Ransomware, @Matthias
Hallo Matthias, danke vorab Jetzt die FRST log Datei. Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 27-02-2026
durchgeführt von admin (Administrator) auf ADMIN-PC (02-03-2026 08:18:14)
Gestartet von F:\Virus_Scan_Tool\FRST64 (1).exe
Geladene Profile: admin
Plattform: Microsoft Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Safe Mode (minimal)
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(explorer.exe ->) (Ghisler Software GmbH) [Datei ist nicht signiert] C:\Program Files\totalcmd\TotalCmd.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9068040 2016-11-09] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4116904 2024-10-23] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [924840 2026-02-17] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security App\bdagent.exe [1091400 2026-01-26] (Bitdefender SRL -> Bitdefender)
HKLM-x32\...\Run: [ExpressVPNNotificationService] => C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationServiceStarter.exe [466312 2020-05-25] (Express Vpn LLC -> ExpressVPN)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files (x86)\Opera\assistant\browser_assistant.exe [4110592 2022-04-20] (Opera Software AS -> Opera Software)
HKLM-x32\...\Run: [ZoneAlarm Upgrader] => C:\Program Files (x86)\CheckPoint\ICM\UM_Interface.exe [37328 2025-03-31] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
HKLM-x32\...\Run: [PDF24] => C:\Program Files (x86)\PDF24\pdf24.exe [576224 2025-09-15] (Geek Software GmbH -> geek software GmbH)
HKLM\...\Policies\Explorer: [NoDrives] 65536
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG
HKU\S-1-5-21-1709249978-2813638600-1108124046-1000\...\Run: [] => [X]
HKU\S-1-5-21-1709249978-2813638600-1108124046-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45741280 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-1709249978-2813638600-1108124046-1000\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-1709249978-2813638600-1108124046-1000\...\MountPoints2: {708aa9fc-35e3-11e5-af50-50465d6ae310} - E:\startme.exe
HKU\S-1-5-21-1709249978-2813638600-1108124046-1000\...\MountPoints2: {7e312185-756e-11e3-9772-001583c39897} - E:\Startme.exe
HKU\S-1-5-21-1709249978-2813638600-1108124046-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [3229696 2016-08-29] (Microsoft Windows -> Microsoft Corporation) <==== ACHTUNG
HKU\S-1-5-21-1709249978-2813638600-1108124046-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\UltraMon.scr [293176 2018-10-03] (Realtime Soft AG -> Realtime Soft AG)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [55432 2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\...\Print\Monitors\FPR8:: C:\Windows\system32\fpmon8.dll [608448 2015-05-06] (FinePrint Software, LLC -> FinePrint Software, LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\109.0.5414.120\Installer\chrmstp.exe [2023-01-27] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WinMySQLadmin.lnk [2017-11-20]
ShortcutTarget: WinMySQLadmin.lnk -> C:\mysql\bin\winmysqladmin.exe (MySQL AB) [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2017-11-27]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2015-05-18]
ShortcutTarget: FAH.lnk -> C:\Program Files (x86)\WinZip\FAH\FAHConsole.exe (WinZip Computing LLC -> Nico Mak Computing)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK [2015-05-18]
ShortcutTarget: Hardcopy.LNK -> C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you GmbH -> sw4you)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2018-12-27]
ShortcutTarget: RealTimes.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc. -> RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UltraMon.lnk [2020-04-16]
ShortcutTarget: UltraMon.lnk -> C:\Windows\Installer\{2CB51501-DA86-4216-9C9B-2C52A64BA047}\IcoUltraMon.ico () [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VR-NetWorld Auftragsprüfung.lnk [2017-12-14]
ShortcutTarget: VR-NetWorld Auftragsprüfung.lnk -> C:\Windows\Installer\{4FF67DC0-E264-4E3A-A204-D2342F9F4FD7}\NewShortcut1_5A2CAB8514594533A6B50E3D23448BE1.exe (Flexera Software LLC) [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinTV Recording Status.lnk [2017-11-21]
ShortcutTarget: WinTV Recording Status.lnk -> C:\Program Files (x86)\WinTV\WinTV8\WinTVTray.exe (Hauppauge Computer Works Inc. -> Hauppauge Computer Works, Inc.) [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2015-05-18]
ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files (x86)\WinZip\WzPreloader.exe (WinZip Computing LLC -> WinZip Computing, S.L.)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {748F13A2-C414-4F27-BE91-AF604ACB3C22} - \Opera scheduled assistant Autoupdate 1547158740 -> Keine Datei <==== ACHTUNG
Task: {A20AF87E-5F39-4693-B2B6-E3A7BBB29EC5} - \RealDownloader Update Check -> Keine Datei <==== ACHTUNG
Task: {C2756ACE-0A85-4CB8-827A-C4742139FBAC} - System32\Tasks\{0E2AAF04-E3BE-4ED4-A3D0-7464F12B2918} => C:\Program Files (x86)\WinTV\WinTV8\WinTV8.exe [4094248 2017-10-17] (Hauppauge Computer Works Inc. -> Hauppauge Computer Works, Inc.) [Datei ist nicht signiert]
Task: {E0739F4F-B530-4EDE-A96F-2397F9A2B123} - System32\Tasks\{3C9201D4-165C-4E82-AB91-B5CE932609AA} => C:\Windows\System32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a C:\vomWeidkippel1\Sharpdesk\Sharpdesk.exe -d C:\Users\admin\Desktop
Task: {49E2560F-E042-4E17-AC93-553AA792E681} - System32\Tasks\{511BB659-F771-4C57-9D1C-A6CC2E3187BE} => C:\Program Files (x86)\WinTV\WinTV8\WinTV8.exe [4094248 2017-10-17] (Hauppauge Computer Works Inc. -> Hauppauge Computer Works, Inc.) [Datei ist nicht signiert]
Task: {AB607EBA-043E-4386-8825-C7FAE7813910} - System32\Tasks\{5FD1A6A5-1AFB-4F67-B38D-1BF31BB6440A} => C:\Windows\System32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Users\admin\Downloads\vcredist_x64.exe -d C:\Users\admin\Downloads
Task: {C886C203-B87E-4918-9BAE-FA5D9D14D558} - System32\Tasks\{A1CAC98C-3E7A-4F4F-A310-5352CC878BDA} => C:\Windows\System32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files (x86)\TENVIS EasySetup\easySetup.exe" -d "C:\Program Files (x86)\TENVIS EasySetup"
Task: {39E67E89-2D57-49B8-A1B4-5F20B04E2093} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1581568 2025-08-24] (Adobe Inc. -> Adobe Inc.)
