ) 06/21/2023
Hauptplatine: LENOVO 20N5S0F600
Prozessor: Intel(R) Core(TM) i5-8365U CPU @ 1.60GHz
Prozentuale Nutzung des RAM: 42%
Installierter physikalischer RAM: 16133.46 MB
Verfügbarer physikalischer RAM: 9230.62 MB
Summe virtueller Speicher: 17157.46 MB
Verfügbarer virtueller Speicher: 10472.99 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:456.03 GB) (Free:381.49 GB) (Model: WDC PC SN730 SDBQNTY-512G-1001) NTFS
Drive d: () (Removable) (Total:7.66 GB) (Free:7.66 GB) FAT32
\\?\Volume{74dc8d78-67a9-456c-812e-83a1fa84ba81}\ (Windows RE) (Fixed) (Total:1 GB) (Free:0.13 GB) NTFS
\\?\Volume{aa2c0e13-384c-421c-8296-32cd805bf4b5}\ (Recovery) (Fixed) (Total:19.53 GB) (Free:9.89 GB) NTFS
\\?\Volume{e8711b20-862f-43cf-b6b6-ccc920a2d194}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.2 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 52C027B1)
Partition: GPT.
==========================================================
Disk: 1 (Size: 7.7 GB) (Disk ID: C6925831)
Partition 1: (Not Active) - (Size=7.7 GB) - (Type=FAT32)
==================== Ende von Addition.txt =======================
Code:
ATTFilter 08.05.2026 15:50:55
Geprüfte Dateien: 350903
Erkannte Dateien: 1
Gesäuberte Dateien: 1
Scandauer gesamt 00:58:35
Scanstatus: Abgeschlossen
C:\Users\etalm\Downloads\DTLite1250-2433b.exe MSIL/Agent.YGT trojan cleaned by deleting
Beste Grüße |
|
Heute, 18:04
| #2 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Trojaner von Daemon Tools LightZitat:
Das war doch nicht der einzige Fund.
__________________ |
|
| Themen zu Trojaner von Daemon Tools Light |
| administrator, antivirus, defender, excel, firefox, firewall, frage, google, internet, internet explorer, malware, mozilla, port, programm, prozesse, realtek, registry, scan, services.exe, software, svchost.exe, system, trojaner, updates, windows |
Linear-Darstellung
