Windows 10: alter Virenbefall nicht richtig entfernt + aktueller Bluescreen
Liste der Anhänge anzeigen (Anzahl: 1) Hallo Zusammen,
nachdem ich Opera (in der Sandbox) beendet hatte, ging der Rechner in den Bluescreen mit anschließendem Neustart.
Danach Avira Security Free laufen lassen, ohne Befund.
Ebenso Search & Destroy laufen lassen, Cache etc. wurde geleert.
In der Quarantäne von Avira haben sich über die Jahre 13 Einträge angesammelt. Ich habe naiverweise immer gedacht, dass das Problem damit behoben wäre. Die Log-Dateien von Avira würde ich gerne hier anheften, falls das hilfreich wäre, aber ich weiß nicht wo ich sie abrufen kann.
Ansonsten zeigt der PC keine Symptome und funktioniert.
Hier ist die FRST.txt Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 11-12-2022
durchgeführt von Verwalter (Administrator) auf PCARBEITSTIER2 (FUJITSU ESPRIMO P720) (12-12-2022 15:56:50)
Gestartet von C:\Users\Verwalter\Desktop
Geladene Profile: Verwalter
Plattform: Microsoft Windows 10 Pro Version 21H2 19044.2251 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Vivaldi
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files\Avira\Endpoint Protection SDK\SentryEye.exe
(C:\Program Files\Logitech\LogiOptions\LogiOptions.exe ->) (Logitech Inc -> Logitech) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe
(C:\Program Files\Logitech\LogiOptions\LogiOptions.exe ->) (Logitech Inc -> Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe
(explorer.exe ->) (Lavasoft Software Canada Inc. -> Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(explorer.exe ->) (Paramount Software UK Ltd -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectMonitor.exe
(explorer.exe ->) (Paramount Software UK Ltd -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectUI.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(explorer.exe ->) (Vivaldi Technologies AS -> Vivaldi Technologies AS) C:\Users\Verwalter\AppData\Local\Vivaldi\Application\vivaldi.exe <14>
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Safer-Networking Limited -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (AOMEI International Network Limited -> AOMEI International Network Limited) C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.1.0\ABService.exe
(services.exe ->) (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (FUJITSU CLIENT COMPUTING LIMITED -> FUJITSU CLIENT COMPUTING LIMITED) C:\Windows\System32\DriverStore\FileRepository\fuj02e3.inf_amd64_1683545b1e151564\fuj02e3-utility.exe
(services.exe ->) (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions GmbH) C:\Program Files\Fujitsu\WorkplaceProtect\Fujitsu.KeePassPluginAgent.exe
(services.exe ->) (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions GmbH) C:\Program Files\Fujitsu\WorkplaceProtect\Fujitsu.WorkPlace.Protect.LogonManager.Service.exe
(services.exe ->) (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions GmbH) C:\Program Files\Fujitsu\WorkplaceProtect\WorkPlaceProtectAgentService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Lavasoft Software Canada Inc. -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
(services.exe ->) (Lavasoft Software Canada Inc. -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(services.exe ->) (Paramount Software UK Ltd -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\MacriumService.exe
(services.exe ->) (pdfforge GmbH -> © pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(services.exe ->) (pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Safer-Networking Limited -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(services.exe ->) (Safer-Networking Limited -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(services.exe ->) (Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe
(services.exe ->) (Sony Corporation -> Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
(services.exe ->) (Sony Corporation -> Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(services.exe ->) (Sony Corporation -> Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
(services.exe ->) (Sony) [Datei ist nicht signiert] C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe
(services.exe ->) (Tonalio GmbH -> Sandboxie-Plus.com) C:\Program Files\Sandboxie\SbieSvc.exe
(services.exe ->) (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(svchost.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22092.214.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(svchost.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe <4>
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [19677472 2020-08-25] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Reflect UI] => C:\Program Files\Macrium\Common\ReflectUI.exe [7580024 2021-01-19] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1690368 2022-07-22] (Logitech Inc -> Logitech, Inc.)