Task: {2B6A24E2-777A-4888-9B45-A04FA4CC08AB} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4116904 2024-10-23] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {B7BB47A1-9A38-4693-A0B0-A67F3831FA33} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [4455336 2024-10-23] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {A733BB45-25C4-450F-8CB9-DF3CE3C429F9} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1581568 2025-08-24] (Adobe Inc. -> Adobe Inc.)
Task: {DFC4C8DA-5995-4821-A716-F716923B862A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)
Task: {BE7A9E2A-7F2D-40AC-B70D-05F6B1DF83EA} - System32\Tasks\AVG\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [5660328 2026-02-17] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {56C51E1D-F855-47C6-937F-9F97F17AA2A5} - System32\Tasks\AVG\AVG Antivirus Patcher => C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe [9271520 2026-01-27] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {F18F95BD-334E-4EF8-8FE8-C5196D83A897} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [3014368 2026-02-17] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {122488C2-2A02-4EC6-BF7A-A619C27A9130} - System32\Tasks\Avira_FallbackUpdater => C:\Windows\System32\sc.exe [45056 2009-07-14] (Microsoft Windows -> Microsoft Corporation) -> start AviraFallbackUpdater Delayed=false
Task: {A8C47534-7E1B-476C-A4B6-CC5B882DED24} - System32\Tasks\Avira_Security_Maintenance => Command(1): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> FallbackTelemetry
Task: {A8C47534-7E1B-476C-A4B6-CC5B882DED24} - System32\Tasks\Avira_Security_Maintenance => Command(2): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> ServiceWatchdog
Task: {A8C47534-7E1B-476C-A4B6-CC5B882DED24} - System32\Tasks\Avira_Security_Maintenance => Command(3): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> CrashCollector
Task: {256F79CB-BFBF-44F1-9A41-B6BADED1B73E} - System32\Tasks\Avira_Security_Service_SCM_Watchdog => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe [263760 2026-02-04] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {8541D1E3-8899-47C3-A98A-BF49CBB85E04} - System32\Tasks\Avira_Security_Systray => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe [1800936 2026-02-04] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {15EE7813-E71C-4B3C-A2FF-795FC58A944B} - System32\Tasks\Avira_Security_Update => C:\Windows\System32\net.exe [55808 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
Task: {091DDCB2-7A82-4671-BFB1-538F66ABD656} - System32\Tasks\AviraSystemSpeedupVerify => C:\Program Files (x86)\Avira\System Speedup\setup\avira_speedup_setup.exe [37089224 2026-02-02] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {BA3DFB58-1EDC-4386-B198-15D13E83D20C} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\27.1.1.28\WatchDog.exe [1175072 2026-01-16] (Bitdefender SRL -> Bitdefender) -> C:\Program Files\Bitdefender Agent\27.1.1.28\repair
Task: {AF8DAC09-4526-47EE-8836-C9F8B483872D} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B8623020-877E-465F-995F-6DA42D75DB52} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "6faa5c82-42ee-4fba-934d-e3d763f5c4a6" --version "6.38.0.11537" --silent
Task: {7152F341-BF09-46B1-8AFF-9801BE2EE103} - System32\Tasks\CCleanerSkipUAC - admin => C:\Program Files\CCleaner\CCleaner.exe [39575776 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {11DD031D-1E9E-4109-96A8-0160C5A39649} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-03-21] (Google Inc -> Google Inc.)
Task: {6695ADC4-E5C0-4710-9935-5168D80CE606} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-03-21] (Google Inc -> Google Inc.)
Task: {478A41EA-26C8-4D66-B181-741224C4E6A1} - System32\Tasks\hcdll2_ex_Win32 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe [37880 2013-07-17] (sw4you GmbH -> )
Task: {A7648BBB-A656-4925-BA89-A577C55AD652} - System32\Tasks\hcdll2_ex_x64 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe [44608 2012-11-08] (sw4you GmbH -> )
Task: {5ECA52DA-5031-4544-B3CE-77F0F212AB3E} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706288 2021-04-08] (Oracle America, Inc. -> Oracle Corporation)
Task: {07D71913-7B63-40C8-9830-8E9956123745} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {BCF0F65E-3943-46E4-B26E-773BF41E977B} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519240 2018-02-24] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {9FAC3BBF-1D80-4282-B6CA-D4CA7C3EECE3} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1930312 2018-02-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {0223CE46-C405-45AD-B5E7-5890B9CF0452} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [968264 2018-02-24] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {91469388-4B77-4895-955B-26133FF98772} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [660040 2018-02-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {60C9B2D2-7BBF-48A1-8A45-2E7393EA3DDC} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [660040 2018-02-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {46480C69-7119-4F4F-B069-19BE565BBB4B} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [524360 2018-02-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {717B7989-8E75-4697-B43F-FE284A7499AC} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [746056 2018-02-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5C5D5F68-E0CE-470C-AC3F-8C246D2F84B6} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [746056 2018-02-24] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\Update Core\--logon
Task: {45CFA7AE-D815-4FA3-ADE4-E8883D3AAFA0} - System32\Tasks\Opera scheduled Autoupdate 1439040778 => C:\Program Files (x86)\Opera\launcher.exe [1977760 2023-10-30] (Opera Norway AS -> Opera Software)
Task: {D0BDEF80-49FA-4ECA-A29A-863914EEC6D2} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => c:\program files (x86)\Real\realplayer\Update\realsched.exe [353056 2018-12-27] (RealNetworks, Inc. -> RealNetworks, Inc.) -> c:\program files (x86)\real\realplayer\Update\-osboot
Task: {5ED340CA-565A-4A95-80A7-9F68B704E272} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1709249978-2813638600-1108124046-1000 => C:\program files (x86)\Real\RealDownloader\RealUpgrade.exe [135456 2018-11-15] (RealNetworks, Inc. -> RealNetworks, Inc.)
