Trojan:HTML/Phish!pz

Start::
SystemRestore: On 
CreateRestorePoint:
CloseProcesses:
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Keine Datei
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Keine Datei
C:\Program Files (x86)\Avira
AlternateDataStreams: C:\Windows:CM_5d9848b1d7b8407441bbf723a5393eaff7ba64965e0f0d8199430252761b7742 [74]
AlternateDataStreams: C:\Windows:CM_e2cfdb4b8b28ea71a62fbe22e654fe641d063e05163abbd48f92f7c50caaaa9d [74]
AlternateDataStreams: C:\Windows:CM_e6755cfed2f90244901ca1a42a4a5bf160f6929e29aec60edbe6324f8dd1dce6 [74]
AlternateDataStreams: C:\Windows:CM_ed5d26453aa57e0500ffe32ffd1b2f3c7bcd345bf76e5b37d24c906a5259abf5 [74]
HKU\S-1-5-21-1307044404-1397830751-1400323971-1001\...\Run: [vidnotifier.exe] => C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe (Keine Datei)
HKU\S-1-5-21-1307044404-1397830751-1400323971-1001\...\Run: [Opera Stable] => C:\Users\rudi1\AppData\Local\Programs\Opera\launcher.exe (Keine Datei)
HKU\S-1-5-21-1307044404-1397830751-1400323971-1001\...\Run: [MicrosoftEdgeAutoLaunch_293AA7D23F3243C993825FA9E28B2188] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854376 2024-01-17] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1307044404-1397830751-1400323971-1002\...\Run: [AviraBrowserAutoLaunch_8F29080FD0C4DE0D33133FEF95CA8A84] => "C:\Program Files\Avira\Browser\Application\AviraBrowser.exe" --check-run=src=logon --auto-launch-at-startup --profile-directory="Default" (Keine Datei)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
Task: {CEB515FA-71A5-471B-8C28-038E48097D96} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\3.6.15.0\ScheduleEventAction.exe  DailyTelemetryTransmission (Keine Datei)
Task: {0F175DA9-1802-4B11-9FCD-FC0B68417400} - System32\Tasks\Lenovo\Vantage\Schedule\VantageTelemetryAddinTask => C:\Program Files (x86)\Lenovo\VantageService\3.6.15.0\ScheduleEventAction.exe  VantageTelemetryAddinTask (Keine Datei)
Task: {3A326E02-D016-46AB-A3DE-46275D757B43} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe  (Keine Datei)
Task: {FDB348B9-6A13-4904-B26E-C4F49FB28A52} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe  /onlogon (Keine Datei)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Keine Datei)
Task: {F334CABB-5D9B-4D2A-AC16-783E566A25E3} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC RebootDialog (Keine Datei)
Task: {CC89BFC0-082C-4553-A980-3E48B2BB7CD4} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery RebootDialog (Keine Datei)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {7E1CA839-73A3-4EE0-BAEF-DF82A91EE4A6} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1307044404-1397830751-1400323971-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  /reporting (Keine Datei)
Task: {93EB3C06-9C42-44B2-8B13-EF3882C4174E} - System32\Tasks\Opera scheduled Autoupdate 1686995018 => C:\Users\rudi1\AppData\Local\Programs\Opera\launcher.exe  --scheduledautoupdate $(Arg0) (Keine Datei)
Task: {2D2C2B0F-5B52-4182-AD3E-CD4FB1CF2002} - System32\Tasks\Opera scheduled Autoupdate 1702988032 => C:\Users\rudi1\AppData\Local\Programs\Opera\launcher.exe  --scheduledautoupdate $(Arg0) (Keine Datei)
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge Extension: (Avira Safe Shopping) - C:\Users\rudi1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\caiblelclndcckfafdaggpephhgfpoip [2024-01-17]
Edge Extension: (Avira Password Manager) - C:\Users\rudi1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\emgfgdclgfeldebanedpihppahgngnle [2024-01-17]
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]
S2 ImControllerService; %SystemRoot%\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [X]
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
CMD: cscript /nologo %systemroot%\System32\slmgr.vbs /dlv
CMD: netsh winsock reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh winhttp reset proxy
CMD: Bitsadmin /Reset /Allusers
CMD: Winmgmt /salvagerepository 
CMD: Winmgmt /verifyrepository
CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R
CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R
CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R
CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R
CMD: vssadmin delete shadows /for=c: /all /quiet
CMD: vssadmin delete shadows /for=d: /all /quiet
Hosts:
RemoveProxy:
EmptyTemp:
End::