![]() |
|
Log-Analyse und Auswertung: Zip-Datei Word in E-Mail geöffnetWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() ![]() | ![]() Zip-Datei Word in E-Mail geöffnet Guten Tag, leider habe ich in einer stressigen Situation einen unverzeilichen Fehler gemacht und einen Mailanhang .zip geöffnet, obwohl sie auch noch Passwort geschützt war. Das Passwort stand in der Mail. Diese zip hat eine Word-Datei vermutlich mit Makros geöffnet. Es war eine Antwort E-Mail von einem Unternehmen, dass ich um ein Angebot gebeten hatte. Dieses ist schon ein paar Tage her und ich habe bislang keine Fehlermeldung oder Warnung meines Virenprogramms Bitdefender Free bekommen. Dennoch möchte ich jetzt gerne sicher gehen, dass ich mir kein Trojaner emotet oder ähnliches eingefangen habe. Ich bin gerade dabei mit einem Freund ein kleines Unternehmen zu gründen. Bislang haben wir jedoch keine nennenswerten Umsätze und es ist nicht klar, ob es überhaupt weitergeht mit unserer Idee. Den Rechner nutze ich privat und auch dafür. Ich hoffe, dass ich damit bei euch unter die Ausnahme von "Geschäftsleuten" falle. Vielen Dank bereits vorab. Jetzt die Logfiles. FRST: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 09-05-2021 durchgeführt von Alexander (Administrator) auf WINDELL-788D1Q2 (Dell Inc. XPS 13 9360) (11-05-2021 09:51:32) Gestartet von C:\Users\Alexander\Downloads Geladene Profile: Alexander Platform: Windows 10 Home Version 2004 19041.928 (X64) Sprache: Deutsch (Deutschland) Standard-Browser: Opera Start-Modus: Normal ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\Adobe Installer.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud Helper.exe <2> (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe <2> (Adobe Inc. -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2> (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe <2> (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Adobe Systems Incorporated) C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe (Adobe Systems Incorporated) C:\Program Files\WindowsApps\AdobeNotificationClient_2.0.1.8_x86__enpm4xejd91yc\AdobeNotificationClient.exe (Adobe Systems Incorporated) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_12.3.74.0_x86__nzyj5cx40ttqa\iCloud\ApplePhotoStreams.exe (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_12.3.74.0_x86__nzyj5cx40ttqa\iCloud\APSDaemon.exe (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_12.3.74.0_x86__nzyj5cx40ttqa\iCloud\iCloudDrive.exe (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_12.3.74.0_x86__nzyj5cx40ttqa\iCloud\iCloudPhotos.exe (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_12.3.74.0_x86__nzyj5cx40ttqa\iCloud\iCloudServices.exe (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_12.3.74.0_x86__nzyj5cx40ttqa\iCloud\secd.exe (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12113.17.53090.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdagent.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdredline.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsserv.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe (Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\Alexander\AppData\Local\WebEx\ciscowebexstart.exe (Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\Alexander\AppData\Local\WebEx\WebEx\Meetings\atmgr.exe (Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\Alexander\AppData\Local\WebEx\WebEx\Meetings_01\atmgr.exe (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe (Dell Inc -> Dell INC.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe (Dell Inc -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <3> (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\121.4.4267\QtWebEngineProcess.exe <3> (Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe <2> (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_3f902faa7a5da85d\jhi_service.exe (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0e885955e29b0a55\igfxCUIService.exe (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0e885955e29b0a55\igfxEM.exe (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0e885955e29b0a55\IntelCpHDCPSvc.exe (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0e885955e29b0a55\IntelCpHeciSvc.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_ecb9604542bb4ba6\RstMwService.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\Alexander\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.2101.28.0_x64__8wekyb3d8bbwe\Time.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12104.