Task: {62E24C69-B459-4329-959E-3E30383C0028} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1709249978-2813638600-1108124046-1000 => C:\program files (x86)\Real\RealDownloader\RealUpgrade.exe [135456 2018-11-15] (RealNetworks, Inc. -> RealNetworks, Inc.)
Task: {E3526EC9-8764-406E-AFB9-9FACD1708501} - System32\Tasks\WpsExternal_admin_interval => C:\Users\admin\AppData\Local\Kingsoft\WPS Office\12.2.0.23196\office6\wpscloudsvr.exe [1085432 2026-02-16] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) -> /wpscloudlaunch /run_plugin /plugin_name=ktaskschdtool /plugin_entry=ktaskschdtool.dll /task=wpsexternal /launchtask /ver=1.0 /start_from=task_external_interval
Task: {5D381730-245C-49A3-BBE2-6CA84D27A53C} - System32\Tasks\WpsExternal_admin_startup => C:\Users\admin\AppData\Local\Kingsoft\WPS Office\12.2.0.23196\office6\wpscloudsvr.exe [1085432 2026-02-16] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) -> /wpscloudlaunch /run_plugin /plugin_name=ktaskschdtool /plugin_entry=ktaskschdtool.dll /task=wpsexternal /launchtask /ver=1.0 /start_from=task_external_startup
Task: {773E78C1-D9FD-4CB6-815A-B034FA519129} - System32\Tasks\WpsUpdateTask_admin => C:\Users\admin\AppData\Local\Kingsoft\WPS Office\12.2.0.23196\office6\wpsupdate.exe [1741816 2026-02-16] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\Windows\Tasks\WpsExternal_admin_interval.job => C:\Users\admin\AppData\Local\Kingsoft\WPS Office\12.2.0.23196\office6\wpscloudsvr.exe/wpscloudlaunch /run_plugin /plugin_name=ktaskschdtool /plugin_entry=ktaskschdtool.dll
Task: C:\Windows\Tasks\WpsUpdateTask_admin.job => C:\Users\admin\AppData\Local\Kingsoft\WPS Office\12.2.0.23196\office6\wpsupdate.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ACHTUNG (Beschränkung - Zones)
Winsock: Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5 09 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 09 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{D5AB477E-8B50-4795-AE73-3E7652FC21F4}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{D5AB477E-8B50-4795-AE73-3E7652FC21F4}: [DhcpDomain] fritz.box
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-03-24] [] [ist nicht signiert]
FF Plugin: @java.com/DTPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\dtplugin\npDeployJava1.dll [2021-05-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\plugin2\npjp2.dll [2021-05-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2018-09-13] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] (Apple Inc. -> )
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2011-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-02-23] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Datei ist nicht signiert]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-02-23] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Datei ist nicht signiert]
FF Plugin-x32: @real.com/nppl3260;version=18.1.15.215 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2018-12-27] (RealNetworks, Inc. -> RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.1.15.215 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2018-12-27] (RealNetworks, Inc. -> RealPlayer)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2014-12-03] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2026-02-05] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2018-09-13] (Adobe Systems Incorporated -> Adobe Systems)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default [2025-12-03]
Edge HKLM-x32\...\Edge\Extension: [dbconhplchnbippmjabbcedokimacfjl]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default [2026-02-25]
CHR Notifications: Default -> hxxps://mail.proton.me; hxxps://pornrapes.com; hxxps://re-captha-version-3-47.top; hxxps://web.whatsapp.com; hxxps://www.royalqueenseeds.de; hxxps://www.tiktok.com; hxxps://www.tipp24.com
CHR StartupUrls: Default -> "hxxp://google.de/"
CHR Extension: (Google-Suche) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-31]
CHR Extension: (Kein Name) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-02-25] [UpdateUrl:0] <==== ACHTUNG
CHR Extension: (Avira Browserschutz) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2026-02-01]
CHR Extension: (Google Docs Offline) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-05-30]
CHR Extension: (Bitdefender Anti-tracker) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2026-02-18]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Guest Profile [2025-12-03]
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-12-03]
CHR Extension: (Avira Password Manager) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2025-04-22]
CHR Extension: (Avira Safe Shopping) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2025-07-23]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-10-24]
CHR Extension: (Avira Browserschutz) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2025-04-22]
CHR Extension: (Google Docs Offline) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-22]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-04-22]
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\System Profile [2025-12-03]
CHR HKU\S-1-5-21-1709249978-2813638600-1108124046-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-12-03]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]
Opera:
=======
OPR Profile: C:\Users\admin\AppData\Roaming\Opera Software\Opera Stable [2026-02-17]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2024-02-21]
OPR Extension: (Opera Wallet) - C:\Users\admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2025-09-09]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-10-07]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S4 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-01-30] (SUPERAntiSpyware.com -> SUPERAntiSpyware.com)
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174584 2025-08-24] (Adobe Inc. -> Adobe Inc.)
S4 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818136 2018-09-13] (Adobe Systems Incorporated -> Adobe Inc.)
S2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [4580776 2024-10-23] (Adobe Inc. -> Adobe Systems, Incorporated)
S2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [1076392 2026-02-17] (Gen Digital Inc. -> Gen Digital Inc.)
S2 AVG Firewall; C:\Program Files\AVG\Antivirus\afwServ.exe [2708648 2026-02-17] (Gen Digital Inc. -> Gen Digital Inc.)