HKLM-x32\...\Run: [DeskUpdateNotifier] => C:\Program Files (x86)\Fujitsu\DeskUpdate\DeskUpdateNotifier.exe [102648 2022-05-23] (FUJITSU CLIENT COMPUTING LIMITED -> Fujitsu Technology Solutions)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [2711576 2014-10-03] (Sony Corporation -> Sony Corporation)
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [1890664 2015-03-24] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1761120 2015-03-22] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WDAppManager] => C:\Program Files (x86)\Western Digital\WD App Manager\AppManagerLauncher.exe [21384 2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [334416 2022-11-11] (Avira Operations GmbH -> Avira Operations GmbH)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX2] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe [271496 2017-11-02] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5204968 2021-11-16] (Safer-Networking Limited -> Safer-Networking Ltd.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG
HKU\S-1-5-21-2186073167-3827245384-538900188-1001\...\Run: [Steam] => D:\Steam\steam.exe [3375904 2020-06-04] (Valve -> Valve Corporation)
HKU\S-1-5-21-2186073167-3827245384-538900188-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [563416 2015-12-11] (ZONER software, a.s. -> ZONER software)
HKU\S-1-5-21-2186073167-3827245384-538900188-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Verwalter\AppData\Local\Microsoft\Teams\Update.exe [2459280 2021-11-10] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-2186073167-3827245384-538900188-1001\...\Run: [] => [X]
HKU\S-1-5-21-2186073167-3827245384-538900188-1001\...\Run: [Opera Browser Assistant] => C:\Users\Verwalter\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4124416 2022-05-17] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-2186073167-3827245384-538900188-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [31314832 2022-05-19] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-2186073167-3827245384-538900188-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [9327536 2022-10-26] (Lavasoft Software Canada Inc. -> Lavasoft)
HKLM\...\Windows x64\Print Processors\Canon G7000 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDFF.DLL [509952 2019-07-02] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ FAX Language Monitor G7000 series: C:\WINDOWS\system32\CNCALFF.DLL [254464 2019-07-11] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor G7000 series: C:\WINDOWS\system32\CNMLMFF.DLL [1338880 2019-07-02] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP 5512 Status Monitor: C:\WINDOWS\system32\hpinksts5512LM.dll [332176 2012-09-12] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [120072 2016-06-21] (pdfforge GmbH -> pdfforge GmbH)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\108.0.5359.99\Installer\chrmstp.exe [2022-12-09] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{36014FFB-708C-43CC-9331-1F6687ABB5AD}] -> C:\Program Files\Fujitsu\WorkplaceProtect\System\FWPCredentialProvider.dll [2013-09-19] (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions GmbH)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
HKLM\Software\...\Authentication\Credential Provider Filters: [{FFFCDA1D-ABDA-4491-BDC7-E705E4C37010}] -> C:\Program Files\Fujitsu\WorkplaceProtect\System\FWPCredentialProviderFilter.dll [2013-09-19] (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions GmbH)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk [2014-09-02]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions)
Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk [2014-09-02]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions)
Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter (1).lnk [2016-04-28]
ShortcutTarget: LaunchCenter (1).lnk -> C:\Program Files\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions)
Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk [2014-09-02]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter (1).lnk [2016-04-28]
ShortcutTarget: LaunchCenter (1).lnk -> C:\Program Files\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk [2014-09-02]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy-Firefox-x32: Beschränkung <==== ACHTUNG
GroupPolicyScripts: Beschränkung <==== ACHTUNG
GroupPolicyScripts-x32: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {01629436-4234-41CE-A1B2-1A533EE1CFA7} - System32\Tasks\G2MUpdateTask-S-1-5-21-2186073167-3827245384-538900188-1001 => C:\Users\Verwalter\AppData\Local\GoToMeeting\19950\g2mupdate.exe [33456 2022-11-29] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {0668FD42-0836-40AF-A2E9-D2BEFE99B1AA} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {0946271F-F845-46D3-95C2-EB0CF9BB6F01} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (Keine Datei)
Task: {0AF0C0BE-9730-462D-9A8B-A3A85DB06C20} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (Keine Datei)
Task: {0BAF8124-B0B6-4730-B03B-27B61837D9B1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1552376 2022-09-26] (Adobe Inc. -> Adobe Inc.)
Task: {0D42B8B1-CDCB-43F7-92FA-23EDDB2BE1D3} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26308528 2022-12-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {0DDAF395-3FE1-4A69-A1CD-A587084F4ADC} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (Keine Datei)
Task: {0E2C794A-A3FC-4932-9297-F4DECA0CDA80} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {116CF367-2662-4CC2-9F03-B9F89DCF6824} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {1463D3FD-CCEC-400D-AEC7-3504AEB37BC6} - System32\Tasks\Avira_Security_Update => C:\WINDOWS\system32\net.exe [59904 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {152255DA-C13D-4EB3-B518-F10B59DCEBB2} - System32\Tasks\AviraSystemSpeedupVerify => C:\Program Files (x86)\Avira\System Speedup\setup\avira_speedup_setup.exe [35424480 2022-12-01] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {17CBE5ED-851D-49F3-9D2B-DB9DF8F2CD8F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-10-25] (Google Inc -> Google Inc.)
Task: {1E56AA55-6F0E-4D2F-9019-4B26D6280510} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {1E9CD68D-780A-4B22-841C-8B57B790A45B} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {1F2EB49D-D880-4213-BEB5-1E04B0C467A2} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (Keine Datei)
Task: {23C72614-9EB4-4E0A-9A9E-DE1662A380EE} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe do-task "E7CF176E110C211B"
Task: {24B3D331-C94A-4247-85A4-003DC55351C3} - System32\Tasks\Avira_Security_Systray => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe [1660112 2022-11-30] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {2B110FAA-CC36-4E49-9CEF-294FBA942174} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-10-25] (Google Inc -> Google Inc.)
Task: {311F2D36-918D-4F05-A95C-A1A0F0D65F38} - kein Dateipfad
Task: {37651D31-71DE-4B73-A517-FA97EE9E3B75} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {3D9C8C43-6084-437B-A1E7-72F1A25EBA1F} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {4ECC3D49-8F05-473D-939C-820383E0AB4A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5629064 2021-11-23] (Safer-Networking Limited -> Safer-Networking Ltd.)