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe (OpenJS Foundation -> Node.js) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe (Opera Software AS -> Opera Software) C:\Program Files\Opera\76.0.4017.107\opera.exe <87> (Opera Software AS -> Opera Software) C:\Program Files\Opera\76.0.4017.107\opera_crashreporter.exe (PC-Doctor, Inc. -> PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.7240.285\DSAPI.exe (Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <3> (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Rivet Networks LLC -> Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe (Rivet Networks LLC -> Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe (Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe (Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe (Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe (Wondershare Technology Co.,Ltd -> Wondershare) C:\ProgramData\Wondershare\Service\InstallAssistService.exe ==================== Registry (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-02-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_WAVES_SKYLAKE] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-02-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM\...\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-02-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320056 2019-08-13] (Intel(R) Rapid Storage Technology -> Intel Corporation) HKLM\...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [1235160 2019-09-26] (Waves Inc -> Waves Audio Ltd.) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [7991528 2021-04-24] (Dropbox, Inc -> Dropbox, Inc.) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [5237416 2021-04-21] (Adobe Inc. -> Adobe Systems Inc.) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [779448 2021-05-07] (Adobe Inc. -> Adobe Inc.) HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-02-05] (Adobe Inc. -> ) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files\Opera\assistant\browser_assistant.exe [3154456 2020-11-25] (Opera Software AS -> Opera Software) HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [50041472 2021-03-12] (Google LLC -> ) HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [680728 2021-05-05] (Adobe Inc. -> Adobe Systems Incorporated) HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\Run: [Discord] => C:\Users\Alexander\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub) HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [30885360 2020-03-04] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries) HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\Run: [PTOneClick] => C:\Users\Alexander\AppData\Local\Webex\Webex\Applications\ptoneclk.exe [7184192 2020-04-12] (Cisco WebEx LLC -> Cisco Webex LLC) HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\Run: [Adobe Reader Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe [5536424 2021-04-21] (Adobe Inc. -> Adobe Systems Incorporated) HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\Alexander\AppData\Local\WebEx\ciscowebexstart.exe [3711704 2021-04-30] (Cisco WebEx LLC -> Cisco Webex LLC) HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\Run: [AnyTransToolHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AnyTransToolHelper.exe HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe [2763952 2021-05-07] (Adobe Inc. -> Adobe Inc.) HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Alexander\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Alexander\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\RunOnce: [Uninstall 21.062.0328.0001\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Alexander\AppData\Local\Microsoft\OneDrive\21.062.0328.0001\amd64" HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\RunOnce: [Uninstall 21.062.0328.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Alexander\AppData\Local\Microsoft\OneDrive\21.062.0328.0001" HKU\S-1-5-21-648673255-3041033212-2045848966-1001\...\Policies\Explorer: [] HKLM\...\Windows x64\Print Processors\Canon TS5000 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDF.DLL [30720 2017-12-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [65496 2020-10-23] (Adobe Inc. -> Adobe Systems Inc) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\90.0.4430.93\Installer\chrmstp.exe [2021-04-27] (Google LLC -> Google LLC) Startup: C:\Users\Alexander\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2019-02-03] ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============ (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0C93F72A-6F8E-4DC7-A2A9-7CC09D822904} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on switch user if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226008 2018-12-25] (Intel(R) Client Connectivity Division SW -> Intel Corporation) Task: {16545A9C-9BBF-4739-90C3-D52AD3C1B751} - System32\Tasks\AdobeAAMUpdater-1.0-WINDELL-788D1Q2-Alexander => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated) Task: {19141BCC-9300-466C-9758-1BE5F37DBFE9} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4071016 2021-04-21] (Microsoft Corporation -> Microsoft Corporation) Task: {27ED81A3-E23C-4C1D-B463-F7FF65E4FFA6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.) Task: {33A96379-28BA-479C-A2AA-D467D9A00697} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => sc.exe start ThunderboltService Task: {36525BF1-C22C-43F8-A6F6-BBEBCD222162} - System32\Tasks\Opera scheduled assistant