S2 AVG Tools; C:\Program Files\AVG\Antivirus\avgToolsSvc.exe [1129128 2026-02-17] (Gen Digital Inc. -> Gen Digital Inc.)
S3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [7869096 2026-02-17] (Gen Digital Inc. -> Gen Digital Inc.)
S2 AVGWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [109480 2026-02-17] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S4 AviraFallbackUpdater; C:\Program Files (x86)\Avira\Fallback Updater\Avira.Spotlight.FallbackUpdater.exe [6843728 2025-05-09] (Avira Operations GmbH -> Avira Operations GmbH)
S4 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [3004688 2022-07-22] (Avira Operations GmbH -> Avira Operations GmbH & Co. KG)
S4 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [404280 2025-03-25] (Avira Operations GmbH -> Avira Operations GmbH & Co. KG)
S2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [270848 2026-02-04] (Avira Operations GmbH -> Avira Operations GmbH)
S4 AviraSecurityUpdater; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [300800 2026-02-04] (Avira Operations GmbH -> Avira Operations GmbH)
S2 BDAppSrv; C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe [851704 2025-12-09] (Bitdefender SRL -> Bitdefender)
S2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [851704 2025-12-09] (Bitdefender SRL -> Bitdefender)
S2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2966176 2023-07-20] (Bitdefender SRL -> Bitdefender)
S2 bdredline_agent; C:\Program Files\Bitdefender Agent\redline\bdredline.exe [2426992 2025-07-03] (Bitdefender SRL -> Bitdefender)
S2 BDSafepaySrv; C:\Program Files\Bitdefender\Bitdefender Security App\Safepay\bdservicehost.exe [851704 2025-12-09] (Bitdefender SRL -> Bitdefender)
S4 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
S4 CIJSRegister; C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe [144784 2018-04-18] (Canon Inc. -> CANON INC.)
S4 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [6282048 2020-07-15] (devolo AG -> devolo AG)
S4 ElfoService; C:\Program Files (x86)\ElsterFormular Update Service\bin\elfoService.exe [1284360 2019-08-23] (Bayerisches Landesamt fuer Steuern -> )
S2 EndpointProtectionService; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [8930944 2023-01-31] (Avira Operations GmbH -> Avira Operations GmbH)
S3 EndpointProtectionService2; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [8930944 2023-01-31] (Avira Operations GmbH -> Avira Operations GmbH)
S4 ExpressVPNService; C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe [438664 2020-05-25] (Express Vpn LLC -> ExpressVPN)
S4 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-03-21] (Google Inc -> Google Inc.)
S4 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-03-21] (Google Inc -> Google Inc.)
S4 hasplms; C:\Windows\system32\hasplms.exe [4608320 2014-11-27] (SafeNet, Inc. -> SafeNet Inc.)
S4 HauppaugeTVServer; C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe [586536 2017-10-17] (Hauppauge Computer Works Inc. -> Hauppauge Computer Works, Inc) [Datei ist nicht signiert]
S4 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [443344 2020-05-25] (Canon Inc. -> )
S4 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11172008 2025-11-13] (Malwarebytes Inc -> Malwarebytes)
S4 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2024-12-30] (Malwarebytes Inc. -> Malwarebytes)
S2 MySql; C:\mysql\bin\mysqld-nt.exe [1130496 2002-08-14] () [Datei ist nicht signiert]
S2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [576224 2025-09-15] (Geek Software GmbH -> geek software GmbH)
S2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [759712 2026-01-16] (Bitdefender SRL -> Bitdefender)
S4 RealPlayerUpdateSvc; C:\program files (x86)\real\UpdateService\RealPlayerUpdateSvc.exe [38016 2018-11-15] (RealNetworks, Inc. -> RealNetworks, Inc.)
S4 RealTimes Desktop Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [990840 2018-12-27] (RealNetworks, Inc. -> RealNetworks, Inc.)
S4 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
S4 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2019-12-17] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S4 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [933304 2019-12-17] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
S2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [303648 2025-12-09] (Bitdefender SRL -> Bitdefender)
S2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [4107680 2017-04-13] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
S2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [851704 2025-12-09] (Bitdefender SRL -> Bitdefender)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
S4 WindscribeService; C:\Program Files (x86)\Windscribe\WindscribeService.exe [493232 2019-01-19] (Windscribe Limited -> Windscribe Limited)
S2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292480 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
S4 wpscloudsvr; C:\Program Files (x86)\Kingsoft\office6\wpscloudsvr.exe [1058504 2021-08-05] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)
S4 ZA NET ICM Service; C:\Program Files (x86)\CheckPoint\ICM\ICM-Service-NET.exe [36352 2025-03-31] (Check Point Software Technologies Ltd.) [Datei ist nicht signiert]
S3 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [114936 2016-11-01] (Check Point Software Technologies Ltd. -> Check Point Software Technologies, Ltd.)
S4 ZoneAlarm ICM Service; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe [1058616 2017-04-13] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
S2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [X] <==== ACHTUNG
S4 PaceLicenseDServices; "C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe" -u hxxps://activation.paceap.com/InitiateActivation
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S1 atc; C:\Windows\System32\DRIVERS\atc.sys [8502344 2025-08-14] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender S.R.L. Bucharest, ROMANIA)
S3 atikmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [6037504 2009-08-18] (Microsoft Windows Hardware Compatibility Publisher -> ATI Technologies Inc.)