Task: {50C1719F-A29C-4865-826F-29C7743B0360} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [110660344 2021-09-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
Task: {50EB0387-92FA-4F39-9F05-15BE139EA672} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe -crl -hms -pscn 15 (Keine Datei)
Task: {51A19FB2-940F-4A3B-A9AF-F6113C6473EE} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {57698642-21C3-4FD9-BDEB-62447486BABD} - \SidebarExecute -> Keine Datei <==== ACHTUNG
Task: {585B822F-6CCC-4BAF-84BF-0B04C31779FB} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5BF5DABA-7939-4CEE-898A-53FC93F7F128} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5D682312-65C5-4043-A96F-E8868FF6673C} - System32\Tasks\G2MUploadTask-S-1-5-21-2186073167-3827245384-538900188-1001 => C:\Users\Verwalter\AppData\Local\GoToMeeting\19950\g2mupload.exe [33456 2022-11-29] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {607CB26C-A5E3-48F7-AD5C-3706DAEDB45D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (Keine Datei)
Task: {60B6E5CE-ED6D-4749-A4F5-3AB31037B33B} - System32\Tasks\VivaldiUpdateCheck-91c63e60c9564c49 => C:\Users\Verwalter\AppData\Local\Vivaldi\Application\update_notifier.exe [3426152 2022-12-09] (Vivaldi Technologies AS -> Vivaldi Technologies AS)
Task: {6283547D-C645-461D-B327-8EBE1C3D83BF} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {6534393A-726C-4071-B11F-A143D2680E38} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib SOHDms => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [495248 2014-01-16] (Sony Corporation -> Sony Corporation)
Task: {65388348-3AB1-499F-B875-62E0967A3198} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {65B9DD48-0AE8-4F3F-8831-CAB11308FC82} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {691FBE89-8F10-4A0E-836C-3AFF3D9871DC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (Keine Datei)
Task: {71FEEE7D-C1DE-4B60-B9CE-FF54836F5955} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (Keine Datei)
Task: {78D630FB-5C85-41E9-98F9-7E1CFAC92942} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (Keine Datei)
Task: {7C664EE4-521A-4325-85E1-743D828865A9} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {7D9775D7-B285-421C-A91F-F9E747D94BBF} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (Keine Datei)
Task: {863750AC-92E7-4D11-9B3F-AB5D9DF6136E} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe -PvrSchedule (Keine Datei)
Task: {8AA91BF1-0445-45BA-A522-487BE086F5C4} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (Keine Datei)
Task: {8ACC53D2-52DB-4760-AD98-B5CF013A124F} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (Keine Datei)
Task: {92226648-2D70-495C-9E24-6ACBE705A97F} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (Keine Datei)
Task: {92FA3832-0BF7-4538-85B7-1B1B6E6465C1} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -PvrRecoveryTask (Keine Datei)
Task: {956631EA-B509-473B-95E3-6FD8FB69B3B9} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG
Task: {98CB86E9-822E-4F7A-B6B9-A3E490261856} - System32\Tasks\Avira_Security_Maintenance => Command(1): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> FallbackTelemetry
Task: {98CB86E9-822E-4F7A-B6B9-A3E490261856} - System32\Tasks\Avira_Security_Maintenance => Command(2): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> ServiceWatchdog
Task: {98CB86E9-822E-4F7A-B6B9-A3E490261856} - System32\Tasks\Avira_Security_Maintenance => Command(3): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> CrashCollector
Task: {9A519CE1-A610-4394-8B60-266111CA2D86} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (Keine Datei)
Task: {9BDB42A4-BB29-4840-A134-4540A6E33A6B} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114584 2022-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {9F1A8FC5-57DD-4864-B75F-B7A7765B013A} - \Opera scheduled assistant Autoupdate 1600715002 -> Keine Datei <==== ACHTUNG
Task: {9F2AC25A-1569-4E37-B5BA-496483F7C61C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (Keine Datei)
Task: {A0810060-E887-4030-90B1-5680670908BA} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (Keine Datei)
Task: {A0E76AFD-344C-491F-80E2-BAE43F85F00A} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe /RestartRecording (Keine Datei)
Task: {A66237A0-0408-48B0-9011-2FD6B665B050} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114584 2022-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {A7C75AB1-8FD0-4994-B097-0FAEAEF3CF55} - \CreateChoiceProcessTask -> Keine Datei <==== ACHTUNG
Task: {AF96AABA-6CBF-4F94-9B8B-B4798E412F24} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (Keine Datei)
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {B5703E95-C6EC-473F-BE57-75474E2AC577} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [28048 2022-05-19] (Garmin International, Inc. -> )
Task: {C07BE33B-5EEA-443E-A708-D09499D6828B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [5363552 2021-11-16] (Safer-Networking Limited -> Safer-Networking Ltd.)