Autoupdate 1576835173 => C:\Program Files\Opera\launcher.exe [2199704 2021-05-06] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Program Files\Opera\assistant" $(Arg0) Task: {3880284A-3737-4115-8B6F-0C4168D3F71D} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\tbtsvc.exe [2302168 2018-12-25] (Intel(R) Client Connectivity Division SW -> Intel Corporation) Task: {389BB786-6712-4F94-B108-AF90218D0FB0} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23103392 2021-04-21] (Microsoft Corporation -> Microsoft Corporation) Task: {3E2F6869-CD9F-471D-82C9-B512C28F3F97} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-06-28] (Dropbox, Inc -> Dropbox, Inc.) Task: {432DA82D-2E8F-4458-A102-BEFBCCB90C52} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-13] (Google Inc -> Google Inc.) Task: {4BBC94E0-A0FB-4F40-BA05-F593065E1E78} - System32\Tasks\Opera scheduled Autoupdate 1509559017 => C:\Program Files\Opera\launcher.exe [2199704 2021-05-06] (Opera Software AS -> Opera Software) Task: {551A3672-B22C-4D83-9A59-45916EBB6540} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1120696 2021-05-03] (Microsoft Corporation -> Microsoft Corporation) Task: {603C9FB2-6B0B-4052-A084-D42F91AEFCB1} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-02-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {66E53798-F95C-43C0-9B72-59E6BF3C2BD5} - System32\Tasks\DropboxUpdateTaskMachineCore1d558491a4a8d18 => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-06-28] (Dropbox, Inc -> Dropbox, Inc.) Task: {72686D95-A891-483A-BBE5-A610D06F474A} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226008 2018-12-25] (Intel(R) Client Connectivity Division SW -> Intel Corporation) Task: {8C5B4ACF-CD23-4F0D-B5F7-31FE68C66242} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23103392 2021-04-21] (Microsoft Corporation -> Microsoft Corporation) Task: {9B78D7F5-C5C2-454F-BC6C-8F46150FDD01} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [696816 2021-03-29] (Mozilla Corporation -> Mozilla Foundation) Task: {A1BB7DE0-DDD7-4857-95D7-70DE9CE09139} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [888232 2021-01-29] (Bitdefender SRL -> Bitdefender) Task: {AC221FF3-5AA7-4B8C-8D9E-01382A0E0A2C} - System32\Tasks\Intel\Intel® Management and Security Status => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\\IMSS\PIconStartup.exe [231400 2019-08-05] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) -> "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\\IMSS\PrivacyIconClient.exe" 60 Task: {B14BC9B8-C9A1-400C-9D91-ECADA2EEFDB5} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226008 2018-12-25] (Intel(R) Client Connectivity Division SW -> Intel Corporation) Task: {B9D624D1-2F4B-426E-9A68-BF743D83E344} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG Task: {BB06A88E-8A91-44EE-BDFC-91F595D86915} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114048 2021-05-03] (Microsoft Corporation -> Microsoft Corporation) Task: {C711D884-722A-4478-8749-923B42852DB8} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-06-28] (Dropbox, Inc -> Dropbox, Inc.) Task: {CFB28C91-0A06-474B-BA10-1CB262C24C1F} - System32\Tasks\DropboxUpdateTaskMachineUA1d558491a577788 => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-06-28] (Dropbox, Inc -> Dropbox, Inc.) Task: {D3B225DB-F019-45E5-BCBE-680C8314FB87} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114048 2021-05-03] (Microsoft Corporation -> Microsoft Corporation) Task: {E5CD3D1D-A4B7-41E3-B1EC-92459A9B4566} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {E6E24F68-D2C2-4B80-8B3A-1D141680A236} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [40432 2020-03-04] (Garmin International, Inc. -> ) Task: {EBB517B3-14A4-4CB2-ACD9-DF5465BD94D6} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistInstaller.exe [1059336 2021-01-09] (Dell Inc -> Dell Inc.) Task: {EC731A2E-2804-4084-B770-AC2EDECC6A58} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-13] (Google Inc -> Google Inc.) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore1d558491a4a8d18.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA1d558491a577788.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{0e4f6f48-c261-4dd0-8db2-59bf5a91dfdb}: [DhcpNameServer] 10.106.8.30 Tcpip\..\Interfaces\{19c08f36-edb5-412e-9336-4049871475d5}: [DhcpNameServer] 192.168.0.1 127.0.0.1 128.0.0.1 Tcpip\..