S3 aucapi; C:\Windows\System32\DRIVERS\aucapi.sys [234416 2012-02-14] (Auerswald GmbH & Co. KG -> Auerswald GmbH & Co.KG)
S3 aumpa; C:\Windows\System32\DRIVERS\aumpa.sys [168368 2012-02-14] (Auerswald GmbH & Co. KG -> Auerswald GmbH & Co.KG)
S3 auusb; C:\Windows\System32\DRIVERS\auusb.sys [205232 2012-06-21] (Auerswald GmbH & Co. KG -> Auerswald GmbH & Co.KG)
R0 avgArDisk; C:\Windows\System32\drivers\avgArDisk.sys [21088 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S1 avgArPot; C:\Windows\System32\drivers\avgArPot.sys [286816 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S1 avgbidsdriver; C:\Windows\System32\drivers\avgbidsdriver.sys [435808 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S0 avgbidsh; C:\Windows\System32\drivers\avgbidsh.sys [304736 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S0 avgbuniv; C:\Windows\System32\drivers\avgbuniv.sys [88160 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgKbd; C:\Windows\System32\drivers\avgKbd.sys [32864 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S1 avgMonFlt; C:\Windows\System32\drivers\avgMonFlt.sys [289888 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S1 avgNetHub; C:\Windows\System32\drivers\avgNetHub.sys [586336 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 avgNetNd6; C:\Windows\System32\DRIVERS\avgNetNd6.sys [23472 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
S1 avgRdr; C:\Windows\System32\drivers\avgRdr2.sys [97376 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S0 avgRvrt; C:\Windows\System32\drivers\avgRvrt.sys [73312 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S1 avgSnx; C:\Windows\System32\drivers\avgSnx.sys [898656 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S1 avgSP; C:\Windows\System32\drivers\avgSP.sys [1315424 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 avgStm; C:\Windows\System32\drivers\avgStm.sys [231008 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S0 avgVmm; C:\Windows\System32\drivers\avgVmm.sys [404064 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S2 BdDci; C:\Windows\System32\DRIVERS\bddci.sys [800672 2024-11-05] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S2 BdDci4; C:\Windows\System32\DRIVERS\bddci4.sys [1380416 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R0 BdNet; C:\Windows\System32\DRIVERS\BdNet.sys [180360 2023-01-31] (BullGuard LTD -> BullGuard Ltd.)
S3 bdprivmon; C:\Windows\System32\DRIVERS\bdprivmon.sys [49208 2025-08-05] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S1 BdSentry; C:\Windows\System32\DRIVERS\BdSentry.sys [219448 2023-01-26] (BullGuard LTD -> Avira Operations GmbH)
S3 bduefiscan; C:\Windows\System32\DRIVERS\bduefiscan.sys [53808 2025-08-13] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S3 expressvpnsplittunnel; C:\Program Files (x86)\ExpressVPN\splittunnel\expressvpnsplittunnel.sys [18800 2020-05-25] (ExprsVPN LLC -> )
S1 Gemma; C:\Windows\System32\DRIVERS\gemma.sys [1793112 2025-06-26] (Microsoft Windows Hardware Compatibility Publisher -> BitDefender S.R.L. Bucharest, ROMANIA)
S3 gmer; C:\Windows\SysWOW64\DRIVERS\gmer.sys [70001 2019-05-24] (GMER) [Datei ist nicht signiert]
S2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331608 2014-11-27] (SafeNet, Inc. -> SafeNet Inc.)
S3 HCW85BDA; C:\Windows\System32\drivers\HCW85BDA.sys [2256512 2017-06-16] (Hauppauge Computer Works Inc. -> Hauppauge Computer Works)
S3 hcw85cir; C:\Windows\System32\drivers\hcw85cir4.sys [70272 2017-06-16] (Hauppauge Computer Works Inc. -> Hauppauge Computer Works, Inc.)
S2 Ignisv2; C:\Windows\System32\DRIVERS\ignisv2.sys [848456 2025-08-07] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S2 mbamchameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [234088 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [245336 2026-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] (ASUSTeK Computer Inc. -> )
S1 netprotection_network_filter; C:\Windows\System32\drivers\netprotection_network_filter.sys [92416 2023-01-21] (Avira Operations GmbH -> Avira Operations GmbH)
S3 nmwcd; C:\Windows\System32\drivers\ccdcmbx64.sys [19968 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 nmwcdc; C:\Windows\System32\drivers\ccdcmbox64.sys [27136 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
S2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [36496 2019-11-26] (devolo AG -> Riverbed Technology, Inc.)
S3 phantomtap; C:\Windows\System32\DRIVERS\phantomtap.sys [35664 2020-01-08] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
S3 RTL85n64; C:\Windows\System32\DRIVERS\RTL85n64.sys [378368 2009-06-10] (Microsoft Windows -> Realtek)
S2 rtp_filesystem_filter; C:\Windows\System32\DRIVERS\rtp_filesystem_filter.sys [230408 2023-01-30] (Avira Operations GmbH -> Avira Operations GmbH)
S1 rtp_process_monitor; C:\Windows\System32\DRIVERS\rtp_process_monitor.sys [224512 2023-01-30] (Avira Operations GmbH -> Avira Operations GmbH)
S1 rtp_traverse; C:\Windows\System32\DRIVERS\rtp_traverse.sys [62632 2023-01-30] (Avira Operations GmbH -> Avira Operations GmbH)
S1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
S1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [767648 2014-10-08] (Microsoft Corporation -> Microsoft Corporation)
S3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [273576 2014-10-08] (Microsoft Corporation -> Microsoft Corporation)
S3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [29864 2014-10-08] (Microsoft Corporation -> Microsoft Corporation)
S3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [23208 2014-10-08] (Microsoft Corporation -> Microsoft Corporation)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 tapexpressvpn; C:\Windows\System32\DRIVERS\tapexpressvpn.sys [36208 2020-05-25] (ExprsVPN LLC -> The OpenVPN Project)
S3 tapwindscribe0901; C:\Windows\System32\DRIVERS\tapwindscribe0901.sys [45560 2018-07-06] (Windscribe Limited -> The OpenVPN Project)
S2 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [630320 2025-08-06] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S0 vlflt; C:\Windows\System32\DRIVERS\vlflt.sys [1445440 2025-09-15] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [461240 2017-04-13] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64_prewin8.sys [31920 2018-02-26] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies)
S2 WtfEngineDrv; C:\Windows\System32\DRIVERS\WtfEngineDrv.sys [27392 2016-02-01] (Initex -> AAA Internet Publishing, Inc.)