Task: {C448522E-C5A4-4B50-8E15-7ACCA6464E07} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {C66727CE-4358-4AB7-93A4-83C1190F9F4C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26308528 2022-12-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {CB43CE5D-DBD2-48BC-A248-31E0601A1F6A} - System32\Tasks\Fujitsu\DeskUpdate => C:\Program Files (x86)\Fujitsu\DeskUpdate\DUCMD.EXE [122616 2022-05-23] (FUJITSU CLIENT COMPUTING LIMITED -> )
Task: {CBCADD45-6CE3-4BBE-96B6-97247C37297F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {CC4ABBD1-4CA2-4793-8D2A-D754C4D712B0} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {CE4932F4-B4D3-438E-B179-E9F348E66096} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [6093928 2021-12-20] (Safer-Networking Limited -> Safer-Networking Ltd.)
Task: {CE537D63-A99C-4123-9252-D04D2BB2E597} - System32\Tasks\Opera scheduled Autoupdate 1600714999 => C:\Users\Verwalter\AppData\Local\Programs\Opera\launcher.exe [1978824 2022-12-01] (Opera Norway AS -> Opera Software)
Task: {D3B13EF1-BC03-4613-9B9D-D841CC2D7362} - System32\Tasks\Avira_Security_Service_SCM_Watchdog => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe [260400 2022-11-30] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {D5D0F2CF-60F1-4A88-A45E-EFB74726F7BA} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (Keine Datei)
Task: {E982087D-DFB0-456E-8871-FDA537E69F8E} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {ECCAB6F0-9840-4A29-9B12-F0BE05CC54BC} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (Keine Datei)
Task: {F0B94E0A-3C45-4139-866A-AFDD0625D249} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-2186073167-3827245384-538900188-1001.job => C:\Users\Verwalter\AppData\Local\GoToMeeting\19950\g2mupdate.exe
Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-2186073167-3827245384-538900188-1001.job => C:\Users\Verwalter\AppData\Local\GoToMeeting\19950\g2mupload.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ACHTUNG (Beschränkung - Zones)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{2f23759f-c9e0-4ffb-a61b-580d50165d5d}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{5d085c4e-75b3-422a-a911-f41759d479b3}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{a17e96f3-5690-4dbf-9ae1-fd8833b69242}: [DhcpNameServer] 192.168.151.203
Edge:
=======
DownloadDir: C:\Users\Verwalter\Downloads
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge DefaultProfile: Profile 4
Edge Profile: C:\Users\Verwalter\AppData\Local\Microsoft\Edge\User Data\Profile 4 [2022-10-31]
Edge Notifications: Profile 4 -> hxxps://www.facebook.com
FireFox:
========
FF DefaultProfile: ve9xlz3a.default-1442048216707-1615994638472
FF ProfilePath: C:\Users\Verwalter\AppData\Roaming\Mozilla\Firefox\Profiles\ve9xlz3a.default-1442048216707-1615994638472 [2022-12-12]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2017-01-11] [] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [quick_searchff@gmail.com] - C:\Users\Verwalter\AppData\Roaming\Mozilla\Firefox\Profiles\zsly79be.default\extensions\quick_searchff@gmail.com => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\Verwalter\AppData\Roaming\Mozilla\Firefox\Profiles\zsly79be.default\extensions\sweetsearch@gmail.com => nicht gefunden
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-11-14] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-11-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2016-08-05] (pdfforge GmbH -> pdfforge GmbH)
Chrome:
=======
CHR Profile: C:\Users\Verwalter\AppData\Local\Google\Chrome\User Data\Default [2022-12-12]
CHR Extension: (Avira Password Manager) - C:\Users\Verwalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2022-11-08]
CHR Extension: (Google Docs Offline) - C:\Users\Verwalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-12-01]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Verwalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-08-22]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
Opera:
=======
OPR Profile: C:\Users\Verwalter\AppData\Roaming\Opera Software\Opera Stable [2022-12-12]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (AdGuard Werbeblocker) - C:\Users\Verwalter\AppData\Roaming\Opera Software\Opera Stable\Extensions\bopfaehpakahokaelnomggbohfbimcia [2021-03-14]
OPR Extension: (Avira Safe Shopping) - C:\Users\Verwalter\AppData\Roaming\Opera Software\Opera Stable\Extensions\dalelnnofafalcmkmnhdbigbjjkloabo [2021-03-14]
OPR Extension: (HTTPS Everywhere) - C:\Users\Verwalter\AppData\Roaming\Opera Software\Opera Stable\Extensions\edaplhobcmdaneconioghljnnopmkhgm [2021-03-14]
OPR Extension: (Rich Hints Agent) - C:\Users\Verwalter\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2021-03-14]
OPR Extension: (Disconnect) - C:\Users\Verwalter\AppData\Roaming\Opera Software\Opera Stable\Extensions\hciohocinlhbdkbjldffomiadmnhjnoj [2021-03-14]
OPR Extension: (Popup Blocker (strict)) - C:\Users\Verwalter\AppData\Roaming\Opera Software\Opera Stable\Extensions\jabcemjkhjfpkhakphioakkhcnbgeomm [2021-03-14]
OPR Extension: (Avira Password Manager) - C:\Users\Verwalter\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngohaaocccbohaffogpbgfpmpgbcgccg [2021-03-14]
OPR Extension: (Hide My IP) - C:\Users\Verwalter\AppData\Roaming\Opera Software\Opera Stable\Extensions\okkpfaeofjkckljjlpnkclopjlgkdikf [2021-03-14]
OPR Extension: (Free Avira Phantom VPN – Entsperrt Webseiten) - C:\Users\Verwalter\AppData\Roaming\Opera Software\Opera Stable\Extensions\pcgkmkjdikhiodinhloioejnpjgmfigd [2020-09-21]
Vivaldi:
=======
VIV Profile: C:\Users\Verwalter\AppData\Local\Vivaldi\User Data\Default [2022-12-12]
VIV DownloadDir: D:\Vivaldi Downloads
VIV Notifications: Default -> hxxps://www.derstandard.at; hxxps://www.lieferando.de; hxxps://www.sueddeutsche.de
VIV HomePage: Default -> vivaldi://startpage
VIV DefaultSearchKeyword: Default -> g
VIV Extension: (Pop up blocker for Chrome™ - Poper Blocker) - C:\Users\Verwalter\AppData\Local\Vivaldi\User Data\Default\Extensions\bkkbcggnhapdmkeljlodobbkopceiche [2022-11-30]