\Interfaces\{3f99e3f5-94c9-4ead-8977-2086e6de0d6b}: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{ca90329d-3cf3-42e6-a062-13ddf94891df}: [DhcpNameServer] 192.168.0.1 127.0.0.1 128.0.0.1 Edge: ======= Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden] Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden] Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden] Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden] Edge DefaultProfile: Default Edge Profile: C:\Users\Alexander\AppData\Local\Microsoft\Edge\User Data\Default [2021-04-13] FireFox: ======== FF DefaultProfile: ftt3x0f4.default FF DefaultProfile: 2y091unm.default FF ProfilePath: C:\Users\Alexander\AppData\Roaming\Zotero\Zotero\Profiles\ftt3x0f4.default [2021-04-23] FF ProfilePath: C:\Users\Alexander\AppData\Roaming\Mozilla\Firefox\Profiles\2y091unm.default [2021-04-20] FF Extension: (Hoxx VPN Proxy) - C:\Users\Alexander\AppData\Roaming\Mozilla\Firefox\Profiles\2y091unm.default\Extensions\@hoxx-vpn.xpi [2021-04-14] FF Extension: (Hotspot Shield Free VPN Proxy - Unlimited VPN) - C:\Users\Alexander\AppData\Roaming\Mozilla\Firefox\Profiles\2y091unm.default\Extensions\hotspot-shield@anchorfree.com.xpi [2020-12-15] FF Extension: (Touch VPN – Kostenloses VPN und kostenloser Proxy) - C:\Users\Alexander\AppData\Roaming\Mozilla\Firefox\Profiles\2y091unm.default\Extensions\touch-vpn@anchorfree.com.xpi [2021-01-16] FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-05-02] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2021-05-07] (Adobe Inc. -> Adobe Systems) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-03-07] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-04-21] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-04-21] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2021-05-07] (Adobe Inc. -> Adobe Systems) FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2019-07-21] <==== ACHTUNG (Zeigt auf eine *.cfg Datei) FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2019-07-21] <==== ACHTUNG Chrome: ======= CHR DefaultProfile: Profile 1 CHR Profile: C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Guest Profile [2021-02-15] CHR Profile: C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1 [2021-04-15] CHR Notifications: Profile 1 -> hxxps://app.houseparty.com CHR Extension: (Präsentationen) - C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-02-12] CHR Extension: (Docs) - C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2018-02-12] CHR Extension: (Redirect Path) - C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aomidfkchockcldhbkggjokdkkebmdll [2021-02-25] CHR Extension: (Google Drive) - C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-12-23] CHR Extension: (YouTube) - C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-02-12] CHR Extension: (Adobe Acrobat) - C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-03-18] CHR Extension: (Tabellen) - C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-02-12] CHR Extension: (Google Docs Offline) - C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-18] CHR Extension: (Anwendungs-Launcher für Drive (von Google)) - C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2021-01-29] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29] CHR Extension: (Google Mail) - C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-01-05] CHR Extension: (Chrome Media Router) - C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-18] CHR Profile: C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\System Profile [2018-02-12] CHR HKU\S-1-5-21-648673255-3041033212-2045848966-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] Opera: ======= OPR Profile: C:\Users\Alexander\AppData\Roaming\Opera Software\Opera Stable [2021-05-11] OPR Notifications: Opera Stable -> hxxps://app.houseparty.com; hxxps://book.lufthansa.com; hxxps://business.facebook.com; hxxps://jungesrl.zulipchat.com; hxxps://portal.imice.de; hxxps://web.telegram.org; hxxps://www.facebook.com; hxxps://www.kaufda.de; hxxps://www.laptopmag.com; hxxps://www.wetteronline.de OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding} OPR Extension: (Ecosia - Die Suchmaschine, die Bäume pflanzt) - C:\Users\Alexander\AppData\Roaming\Opera Software\Opera Stable\Extensions\cjkjohdegdpmepjcgmiafjaanigkkelo [2017-11-01] OPR Extension: (Zotero Connector) - C:\Users\Alexander\AppData\Roaming\Opera Software\Opera Stable\Extensions\ekhagklcjbdpajgpjgmbionohlpdbjgc [2021-05-05] OPR Extension: (Rich Hints Agent) - C:\Users\Alexander\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2021-04-20] OPR Extension: (Limit - Set Limits for Distracting Sites) - C:\Users\Alexander\AppData\Roaming\Opera Software\Opera Stable\Extensions\idhmmjbmojepanopjakcclphcadaclmk [2020-11-02] OPR Extension: (Install Chrome Extensions) - C:\Users\Alexander\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2020-12-23] OPR Extension: (Desktop Messenger for Telegram™) - C:\Users\Alexander\AppData\Roaming\Opera Software\Opera Stable\Extensions\lamkfhpkhbgfdglofogcdipebpibjbkg [2019-12-16] ==================== Dienste (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S4 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1353208 2017-06-15] (Autodesk, Inc -> Autodesk Inc.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [842424 2021-05-07] (Adobe Inc. -> Adobe Inc.) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) S3 AtcHost; C:\Program Files\Bitdefender Antivirus Free\atchost.exe [1475272 2020-10-02] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA) R2 bdredline; C:\Program Files\Bitdefender Antivirus Free\bdredline.exe [2461792 2021-04-11] (Bitdefender SRL -> Bitdefender) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8798600 2021-04-21] (Microsoft Corporation -> Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-06-28] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-06-28] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44272 2021-04-24] (Dropbox, Inc -> Dropbox, Inc.) S3 dcpm-notify; C:\Program Files\Dell\CommandPowerManager\NotifyService.exe [315008 2020-08-18] (Dell Inc -> Dell Inc.) R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [287776 2020-10-26] (Dell Technologies Inc. -> Dell Technologies Inc.) R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [3750944 2020-10-26] (Dell Technologies Inc. -> Dell Technologies Inc.) R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [507936 2020-10-26] (Dell Technologies Inc. -> Dell Technologies Inc.) R2 Dell Hardware Support; C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.7240.285\DSAPI.exe [985584 2021-01-17] (PC-Doctor, Inc. -> PC-Doctor, Inc.) R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [19128 2020-08-19] (Dell Inc -> Dell INC.) S3 Dell.CommandPowerManager.Service; C:\WINDOWS\system32\dllhost.exe /Processid:{CDBCEBD6-3610-40F0-A782-B593722A86D0} [21312 2020-10-13] (Microsoft Windows -> Microsoft Corporation) R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [38592 2021-01-19] (Dell Inc -> ) R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [288360 2021-05-10] (HP Inc. -> HP Inc.) S3 KAPSService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KAPSService.exe [73928 2020-04-16] (Rivet Networks LLC -> Rivet Networks, LLC.) R2 Killer Analytics Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe [1775840 2020-04-16] (Rivet Networks LLC -> Rivet Networks) R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2663128 2020-04-16] (Rivet Networks LLC -> Rivet Networks) S3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [73928 2020-04-16] (Rivet Networks LLC -> Rivet Networks, LLC.) S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2020-10-13] (Microsoft Windows -> Microsoft Corporation) R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1358248 2021-01-29] (Bitdefender SRL -> Bitdefender) R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2019-12-17] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [933304 2019-12-17] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [39432 2021-01-09] (Dell Inc -> Dell Inc.) R2 updatesrv; C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe [236128 2021-04-11] (Bitdefender SRL -> Bitdefender) R2 vsserv; C:\Program Files\Bitdefender Antivirus Free\vsserv.exe [559200 2021-04-11] (Bitdefender SRL -> Bitdefender) R2 vsservppl; C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe [240352 2021-04-11] (Bitdefender SRL -> Bitdefender) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation) R2 Wondershare InstallAssist; C:\ProgramData\Wondershare\Service\InstallAssistService.exe [269200 2020-10-16] (Wondershare Technology Co.,Ltd -> Wondershare) R2 WsAppService3; C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe [83232 2019-06-26] (Wondershare Technology Co.,Ltd -> Wondershare) ===================== Treiber (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.) R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [2718744 2021-02-26] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA) R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [802976 2020-12-08] (Bitdefender SRL -> Bitdefender) S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22976 2021-04-11] (Microsoft Windows Early Launch Anti-Malware Publisher -> Bitdefender) S3 dc3d; C:\WINDOWS\System32\drivers\dc3d.sys [47616 2011-05-18] (Hardware Group Test Cert -> Microsoft Corporation) R3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [42376 2020-10-26] (Microsoft Windows Hardware Compatibility Publisher -> Dell Inc.) S3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [41208 2018-05-08] (Techporch Incorporated -> Dell Computer Corporation) S3 edrsensor; C:\WINDOWS\System32\DRIVERS\edrsensor.sys [309120 2020-03-05] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA) R1 Gemma; C:\WINDOWS\System32\DRIVERS\Gemma.sys [488592 2021-02-26] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA) R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo10X64.sys [187848 2020-04-16] (Rivet Networks LLC -> Rivet Networks, LLC.) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R2 trufos; C:\WINDOWS\System32\drivers\trufos.sys [641728 2021-03-10] (Bitdefender SRL -> Bitdefender) R0 vlflt; C:\WINDOWS\System32\DRIVERS\vlflt.sys [386800 2020-12-08] (Bitdefender SRL -> Bitdefender) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation) S4 DBUtilDrv2; \SystemRoot\System32\drivers\DBUtilDrv2.