U3 aswbdisk; kein ImagePath
U3 iswSvc; kein ImagePath
S3 netprotection_network_filter2; System32\drivers\netprotection_network_filter2.sys [X]
S3 NTIOLib_DVDSetup; \??\D:\NTIOLib_X64.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-03-02 08:16 - 2026-03-02 08:21 - 000000000 ____D C:\FRST
2026-03-01 10:21 - 2026-03-01 10:21 - 000194084 _____ C:\ProgramData\cl.1772356863.bdinstall.v2.bin
2026-03-01 09:02 - 2026-03-01 16:51 - 000003272 _____ C:\Windows\system32\Tasks\CCleanerCrashReporting
2026-03-01 09:02 - 2026-03-01 16:51 - 000000670 _____ C:\Windows\Tasks\CCleanerCrashReporting.job
2026-03-01 08:30 - 2026-03-01 08:30 - 000003480 ____N C:\bootsqm.dat
2026-03-01 08:28 - 2026-03-01 08:28 - 000000000 __SHD C:\found.000
2026-02-26 15:28 - 2026-02-26 15:28 - 000000000 _____ C:\Users\admin\AppData\Local\{8D0122BE-1153-44C2-B871-E8C31A7FCB90}
2026-02-20 08:57 - 2023-01-21 10:46 - 000092416 _____ (Avira Operations GmbH) C:\Windows\system32\Drivers\netprotection_network_filter.sys
2026-02-20 08:53 - 2026-02-20 08:53 - 000000027 _____ C:\Windows\system32\ctc.json
2026-02-20 08:52 - 2026-02-20 08:52 - 000000318 _____ C:\Windows\system32\httpproxy.json
2026-02-20 08:50 - 2023-01-31 10:26 - 000180360 _____ (BullGuard Ltd.) C:\Windows\system32\Drivers\BdNet.sys
2026-02-20 08:50 - 2023-01-30 15:23 - 000230408 _____ (Avira Operations GmbH) C:\Windows\system32\Drivers\rtp_filesystem_filter.sys
2026-02-20 08:50 - 2023-01-30 15:23 - 000224512 _____ (Avira Operations GmbH) C:\Windows\system32\Drivers\rtp_process_monitor.sys
2026-02-20 08:50 - 2023-01-30 15:23 - 000062632 _____ (Avira Operations GmbH) C:\Windows\system32\Drivers\rtp_traverse.sys
2026-02-20 08:50 - 2023-01-26 15:06 - 000219448 _____ (Avira Operations GmbH) C:\Windows\system32\Drivers\BdSentry.sys
2026-02-18 08:41 - 2026-02-18 08:41 - 000688736 _____ C:\ProgramData\cl.1771399997.bdinstall.v2.bin
2026-02-18 08:41 - 2026-02-18 08:41 - 000136632 _____ C:\ProgramData\cl.kit.1771399994.bdinstall.v2.bin
2026-02-18 08:37 - 2026-02-18 08:37 - 000000000 ____D C:\ProgramData\48C4687D-9760-4F5B-BAB3-60351B0841E4
2026-02-18 08:36 - 2026-03-01 10:21 - 000000000 ____D C:\ProgramData\BDLogging
2026-02-18 08:36 - 2026-02-18 08:36 - 000002341 _____ C:\Users\Public\Desktop\Bitdefender.lnk
2026-02-18 08:36 - 2026-02-18 08:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Security
2026-02-18 08:34 - 2026-02-18 08:34 - 000000000 ____D C:\Users\admin\AppData\Roaming\Bitdefender Security App
2026-02-18 08:33 - 2026-02-20 09:30 - 000000000 ____D C:\ProgramData\Bitdefender
2026-02-18 08:33 - 2026-02-18 08:33 - 000000000 ____D C:\Users\admin\AppData\Roaming\Bitdefender
2026-02-18 08:33 - 2026-02-18 08:33 - 000000000 ____D C:\Program Files\Common Files\Bitdefender
2026-02-18 08:33 - 2026-02-18 08:33 - 000000000 ____D C:\Program Files\Bitdefender
2026-02-18 08:32 - 2026-03-01 09:00 - 000003688 _____ C:\Windows\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2026-02-18 08:30 - 2026-02-18 08:30 - 000227896 _____ C:\ProgramData\agent.1771399800.bdinstall.v2.bin
2026-02-18 08:30 - 2026-02-18 08:30 - 000000000 ____D C:\Program Files\Bitdefender Agent
2026-02-18 08:08 - 2026-02-18 10:31 - 000000000 ____D C:\ProgramData\SecTaskMan
2026-02-18 08:08 - 2026-02-18 08:08 - 000001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spy Protector.lnk
2026-02-18 08:08 - 2026-02-18 08:08 - 000001187 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager.lnk
2026-02-18 08:08 - 2026-02-18 08:08 - 000001175 _____ C:\Users\Public\Desktop\Security Task Manager.lnk
2026-02-18 08:08 - 2026-02-18 08:08 - 000000000 ____D C:\Program Files (x86)\Security Task Manager
2026-02-17 19:32 - 2026-02-17 19:32 - 000000000 ____D C:\Windows\system32\Tasks\Aufgaben der Ereignisanzeige
2026-02-17 14:51 - 2026-02-17 14:51 - 000000926 _____ C:\Users\admin\Desktop\Total Commander.lnk
2026-02-17 14:51 - 2026-02-17 14:51 - 000000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2026-02-17 14:50 - 2026-02-17 14:50 - 000000856 _____ C:\Users\admin\Desktop\Total Commander Entfernen oder Reparieren.lnk
2026-02-17 13:53 - 2026-02-21 01:53 - 000000700 _____ C:\Windows\Tasks\WpsExternal_admin_interval.job
2026-02-17 13:53 - 2026-02-20 14:57 - 000000418 _____ C:\Windows\Tasks\WpsUpdateTask_admin.job
2026-02-17 10:22 - 2026-02-17 10:22 - 000000072 _____ C:\Windows\system32\AdsInfoCls
2026-02-17 10:12 - 2026-03-02 08:16 - 001401944 _____ C:\Windows\ntbtlog.txt