VIV Extension: (Avira Password Manager) - C:\Users\Verwalter\AppData\Local\Vivaldi\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2022-11-08]
VIV Extension: (Avira Safe Shopping) - C:\Users\Verwalter\AppData\Local\Vivaldi\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2022-10-26]
VIV Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Verwalter\AppData\Local\Vivaldi\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2022-12-06]
VIV Extension: (VT4Browsers) - C:\Users\Verwalter\AppData\Local\Vivaldi\User Data\Default\Extensions\efbjojhplkelaegfbieplglfidafgoka [2022-08-18]
VIV Extension: (Video Downloader professional) - C:\Users\Verwalter\AppData\Local\Vivaldi\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2022-11-19]
VIV Extension: (video downloader - CocoCut) - C:\Users\Verwalter\AppData\Local\Vivaldi\User Data\Default\Extensions\gddbgllpilhpnjpkdbopahnpealaklle [2022-11-19]
VIV Extension: (Disconnect) - C:\Users\Verwalter\AppData\Local\Vivaldi\User Data\Default\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2022-03-17]
VIV Extension: (Nervenschoner) - C:\Users\Verwalter\Downloads\nervenschoner.chromium_1.2_ [2022-10-26]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2022-09-26] (Adobe Inc. -> Adobe Inc.)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [3004688 2022-07-22] (Avira Operations GmbH -> Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [386864 2022-03-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [267096 2022-11-30] (Avira Operations GmbH -> Avira Operations GmbH)
S2 AviraSecurityUpdater; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [293816 2022-11-30] (Avira Operations GmbH -> Avira Operations GmbH)
R2 Backupper Service; C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.1.0\ABService.exe [898216 2020-10-12] (AOMEI International Network Limited -> AOMEI International Network Limited)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12544456 2022-12-08] (Microsoft Corporation -> Microsoft Corporation)
R2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [3413424 2022-10-26] (Lavasoft Software Canada Inc. -> )
S2 EndpointProtectionService; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [8816288 2022-12-12] (Avira Operations GmbH -> Avira Operations GmbH)
R3 EndpointProtectionService2; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [8816288 2022-12-12] (Avira Operations GmbH -> Avira Operations GmbH)
R2 Fuj02e3DriverUtilityService; C:\WINDOWS\System32\DriverStore\FileRepository\fuj02e3.inf_amd64_1683545b1e151564\fuj02e3-utility.exe [163016 2021-11-03] (FUJITSU CLIENT COMPUTING LIMITED -> FUJITSU CLIENT COMPUTING LIMITED)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [443344 2020-05-25] (Canon Inc. -> )
R2 KeePassPluginAgent; C:\Program Files\Fujitsu\WorkplaceProtect\Fujitsu.KeePassPluginAgent.exe [38240 2013-09-19] (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions GmbH)
R2 LogonManagerService; C:\Program Files\Fujitsu\WorkplaceProtect\Fujitsu.WorkPlace.Protect.LogonManager.Service.exe [122720 2013-09-19] (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions GmbH)
R2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [8921936 2021-01-19] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
S3 MagicianSVC; C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe [348728 2021-09-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2438880 2016-08-05] (pdfforge GmbH -> pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-08-05] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-08-05] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [972056 2016-05-18] (pdfforge GmbH -> © pdfforge GmbH.)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [485400 2014-10-03] (Sony Corporation -> Sony Corporation)
R2 SamsungMagicianSVC; C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe [348728 2021-09-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2020\RpcAgentSrv.exe [135176 2020-05-27] (SiSoftware SPC -> SiSoftware) [Datei ist nicht signiert]
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [366032 2022-11-08] (Tonalio GmbH -> Sandboxie-Plus.com)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2782080 2021-11-16] (Safer-Networking Limited -> Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4605312 2021-11-16] (Safer-Networking Limited -> Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [940976 2019-09-04] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [224216 2022-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [22960 2022-10-26] (Lavasoft Software Canada Inc. -> )
S3 WD Backup Drive Helper; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{4AB831D3-8315-414C-8A7A-303105288D0B} [19256 2020-10-17] (Microsoft Windows -> Microsoft Corporation)
S3 WD Backup Snapshot; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{302480DF-3AC5-4400-BE7B-DD77AF93B6DD} [19256 2020-10-17] (Microsoft Windows -> Microsoft Corporation)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [306552 2015-03-24] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.6-0\NisSrv.exe [3191272 2022-11-25] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.6-0\MsMpEng.exe [133544 2022-11-25] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WorkPlaceProtectAgent; C:\Program Files\Fujitsu\WorkplaceProtect\WorkplaceProtectAgentService.exe [72544 2013-09-19] (Fujitsu Technology Solutions GmbH -> Fujitsu Technology Solutions GmbH)
R2 XperiaCompanionService; C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe [2575360 2020-09-02] (Sony) [Datei ist nicht signiert]
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R0 ambakdrv; C:\WINDOWS\System32\ambakdrv.sys [51120 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [171952 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [38320 2017-09-01] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2022-10-26] (Bitdefender SRL -> Bitdefender)
R0 BdNet; C:\WINDOWS\System32\DRIVERS\BdNet.sys [185704 2022-05-18] (NortonLifeLock Inc. -> BullGuard Ltd.)