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2099-07-04 05:39 - 2117-07-04 05:39 - 000000000 _____ C:\WINDOWS\SysWOW64\wsmand.log.lock 2021-05-11 10:00 - 2021-05-11 10:00 - 000002744 _____ C:\Users\Alexander\Desktop\mail.txt 2021-05-11 09:51 - 2021-05-11 09:57 - 000040791 _____ C:\Users\Alexander\Downloads\FRST.txt 2021-05-11 09:49 - 2021-05-11 09:56 - 000000000 ____D C:\FRST 2021-05-11 09:47 - 2021-05-11 09:47 - 002298880 _____ (Farbar) C:\Users\Alexander\Downloads\FRST64.exe 2021-05-10 21:18 - 2021-05-10 21:18 - 007090901 _____ C:\Users\Alexander\Downloads\21_05_09_Rennsteig 15 bis 21_8 (002) (2).pdf 2021-05-10 21:17 - 2021-05-10 21:17 - 007090901 _____ C:\Users\Alexander\Downloads\21_05_09_Rennsteig 15 bis 21_8 (002).pdf 2021-05-10 21:17 - 2021-05-10 21:17 - 007090901 _____ C:\Users\Alexander\Downloads\21_05_09_Rennsteig 15 bis 21_8 (002) (1).pdf 2021-05-10 21:03 - 2021-05-10 21:03 - 000144035 _____ C:\Users\Alexander\Downloads\WhatsApp Image 2021-05-05 at 09.30.39.jpeg 2021-05-10 21:02 - 2021-05-10 21:02 - 000156353 _____ C:\Users\Alexander\Downloads\WhatsApp Image 2021-05-10 at 21.01.51.jpeg 2021-05-10 21:02 - 2021-05-10 21:02 - 000156353 _____ C:\Users\Alexander\Downloads\WhatsApp Image 2021-05-10 at 21.01.51 (1).jpeg 2021-05-10 16:45 - 2021-05-10 16:45 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP 2021-05-10 16:45 - 2021-05-10 16:45 - 000000000 ____D C:\Program Files\HPPrintScanDoctor 2021-05-10 16:11 - 2021-05-10 16:11 - 000003980 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1509559017 2021-05-10 16:11 - 2021-05-10 16:11 - 000001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk 2021-05-10 09:27 - 2021-05-10 09:27 - 000003386 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-648673255-3041033212-2045848966-1001 2021-05-10 09:27 - 2021-05-10 09:27 - 000002398 _____ C:\Users\Alexander\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2021-05-07 09:17 - 2021-05-07 09:17 - 000001407 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk 2021-05-02 11:13 - 2021-05-02 11:13 - 000002520 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 2021.lnk 2021-04-30 08:48 - 2021-04-30 08:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2021-04-28 23:17 - 2021-04-28 23:17 - 000234959 _____ C:\Users\Alexander\Downloads\Berechnung-Hauskauf_Aktuell.xlsm 2021-04-24 16:07 - 2021-04-24 16:07 - 000002121 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk 2021-04-24 16:07 - 2021-04-24 16:07 - 000002110 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk 2021-04-24 12:55 - 2021-04-24 12:55 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2021-04-24 12:55 - 2021-04-24 12:55 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2021-04-24 12:55 - 2021-04-24 12:55 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2021-04-24 12:55 - 2021-04-24 12:55 - 000044272 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2021-04-23 14:24 - 2021-04-23 14:24 - 000002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2021-04-22 13:52 - 2021-04-22 13:52 - 000372051 _____ C:\Users\Alexander\Downloads\Satzung_158.PDF 2021-04-21 10:17 - 2021-04-21 10:17 - 001427677 _____ C:\Users\Alexander\Downloads\Kurzbericht_Welt_Erbe_Haus_zur_Barrierefreiheit.PDF 2021-04-20 15:56 - 2021-05-07 09:15 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2021-04-19 20:03 - 2021-04-19 20:03 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2021-04-19 20:03 - 2021-04-19 20:03 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll 2021-04-19 20:03 - 2021-04-19 20:03 - 000011357 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim 2021-04-18 13:55 - 2021-04-18 13:55 - 000001175 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder 2021.lnk 2021-04-18 13:51 - 2021-04-18 13:51 - 000001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Animate 2021.lnk 2021-04-18 13:46 - 2021-04-18 13:46 - 000001134 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Rush 1.5.lnk 2021-04-18 13:35 - 2021-04-18 13:35 - 000001083 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2021.lnk 2021-04-16 15:58 - 2021-04-16 15:58 - 000048902 _____ C:\Users\Alexander\Downloads\DINPro Bold.zip 2021-04-16 15:56 - 2021-04-16 15:56 - 000017216 _____ C:\Users\Alexander\Downloads\DIN Bold.zip 2021-04-16 15:56 - 2021-04-16 15:56 - 000017216 _____ C:\Users\Alexander\Downloads\DIN Bold (1).zip 2021-04-16 15:55 - 2021-04-16 15:55 - 000000000 ____D C:\Users\Alexander\Downloads\flyer Ordner-20210416T135406Z-001 2021-04-16 15:54 - 2021-04-16 15:54 - 031156564 _____ C:\Users\Alexander\Downloads\flyer Ordner-20210416T135406Z-001.zip 2021-04-16 14:59 - 2021-04-16 14:59 - 000125168 _____ (Zoom Video Communications, Inc.) C:\Users\Alexander\Downloads\Zoom_cm_fo42anktZ9vvrZo4_m47SkS27WCcn4PA0hcQmB23L3OTsAxpSFvcY8@OH9ASUeSMemokc+I_k22b9e1cf54b5db69_.exe 2021-04-14 12:21 - 2021-04-14 12:21 - 000116552 _____ C:\Users\Alexander\Desktop\Snippet_316875325.idms 2021-04-14 10:11 - 2021-04-14 10:11 - 000708273 _____ C:\Users\Alexander\Downloads\HydroTower_Bestellformular und QA_2021.04.14 (1).pdf 2021-04-13 17:35 - 2021-04-13 17:35 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2021-04-13 12:06 - 2021-04-13 12:06 - 000612441 _____ C:\Users\Alexander\Downloads\t200605073 (1).pdf 2021-04-13 12:03 - 2021-04-13 12:03 - 000612441 _____ C:\Users\Alexander\Downloads\t200605073.pdf 2021-04-13 10:27 - 2021-04-13 10:27 - 002523013 _____ C:\Users\Alexander\Downloads\37_CleanTube_.pdf 2021-04-13 10:27 - 2021-04-13 10:27 - 000806962 _____ C:\Users\Alexander\Downloads\04_RP_PVC_Forwarding_Tube.pdf 2021-04-13 10:26 - 2021-04-13 10:26 - 000716535 _____ C:\Users\Alexander\Downloads\05_RP_PVC_Sleeve_Tube.pdf 2021-04-13 10:26 - 2021-04-13 10:26 - 000663032 _____ C:\Users\Alexander\Downloads\06_RP_PVC_Collar.pdf 2021-04-12 20:18 - 2021-04-12 20:18 - 000000000 ____D C:\Users\Public\Documents\AdobeInstalledCodecsTier2 2021-04-12 18:18 - 2021-04-12 18:18 - 000806962 _____ C:\Users\Alexander\Downloads\04_RP_PVC_Fahrrohr (1).pdf 2021-04-12 18:18 - 2021-04-12 18:18 - 000716535 _____ C:\Users\Alexander\Downloads\05_RP_PVC_Muffenrohr (1).pdf 2021-04-12 18:17 - 2021-04-12 18:17 - 000806962 _____ C:\Users\Alexander\Downloads\04_RP_PVC_Fahrrohr.pdf 2021-04-12 18:17 - 2021-04-12 18:17 - 000716535 _____ C:\Users\Alexander\Downloads\05_RP_PVC_Muffenrohr.pdf 2021-04-12 18:17 - 2021-04-12 18:17 - 000663032 _____ C:\Users\Alexander\Downloads\06_RP_PVC_Muffen.pdf 2021-04-11 12:17 - 2021-04-11 12:17 - 000022976 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys ==================== Ein Monat (geänderte) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2021-05-11 10:05 - 2019-01-02 13:41 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free 2021-05-11 09:59 - 2017-10-25 14:39 - 000000000 ___RD C:\Users\Alexander\OneDrive 2021-05-11 09:52 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-05-11 09:41 - 2020-04-16 18:48 - 000000000 ____D C:\Users\Alexander\AppData\Local\WebEx 2021-05-11 09:31 - 2020-10-08 14:57 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2021-05-11 08:34 - 2019-10-03 22:32 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData 2021-05-10 21:08 - 2020-11-14 13:35 - 000000000 ____D C:\Users\Alexander\AppData\Local\CrashDumps 2021-05-10 16:11 - 2017-11-01 19:56 - 000000000 ____D C:\Program Files\Opera 2021-05-10 16:10 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF 2021-05-10 10:09 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2021-05-10 10:07 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2021-05-10 09:29 - 2020-07-07 11:34 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2021-05-10 09:29 - 2020-07-07 11:34 - 000002283 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk 2021-05-10 09:29 - 2020-07-07 11:34 - 000002283 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk 2021-05-07 09:18 - 2019-12-16 23:09 - 000000000 ___RD C:\Users\Alexander\Creative Cloud Files 2021-05-07 09:17 - 2017-11-08 19:58 - 000000000 ____D C:\Program Files\Common Files\Adobe 2021-05-07 09:17 - 2017-11-08 19:57 - 000000000 ____D C:\Program Files\Adobe 2021-05-07 09:17 - 2017-10-25 17:21 - 000000000 ____D C:\Program Files (x86)\Adobe 2021-05-07 09:14 - 2021-02-14 01:42 - 000000000 ___RD C:\Users\Alexander\iCloudDrive 2021-05-07 09:14 - 2018-02-12 19:38 - 000000000 ____D C:\Users\Alexander\AppData\LocalLow\Mozilla 2021-05-07 09:13 - 2019-02-05 15:55 - 000000000 ___RD C:\Users\Alexander\Google Drive 2021-05-07 09:12 - 2017-10-25 14:36 - 000000000 __SHD C:\Users\Alexander\IntelGraphicsProfiles 2021-05-06 00:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Registration 2021-05-05 21:57 - 2018-03-01 19:54 - 000000000 ____D C:\Users\Alexander\AppData\Local\PlaceholderTileLogoFolder 2021-05-05 21:56 - 2020-10-08 15:13 - 000004344 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA1d558491a577788 2021-05-05 21:56 - 2020-10-08 15:13 - 000004112 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore1d558491a4a8d18 2021-05-05 21:56 - 2019-08-21 19:51 - 000001254 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA1d558491a577788.job 2021-05-05 21:56 - 2019-08-21 19:51 - 000001250 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore1d558491a4a8d18.job 2021-05-05 09:40 - 2020-04-16 18:48 - 000000000 ____D C:\Users\Alexander\AppData\LocalLow\WebEx 2021-05-05 08:25 - 2020-10-08 15:08 - 001723002 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2021-05-05 08:25 - 2019-12-07 16:50 - 000746440 _____ C:\WINDOWS\system32\perfh007.dat 2021-05-05 08:25 - 2019-12-07 16:50 - 000150810 _____ C:\WINDOWS\system32\perfc007.dat 2021-05-05 08:01 - 2020-12-08 16:58 - 000000000 ___HD C:\adobeTemp 2021-05-04 01:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2021-05-04 00:40 - 2021-02-05 12:34 - 000000000 ____D C:\Users\Alexander\Documents\VW Backup 2021-05-03 23:50 - 2017-10-25 17:12 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2021-04-30 08:48 - 2018-06-28 21:34 - 000000000 ____D C:\Program Files (x86)\Dropbox 2021-04-28 23:19 - 2017-11-20 13:33 - 000000000 ____D C:\Users\Alexander\AppData\Local\Packages 2021-04-27 09:06 - 2018-02-12 19:37 - 000002300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2021-04-25 15:59 - 2020-10-08 23:12 - 000003606 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d69d73ac60587a 2021-04-25 15:59 - 2020-10-08 15:13 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2021-04-23 03:17 - 2021-02-27 05:18 - 000000000 ____D C:\Users\Alexander\Zotero 2021-04-22 06:04 - 2018-06-28 21:37 - 000000000 ____D C:\Users\Alexander\Dropbox 2021-04-21 17:06 - 2020-09-30 21:31 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools 2021-04-21 10:48 - 2018-05-12 19:04 - 000001285 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2021-04-21 10:48 - 2018-02-12 19:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2021-04-20 21:14 - 2020-10-08 15:13 - 000003630 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2021-04-20 21:14 - 2020-10-08 15:13 - 000003506 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2021-04-20 12:18 - 2017-10-25 14:36 - 000000000 ____D C:\Users\Alexander\AppData\Roaming\Adobe 2021-04-20 10:23 - 2019-02-20 22:13 - 000000000 ____D C:\ProgramData\Mozilla 2021-04-20 10:18 - 2021-03-29 11:21 - 000000000 ____D C:\Program Files\Mozilla Firefox 2021-04-20 10:03 - 2021-03-03 11:13 - 000008192 ___SH C:\DumpStack.log.tmp 2021-04-20 10:03 - 2020-10-08 15:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2021-04-20 10:03 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState 2021-04-20 10:03 - 2017-10-03 08:03 - 000000000 ____D C:\Intel 2021-04-20 03:46 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI 2021-04-20 03:45 - 2021-03-03 11:13 - 000671504 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2021-04-20 03:45 - 2021-02-27 05:16 - 000000000 ____D C:\Program Files (x86)\Zotero 2021-04-20 03:45 - 2019-12-07 11:03 - 000065536 _____ C:\WINDOWS\system32\config\ELAM 2021-04-20 03:44 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2021-04-20 03:44 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2021-04-20 03:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources 2021-04-20 03:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup 2021-04-20 03:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2021-04-20 03:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV 2021-04-20 03:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT 2021-04-20 03:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE 2021-04-20 03:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX 2021-04-20 03:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning 2021-04-20 03:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2021-04-20 03:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2021-04-19 20:05 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2021-04-19 20:03 - 2020-10-08 14:58 - 002877440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2021-04-19 19:57 - 2017-10-30 15:39 - 000000000 ____D C:\WINDOWS\system32\MRT 2021-04-19 19:55 - 2017-10-30 15:39 - 131963968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2021-04-16 18:47 - 2019-12-08 14:42 - 000000000 ____D C:\Users\Alexander\Documents\SRL 2021-04-16 15:55 - 2020-09-18 17:22 - 000000000 ____D C:\Users\Alexander\Documents\HydroTower 2021-04-16 00:38 - 2018-12-25 17:13 - 000000000 ____D C:\Program Files (x86)\Steam 2021-04-15 23:24 - 2020-03-15 21:41 - 000000000 ____D C:\Users\Alexander\AppData\Roaming\discord 2021-04-13 17:35 - 2018-02-12 19:37 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2021-04-13 17:04 - 2017-11-19 19:24 - 000000000 ____D C:\Users\Alexander\Documents\Textures 2021-04-13 16:54 - 2017-10-25 14:52 - 000000000 ____D C:\Users\Alexander\AppData\Local\Comms 2021-04-13 01:33 - 2020-10-08 15:00 - 000000000 ____D C:\Users\Alexander 2021-04-13 00:50 - 2020-11-25 17:08 - 000000000 ____D C:\Users\Alexander\AppData\Roaming\Apple Computer 2021-04-12 20:15 - 2018-05-31 21:40 - 000000000 ____D C:\Users\Alexander\AppData\Local\D3DSCache ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======== 2020-01-09 18:45 - 2020-01-09 18:45 - 000000033 _____ () C:\Users\Alexander\AppData\Roaming\AdobeWLCMCache.dat 2018-06-24 13:49 - 2020-10-16 13:37 - 000000028 _____ () C:\Users\Alexander\AppData\Roaming\kulerdata.json 2020-10-05 13:18 - 2021-02-14 20:20 - 000001456 _____ () C:\Users\Alexander\AppData\Local\Adobe Für Web speichern 13.0 Prefs 2018-10-02 08:25 - 2018-10-02 08:25 - 000000000 _____ () C:\Users\Alexander\AppData\Local\oobelibMkey.log 2017-11-01 20:40 - 2020-08-24 13:02 - 000007604 _____ () C:\Users\Alexander\AppData\Local\Resmon.ResmonCfg 2017-12-05 16:00 - 2021-02-03 16:26 - 000000287 _____ () C:\Users\Alexander\AppData\Local\VersionChecker_23.xml ==================== SigCheck ============================ (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) ==================== Ende von FRST.txt ======================== |
Themen zu Zip-Datei Word in E-Mail geöffnet |
antivirus, canon, computer, desktop, e-mail, fehler, fehlermeldung, firefox, forwarding, google, home, internet, mozilla, proxy, prozesse, realtek, registry, rundll, scan, security, software, suchmaschine, trojaner, usb, warnung, windows |