2026-02-17 09:38 - 2026-02-17 09:39 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2026-02-17 09:35 - 2026-02-17 09:35 - 000000000 ____D C:\Users\admin\AppData\Roaming\AVG
2026-02-17 09:35 - 2026-02-17 09:35 - 000000000 ____D C:\Users\admin\AppData\Local\AVG
2026-02-17 09:34 - 2026-02-17 15:59 - 000000000 ____D C:\Windows\system32\Tasks\AVG
2026-02-17 09:34 - 2026-02-17 14:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2026-02-17 09:34 - 2026-02-17 09:34 - 000002064 _____ C:\Users\Public\Desktop\AVG AntiVirus Free.lnk
2026-02-17 09:33 - 2026-02-17 09:31 - 000323752 _____ (Gen Digital Inc.) C:\Windows\system32\avgBoot.exe
2026-02-17 09:31 - 2026-02-17 14:27 - 000000000 ____D C:\Program Files\Common Files\AVG
2026-02-17 09:31 - 2026-02-17 09:32 - 000000000 ____D C:\Program Files\AVG
2026-02-17 09:31 - 2026-02-17 09:30 - 000056128 _____ (Gen Digital Inc.) C:\Windows\system32\icarus_rvrt.exe
2026-02-17 09:30 - 2026-03-02 01:52 - 000000000 ____D C:\ProgramData\AVG
2026-02-17 02:22 - 2026-02-17 02:22 - 000004246 _____ C:\Windows\system32\Tasks\WpsExternal_admin_interval
2026-02-16 16:09 - 2026-02-16 16:09 - 000003962 _____ C:\Windows\system32\Tasks\WpsUpdateTask_admin
2026-02-16 16:09 - 2026-02-16 16:09 - 000003718 _____ C:\Windows\system32\Tasks\WpsExternal_admin_startup
2026-02-16 16:09 - 2026-02-16 16:09 - 000002529 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WPS Presentation.lnk
2026-02-16 16:09 - 2026-02-16 16:09 - 000002523 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WPS Spreadsheets.lnk
2026-02-16 16:09 - 2026-02-16 16:09 - 000002505 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WPS Writer.lnk
2026-02-16 16:09 - 2026-02-16 16:09 - 000002487 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WPS PDF.lnk
2026-02-16 16:09 - 2026-02-16 16:09 - 000002367 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WPS Office.lnk
2026-02-16 15:23 - 2026-02-16 15:23 - 000003710 _____ C:\Windows\system32\Tasks\Avira_Security_Maintenance
2026-02-16 15:23 - 2026-02-16 15:23 - 000003232 _____ C:\Windows\system32\Tasks\Avira_Security_Service_SCM_Watchdog
2026-02-16 15:23 - 2026-02-16 15:23 - 000002648 _____ C:\Windows\system32\Tasks\Avira_Security_Systray
2026-02-03 14:02 - 2026-02-03 14:02 - 001480982 _____ C:\Users\admin\Documents\IMG_20260203_0002.pdf
2026-02-03 14:00 - 2026-02-03 14:00 - 001459897 _____ C:\Users\admin\Documents\IMG_20260203_0001.pdf
2026-02-02 07:45 - 2026-02-02 07:45 - 000003664 _____ C:\Windows\system32\Tasks\AviraSystemSpeedupVerify
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-03-02 01:53 - 2022-06-04 07:11 - 003475664 _____ C:\Windows\system32\rtp.db
2026-03-01 17:25 - 2013-06-05 16:30 - 000000000 ____D C:\Program Files (x86)\Google
2026-03-01 16:51 - 2020-03-21 14:05 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2026-03-01 09:42 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2026-03-01 09:20 - 2009-07-14 05:45 - 000035392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2026-03-01 09:20 - 2009-07-14 05:45 - 000035392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2026-03-01 09:11 - 2010-11-21 07:50 - 000699874 _____ C:\Windows\system32\perfh007.dat
2026-03-01 09:11 - 2010-11-21 07:50 - 000149756 _____ C:\Windows\system32\perfc007.dat
2026-03-01 09:11 - 2009-07-14 06:13 - 001622256 _____ C:\Windows\system32\PerfStringBackup.INI
2026-03-01 09:11 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2026-03-01 08:56 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-03-01 08:49 - 2021-10-14 22:43 - 000003656 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-03-01 08:49 - 2021-10-14 22:43 - 000003526 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-02-25 10:14 - 2009-07-14 05:45 - 000356176 _____ C:\Windows\system32\FNTCACHE.DAT
2026-02-20 08:55 - 2013-06-05 20:03 - 000000000 ____D C:\ProgramData\Avira
2026-02-20 08:49 - 2022-06-04 07:10 - 000000000 ____D C:\Program Files\Avira
2026-02-18 11:01 - 2013-08-15 10:17 - 000000000 ____D C:\Windows\system32\MRT
2026-02-18 08:48 - 2015-04-27 20:55 - 000003738 _____ C:\Users\admin\Desktop\mp3DirectCut.ini
2026-02-17 15:21 - 2017-11-20 19:17 - 000000000 ____D C:\ProgramData\CheckPoint
2026-02-17 15:21 - 2017-11-20 12:11 - 000000000 ____D C:\ProgramData\NVIDIA
2026-02-17 14:47 - 2013-06-05 15:54 - 000000000 ____D C:\Program Files\totalcmd
2026-02-17 14:44 - 2013-06-05 15:54 - 000001120 _____ C:\Users\Public\Desktop\Total Commander.lnk
2026-02-17 14:28 - 2025-10-31 08:36 - 000000000 ____D C:\Program Files (x86)\PDF24