R1 BdSentry; C:\WINDOWS\System32\DRIVERS\BdSentry.sys [230520 2022-05-29] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R3 BST88SRV; C:\WINDOWS\system32\drivers\bst88e.sys [503040 2015-11-12] (Shenzhen Bestunar Technology Co., LTD. -> Bestunar Inc.)
R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d.inf_amd64_e64afe811c7e4662\e1d.sys [608464 2022-06-01] (Intel Corporation -> Intel Corporation)
R2 FBIOSDRV; C:\WINDOWS\System32\Drivers\FBIOSDRV.sys [46200 2016-01-14] (FUJITSU LIMITED -> FUJITSU LIMITED)
R3 fuj02e3; C:\WINDOWS\System32\DriverStore\FileRepository\fuj02e3.inf_amd64_1683545b1e151564\fuj02e3.sys [49352 2021-11-03] (FUJITSU CLIENT COMPUTING LIMITED -> FUJITSU CLIENT COMPUTING LIMITED)
R1 netprotection_network_filter; C:\WINDOWS\System32\drivers\netprotection_network_filter.sys [100128 2022-05-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R3 phantomtap; C:\WINDOWS\System32\drivers\phantomtap.sys [45056 2020-03-18] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
R1 RrNetCapFilterDriver; C:\WINDOWS\system32\DRIVERS\RrNetCapFilterDriver.sys [25256 2015-04-21] (Audials AG -> Audials AG)
S0 rtp_elam; C:\WINDOWS\System32\DRIVERS\rtp_elam.sys [26624 2022-10-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH)
R2 rtp_filesystem_filter; C:\WINDOWS\System32\DRIVERS\rtp_filesystem_filter.sys [228384 2022-12-12] (Avira Operations GmbH -> Avira Operations GmbH)
R1 rtp_process_monitor; C:\WINDOWS\system32\DRIVERS\rtp_process_monitor.sys [228296 2022-12-12] (Avira Operations GmbH -> Avira Operations GmbH)
R1 rtp_traverse; C:\WINDOWS\system32\DRIVERS\rtp_traverse.sys [61376 2022-10-14] (Avira Operations GmbH -> Avira Operations GmbH)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2020\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware Ltd -> SiSoftware)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [250896 2022-11-08] (Microsoft Windows Hardware Compatibility Publisher -> Sandboxie-Plus.com)
S0 Spybot3ELAM; C:\WINDOWS\System32\drivers\Spybot3ELAM.sys [19904 2019-06-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Windows (R) Win 7 DDK provider)
R3 tbhsd; C:\WINDOWS\system32\drivers\tbhsd.sys [48296 2015-04-21] (Audials AG -> RapidSolution Software AG)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49616 2022-11-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [469288 2022-11-25] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [95520 2022-11-25] (Microsoft Windows -> Microsoft Corporation)
U3 idsvc; kein ImagePath
S3 netprotection_network_filter2; System32\drivers\netprotection_network_filter2.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2022-12-12 15:56 - 2022-12-12 15:57 - 000048462 _____ C:\Users\Verwalter\Desktop\FRST.txt
2022-12-12 15:56 - 2022-12-12 15:57 - 000000000 ____D C:\FRST
2022-12-12 15:10 - 2022-12-12 15:10 - 000000875 _____ C:\Users\Verwalter\AppData\Local\recently-used.xbel
2022-12-12 14:54 - 2022-12-12 14:54 - 002375680 _____ (Farbar) C:\Users\Verwalter\Desktop\FRST64.exe
2022-12-12 14:32 - 2022-12-12 14:32 - 000000000 ____D C:\Users\Verwalter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NirSoft BlueScreenView
2022-12-12 14:32 - 2022-12-12 14:32 - 000000000 ____D C:\Program Files (x86)\NirSoft
2022-12-12 14:30 - 2022-12-12 14:30 - 000141864 _____ C:\Users\Verwalter\Desktop\bluescreenview_setup.exe
2022-12-12 08:29 - 2022-12-12 08:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
2022-12-12 08:23 - 2022-12-12 08:24 - 001105052 _____ C:\WINDOWS\Minidump\121222-33640-01.dmp
2022-12-08 14:49 - 2022-12-08 14:49 - 006917091 _____ C:\Users\Verwalter\Desktop\Healy-World-Manual-Healy-App-de-EU (1).pdf
2022-12-07 07:39 - 2022-12-07 07:39 - 000003888 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Maintenance
2022-12-07 07:39 - 2022-12-07 07:39 - 000003428 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Service_SCM_Watchdog
2022-12-07 07:39 - 2022-12-07 07:39 - 000002818 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Systray
2022-12-01 14:50 - 2022-12-05 07:49 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2022-12-01 14:41 - 2022-12-01 14:41 - 000003790 _____ C:\WINDOWS\system32\Tasks\AviraSystemSpeedupVerify
2022-11-30 11:29 - 2022-12-05 07:49 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2022-11-29 18:00 - 2022-12-01 15:17 - 000000000 ____D C:\Users\Verwalter\AppData\Local\GoToMeeting
2022-11-29 18:00 - 2022-11-30 08:15 - 000000688 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-2186073167-3827245384-538900188-1001.job
2022-11-29 18:00 - 2022-11-30 08:15 - 000000592 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-2186073167-3827245384-538900188-1001.job
2022-11-29 18:00 - 2022-11-29 18:00 - 000003862 _____ C:\WINDOWS\system32\Tasks\G2MUploadTask-S-1-5-21-2186073167-3827245384-538900188-1001
2022-11-29 18:00 - 2022-11-29 18:00 - 000003766 _____ C:\WINDOWS\system32\Tasks\G2MUpdateTask-S-1-5-21-2186073167-3827245384-538900188-1001
2022-11-29 18:00 - 2022-11-29 18:00 - 000000000 ____D C:\Users\Verwalter\AppData\Local\GoTo Opener
2022-11-22 07:38 - 2022-11-22 07:38 - 000002219 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2022-11-22 07:38 - 2022-11-22 07:38 - 000002207 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2022-11-22 07:38 - 2022-11-22 07:38 - 000000000 ____D C:\Program Files\Google
2022-11-20 19:03 - 2022-11-20 19:03 - 000505082 _____ C:\Users\Verwalter\Desktop\51150411030.pdf
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2022-12-12 15:57 - 2020-07-24 10:53 - 001916338 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-12-12 15:57 - 2019-12-07 15:51 - 000820626 _____ C:\WINDOWS\system32\perfh007.dat
2022-12-12 15:57 - 2019-12-07 15:51 - 000177158 _____ C:\WINDOWS\system32\perfc007.dat
2022-12-12 15:57 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2022-12-12 15:54 - 2022-06-03 09:56 - 003285232 _____ C:\WINDOWS\system32\rtp.db
2022-12-12 15:54 - 2022-06-03 09:56 - 000228384 _____ (Avira Operations GmbH) C:\WINDOWS\system32\Drivers\rtp_filesystem_filter.sys
2022-12-12 15:54 - 2022-06-03 09:56 - 000228296 _____ (Avira Operations GmbH) C:\WINDOWS\system32\Drivers\rtp_process_monitor.sys
2022-12-12 15:52 - 2022-01-14 13:33 - 000000000 ____D C:\Users\Verwalter\Desktop\Aktien
2022-12-12 15:52 - 2015-07-20 09:47 - 000000000 ____D C:\Program Files (x86)\Google
2022-12-12 15:51 - 2021-09-30 19:41 - 000000000 ____D C:\Users\Verwalter\AppData\Roaming\Samsung Magician
2022-12-12 15:50 - 2020-07-24 11:00 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-12-12 15:50 - 2020-07-24 10:49 - 000008192 ___SH C:\DumpStack.log.tmp
2022-12-12 15:50 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-12-12 15:50 - 2019-03-29 19:33 - 000000208 _____ C:\WINDOWS\SysWOW64\AbBakConfig.dat
2022-12-12 15:50 - 2019-03-29 19:32 - 000000150 _____ C:\WINDOWS\SysWOW64\winsevr.dat
2022-12-12 15:50 - 2017-04-21 09:04 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2022-12-12 15:50 - 2014-09-02 21:30 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2022-12-12 15:50 - 2014-09-02 16:36 - 000000000 __SHD C:\Users\Verwalter\IntelGraphicsProfiles
2022-12-12 15:49 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-12-12 15:48 - 2015-09-15 14:54 - 000000000 ____D C:\Users\Verwalter\Desktop\Christine1
2022-12-12 15:46 - 2021-08-01 08:52 - 000000000 ____D C:\Users\Verwalter\Desktop\Virus
2022-12-12 15:10 - 2014-09-16 14:43 - 000000000 ____D C:\Users\Verwalter\.gimp-2.8
2022-12-12 14:25 - 2016-11-25 20:07 - 000000000 ____D C:\Users\Verwalter\AppData\LocalLow\Mozilla
2022-12-12 14:23 - 2022-02-09 08:37 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-12-12 10:06 - 2020-07-24 10:49 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-12-12 08:59 - 2022-06-29 09:55 - 000007602 _____ C:\Users\Verwalter\AppData\Local\Resmon.ResmonCfg
2022-12-12 08:28 - 2021-03-14 10:22 - 000005214 _____ C:\WINDOWS\Sandboxie.ini
2022-12-12 08:24 - 2022-02-07 16:23 - 000000000 ____D C:\WINDOWS\Minidump
2022-12-12 08:24 - 2020-07-24 10:50 - 000000000 ____D C:\Users\Verwalter
2022-12-12 08:23 - 2020-05-30 20:54 - 940091968 _____ C:\WINDOWS\MEMORY.DMP
2022-12-11 16:27 - 2020-05-02 20:24 - 000000527 _____ C:\Users\Verwalter\.vivaldi_reporting_data
2022-12-10 11:00 - 2014-03-18 09:04 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2022-12-10 10:55 - 2021-12-14 12:32 - 000002449 _____ C:\Users\Verwalter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2022-12-10 10:55 - 2021-12-14 12:32 - 000002412 _____ C:\Users\Verwalter\Desktop\Vivaldi.lnk
2022-12-10 10:55 - 2021-12-14 12:32 - 000000000 ____D C:\Users\Verwalter\AppData\Local\Vivaldi
2022-12-10 10:52 - 2020-06-21 07:31 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-12-10 10:52 - 2020-06-21 07:31 - 000002280 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-12-10 10:52 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-12-10 10:52 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-12-09 07:38 - 2017-10-25 22:28 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-12-09 07:38 - 2017-10-25 22:28 - 000002258 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-12-07 07:39 - 2021-04-16 07:22 - 000001084 _____ C:\Users\Public\Desktop\Avira.lnk
2022-12-07 07:39 - 2021-04-16 07:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2022-12-07 07:39 - 2020-07-24 11:00 - 000003476 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Update
2022-12-06 15:52 - 2014-09-02 21:26 - 000000000 ____D C:\Users\Verwalter\AppData\Roaming\vlc
2022-12-05 07:49 - 2014-09-03 10:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-12-04 19:07 - 2020-11-12 10:12 - 000000000 ____D C:\ProgramData\CanonIJPLM
2022-12-03 13:33 - 2020-09-21 20:03 - 000004254 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1600714999
2022-12-03 13:33 - 2020-09-21 20:03 - 000001519 _____ C:\Users\Verwalter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2022-12-02 08:43 - 2020-09-21 20:03 - 000001457 _____ C:\Users\Verwalter\Desktop\Opera-Browser.lnk
2022-12-01 15:26 - 2014-09-03 10:05 - 000002104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2022-12-01 08:24 - 2017-12-10 19:30 - 000000000 ____D C:\Users\Verwalter\AppData\Local\Packages
2022-12-01 08:09 - 2021-11-04 12:37 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-12-01 08:09 - 2014-09-02 17:36 - 000001165 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-11-29 14:29 - 2021-12-12 20:15 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2186073167-3827245384-538900188-1001
2022-11-29 14:29 - 2020-07-24 11:00 - 000003384 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2186073167-3827245384-538900188-1001
2022-11-29 14:29 - 2020-07-24 10:50 - 000002459 _____ C:\Users\Verwalter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-11-25 15:41 - 2018-03-25 18:34 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-11-24 17:03 - 2015-12-03 11:22 - 000000000 ____D C:\ProgramData\tmp
2022-11-20 11:44 - 2015-01-25 22:39 - 000000000 ____D C:\Users\Verwalter\AppData\Roaming\MyPhoneExplorer
2022-11-17 18:46 - 2022-09-10 20:01 - 000000000 ____D C:\Users\Verwalter\AppData\Roaming\com.adobe.dunamis
2022-11-17 14:40 - 2022-10-12 19:06 - 000002039 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2022-11-17 14:40 - 2022-10-12 19:06 - 000002027 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2022-11-17 14:40 - 2020-07-24 11:00 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-11-14 16:10 - 2016-06-21 20:10 - 000000000 ____D C:\Users\Verwalter\AppData\Local\CrashDumps
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2020-10-23 09:59 - 2020-10-23 09:59 - 000008046 _____ () C:\Program Files (x86)\Common Files\setupBanner.jpg
2020-06-20 12:53 - 2020-05-18 21:42 - 017948672 _____ () C:\Users\Verwalter\AppData\Roaming\Sandra.mdb
2020-08-24 16:16 - 2020-08-24 16:16 - 000003584 _____ () C:\Users\Verwalter\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-12-12 15:10 - 2022-12-12 15:10 - 000000875 _____ () C:\Users\Verwalter\AppData\Local\recently-used.xbel
2022-06-29 09:55 - 2022-12-12 08:59 - 000007602 _____ () C:\Users\Verwalter\AppData\Local\Resmon.ResmonCfg
2014-09-02 16:26 - 2014-09-02 16:26 - 000003401 _____ () C:\Users\Verwalter\AppData\Local\Temppihide_log1.log
2014-09-02 16:26 - 2014-09-02 16:26 - 000000000 _____ () C:\Users\Verwalter\AppData\Local\Temppihide_log2.log
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Da die Log Dateien augenscheinlich zu lange sind, habe ich im Anhang die Addition.txt hinzugefügt.
Vielen Dank schon mal im Voraus für Eure Unterstützung!!!
Ramdana |