2026-02-17 14:28 - 2024-08-13 12:06 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2026-02-17 14:28 - 2021-08-05 05:54 - 000000000 ____D C:\Program Files (x86)\Kingsoft
2026-02-17 14:28 - 2020-03-15 23:36 - 000000000 ____D C:\Program Files (x86)\Windscribe
2026-02-17 14:28 - 2019-05-24 15:55 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2026-02-17 14:28 - 2017-12-14 19:15 - 000000000 ____D C:\Program Files (x86)\VR-NetWorld
2026-02-17 14:28 - 2017-11-20 10:24 - 000000000 ____D C:\ammon
2026-02-17 14:28 - 2015-08-08 14:32 - 000000000 ____D C:\Program Files (x86)\Opera
2026-02-17 14:28 - 2015-05-18 15:46 - 000000000 ____D C:\Program Files (x86)\WinZip
2026-02-17 14:28 - 2015-05-18 15:11 - 000000000 ____D C:\Program Files (x86)\Hardcopy
2026-02-17 14:28 - 2013-06-05 20:03 - 000000000 ____D C:\Program Files (x86)\Avira
2026-02-17 14:27 - 2024-11-06 10:05 - 000000000 ____D C:\Program Files\CCleaner
2026-02-17 14:27 - 2021-04-19 05:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2026-02-17 14:27 - 2020-12-23 16:10 - 000000000 ___HD C:\ProgramData\CanonIJScan
2026-02-17 14:27 - 2020-04-16 17:35 - 000000000 ____D C:\Program Files\UltraMon
2026-02-17 14:27 - 2020-03-15 22:05 - 000000000 ____D C:\Users\Public\Speedup Sessions
2026-02-17 14:27 - 2020-01-29 09:37 - 000000000 ____D C:\Users\Public\Security Sessions
2026-02-17 14:27 - 2020-01-29 09:37 - 000000000 ____D C:\Users\admin\AppData\Local\Avira
2026-02-17 14:27 - 2019-05-24 15:55 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2026-02-17 14:27 - 2017-12-22 12:58 - 000000000 ____D C:\Program Files\SUPERAntiSpyware
2026-02-17 14:27 - 2013-06-05 15:54 - 000000000 ____D C:\Users\admin\AppData\Roaming\GHISLER
2026-02-17 14:27 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2026-02-17 13:52 - 2024-11-05 10:14 - 000000000 ____D C:\Users\admin\AppData\Local\Malwarebytes
2026-02-17 10:22 - 2025-05-24 07:11 - 000234088 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2026-02-17 10:22 - 2025-03-19 07:37 - 000245336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2026-02-17 02:25 - 2013-07-11 12:52 - 221154392 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2026-02-16 16:09 - 2021-10-24 00:50 - 000002505 _____ C:\Users\admin\Desktop\WPS PDF.lnk
2026-02-16 15:56 - 2024-11-05 14:47 - 000000000 ____D C:\Users\admin\AppData\Roaming\Lavasoft
2026-02-16 15:56 - 2020-03-16 09:47 - 000000000 ____D C:\Users\admin\AppData\Roaming\BitTorrent
2026-02-16 15:33 - 2022-10-13 07:26 - 000002095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader.lnk
2026-02-16 15:33 - 2022-10-13 07:26 - 000002083 _____ C:\Users\Public\Desktop\Acrobat Reader.lnk
2026-02-16 15:23 - 2021-04-19 05:36 - 000001041 _____ C:\Users\Public\Desktop\Avira.lnk
2026-02-16 15:23 - 2020-03-15 22:06 - 000003312 _____ C:\Windows\system32\Tasks\Avira_Security_Update
2026-02-16 15:09 - 2013-03-27 22:36 - 000000000 ____D C:\Users\admin
2026-02-16 15:04 - 2015-05-25 18:11 - 000000000 ____D C:\ProgramData\Real
2026-02-16 07:30 - 2017-12-14 10:46 - 000000000 ____D C:\Users\Public\Documents\VR-NetWorld
2026-02-16 02:07 - 2018-12-29 16:00 - 000000000 ____D C:\Users\admin\AppData\Local\CrashDumps
2026-02-01 21:10 - 2018-12-12 19:55 - 000000000 ____D C:\Program Files (x86)\Advanced IP Scanner
2026-02-01 21:10 - 2018-05-25 21:55 - 000000000 ____D C:\Program Files\Sweet Home 3D
2026-02-01 21:10 - 2017-11-18 13:43 - 000000000 ____D C:\Users\admin\Documents\FinePrint-Dateien
2026-02-01 21:02 - 2018-12-11 01:54 - 000000015 _____ C:\Users\admin\advanced_ip_scanner_Comments.bin
2026-02-01 21:02 - 2018-12-11 01:54 - 000000015 _____ C:\Users\admin\advanced_ip_scanner_Aliases.bin
2026-02-01 21:02 - 2013-07-16 16:40 - 000002332 _____ C:\Users\admin\advanced_ip_scanner_MAC.bin
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2015-10-21 15:46 - 2015-10-21 15:47 - 000001230 _____ () C:\Users\admin\AppData\Roaming\dj.log
2013-08-26 15:46 - 2013-08-26 15:46 - 000426878 _____ () C:\Users\admin\AppData\Roaming\fontlst2.opf
2020-03-21 21:50 - 2020-03-21 21:50 - 000000000 _____ () C:\Users\admin\AppData\Local\oobelibMkey.log
2020-03-01 09:52 - 2020-04-27 08:32 - 000007620 _____ () C:\Users\admin\AppData\Local\resmon.resmoncfg
2026-02-26 15:28 - 2026-02-26 15:28 - 000000000 _____ () C:\Users\admin\AppData\Local\{8D0122BE-1153-44C2-B871-E8C31A7FCB90}
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
LastRegBack: 2020-01-28 01:04
==================== Ende von FRST.txt ========================
|
Lesestoff: