![]() |
|
Log-Analyse und Auswertung: Windows-Sicherheit findet aktive Bedrohung: Entfernung nicht möglichWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() ![]() | ![]() Windows-Sicherheit findet aktive Bedrohung: Entfernung nicht möglich Hallo zusammen, gestern bemerkte ich im Systemtray eine Warnung durch die "Windows-Sicherheit", dass "Maßnahmen erforderlich" seien. Unter den Details im Schutzverlauf stehen u.a. folgende Hinweise: "Status: Aktiv" "Aktive Bedrohungen wurden nicht behoben und werden auf Ihrem Gerät ausgeführt." Die Aktionen "Quarantäne" und "Entfernen" bleiben wirkungslos, wenn ich versuche, sie auszuführen. Nach einem Blick in die Addition.txt vermute ich, dass die Quelle des Problems irgendeine Junkmail ist, von denen Thunderbird jeden Tag etliche in den Junkordner filtert, und die sich hier irgendwie Bahn gebrochen hat. Ab jetzt halte ich mich aber mit Vermutungen zurück und würde mich über entspr. Hilfestellung sehr freuen. Vielen Dank Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 27.01.2024 01 durchgeführt von ***** (Administrator) auf LAPTOP-***** (LENOVO 20L7001NGE) (31-01-2024 15:02:37) Gestartet von C:\Users\*****\Desktop\FRST64.exe Geladene Profile: ***** Plattform: Microsoft Windows 10 Pro Version 22H2 19045.3930 (X64) Sprache: Deutsch (Deutschland) Standard-Browser: "C:\Program Files (x86)\Mozilla Firefox ESR\firefox.exe" -osint -url "%1" Start-Modus: Normal ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Adobe Inc. -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\acrotray.exe (C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.863.1\DropboxCrashHandler.exe (C:\Program Files\EaseUS\EaseUS Partition Master\DiskHealth\DiskHealth.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) C:\Program Files\EaseUS\EaseUS Partition Master\DiskHealth\AliyunWrapExe.exe (C:\Program Files\Elantech\ETDCtrl.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (C:\Program Files\Elantech\ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (C:\Program Files\Lenovo\Lenovo Mouse Suite\ICO.exe ->) () [Datei ist nicht signiert] C:\Program Files\Lenovo\Lenovo Mouse Suite\FSRremoS.EXE (C:\Program Files\Lenovo\Lenovo Mouse Suite\ICO.exe ->) (Primax Electronics Ltd.) [Datei ist nicht signiert] C:\Program Files\Lenovo\Lenovo Mouse Suite\PELMICED.EXE (C:\Program Files\Lenovo\Lenovo Mouse Suite\PelService.exe ->) () [Datei ist nicht signiert] C:\Program Files\Lenovo\Lenovo Mouse Suite\PelElvDm.exe (C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (C:\Program Files\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Program Files\Opera\106.0.4998.66\opera_crashreporter.exe (C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <4> (C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (C:\Program Files\Tablet\Pen\WacomHost.exe ->) (Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (C:\Program Files\Tablet\Pen\WTabletServiceCon.exe ->) (Wacom Technology Corp. -> Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe (C:\Program Files\Tablet\Pen\WTabletServiceCon.exe ->) (Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe (C:\Program Files\Tablet\Pen\WTabletServiceCon.exe ->) (Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe (C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe (C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe <2> (CHENGDU YIWO Tech Development Co., Ltd. -> ) C:\Program Files (x86)\EaseUS\ENS\SpaceRecall\EaseUSStartHelper.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) C:\Program Files (x86)\EaseUS\ENS\SpaceRecall\SpacePop.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) C:\Program Files\EaseUS\EaseUS Partition Master\DiskHealth\DiskHealth.exe (DriverStore\FileRepository\cui_dch.inf_amd64_14ddcd953a744ac8\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_14ddcd953a744ac8\igfxEM.exe (DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\tphkload.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\System32\DriverStore\FileRepository\FNCC3C~1.INF\driver\shtctky.exe (DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\tphkload.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\System32\DriverStore\FileRepository\FNCC3C~1.INF\driver\tposd.exe (explorer.exe ->) (6099D0EF-9374-47ED-BDFE-A82136831235 -> File-New-Project) C:\Program Files\WindowsApps\40459File-New-Project.EarTrumpet_2.3.0.0_x86__1sdd7yawvg6ne\EarTrumpet\EarTrumpet.exe (explorer.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5287.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5> (explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (explorer.exe ->) (Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox ESR\firefox.exe (explorer.exe ->) (Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe <2> (explorer.exe ->) (Open Source Developer, Robin Krom -> Greenshot) C:\Program Files\Greenshot\Greenshot.exe (explorer.exe ->) (Primax Electronics Ltd.) [Datei ist nicht signiert] C:\Program Files\Lenovo\Lenovo Mouse Suite\ICO.exe (explorer.exe ->) (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIMGE.EXE (Key for TBT Legacy Driver -> Intel Corporation) C:\Program Files (x86)\Intel\Thunderbolt Software\Thunderbolt.exe (NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (Opera Norway AS -> Opera Software) C:\Program Files\Opera\opera.exe <16> (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe (services.exe ->) () [Datei ist nicht signiert] C:\Program Files (x86)\avmwlanstick\AvmSwitchUsb.exe (services.exe ->) () [Datei ist nicht signiert] C:\Program Files\Lenovo\Lenovo Mouse Suite\PelService.exe (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (services.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) C:\Program Files (x86)\EaseUS\ENS\ensserver.exe (services.exe ->) (Code Sector -> Code Sector) C:\Program Files\TeraCopy\TeraCopyService.exe (services.exe ->) (DEVGURU Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe (services.exe ->) (Digital Wave Ltd -> Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe (services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe (services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe (services.exe ->) (Fibocom Wireless Inc. -> TODO: <公司名>) C:\Windows\Firmware\FwUpdatebin\FWUpdateService.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_14ddcd953a744ac8\igfxCUIService.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_021eceaa8ff1503d\OneApp.IGCC.WinService.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a1e7755eb10c8b98\IntelCpHDCPSvc.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a1e7755eb10c8b98\IntelCpHeciSvc.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_d372a4ea3b959b1c\aesm_service.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe (services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (services.exe ->) (Key for TBT Legacy Driver -> Intel Corporation) C:\Program Files (x86)\Intel\Thunderbolt Software\tbtsvc.exe (services.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\System32\DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\tphkload.exe (services.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\SysWOW64\Lenovo\PowerMgr\EasyResume.exe (services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\LenovoVantageService.exe (services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_7b52940a5893ba07\x64\ibmpmsvc.exe (services.exe ->) (Lenovo -> Lenovo.) C:\Windows\System32\ApsInsSvc.exe (services.exe ->) (Lenovo -> Lenovo.) C:\Windows\System32\DriverStore\FileRepository\litsdrv.inf_amd64_4eda545e0ed970d1\LITSSvc.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2> (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (services.exe ->) (SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe (services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (services.exe ->) (Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe (svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2401.5.0_x64__cv1g1gvanyjgm\WhatsApp.exe (svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (svchost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5287.0_x64__8j3eq9eme6ctt\IGCC.exe (svchost.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_14ddcd953a744ac8\igfxext.exe (svchost.exe ->) (Lenovo -> Lenovo) C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2311.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek semiconductor) C:\Windows\RTFTrack.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe ==================== Registry (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [4377176 2017-10-24] (Synaptics Incorporated -> Synaptics Incorporated) HKLM\...\Run: [Daemon for Mouse Suite] => C:\Program Files\Lenovo\Lenovo Mouse Suite\ICO.EXE [87040 2013-09-17] (Primax Electronics Ltd.) [Datei ist nicht signiert] HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [527792 2017-08-09] (Open Source Developer, Robin Krom -> Greenshot) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4096992 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [298296 2018-07-06] (Apple Inc. -> Apple Inc.) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech) HKLM\...\Run: [RTKUGUI] => "C:\WINDOWS\system32\RtkUGui64.exe" -s (Keine Datei) HKLM\...\Run: [Cm108Sound] => C:\WINDOWS\syswow64\RunDll32.exe C:\WINDOWS\Syswow64\cm108.dll,CMICtrlWnd [12935168 2013-08-02] (C-Media Corporation) [Datei ist nicht signiert] HKLM\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3293072 2023-10-12] (Open Source Developer, Dominik Reichl -> Dominik Reichl) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\Acrotray.exe [2192592 2022-07-29] (Adobe Inc. -> Adobe Systems Inc.) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11551456 2024-01-23] (Dropbox, Inc -> Dropbox, Inc.) HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [670856 2020-02-03] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [896136 2020-02-03] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.) [Datei ist nicht signiert] HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.) [Datei ist nicht signiert] HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [711288 2023-01-09] (Oracle America, Inc. -> Oracle Corporation) HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files\Opera\assistant\browser_assistant.exe [3746208 2023-12-19] (Opera Norway AS -> Opera Software) HKU\S-1-5-21-3310186217-59780300-2360943929-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\AdobeCollabSync.exe [889032 2022-07-29] (Adobe Inc. -> Adobe Systems Incorporated) HKU\S-1-5-21-3310186217-59780300-2360943929-1001\...\Run: [Spotify] => C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe [23220456 2021-03-30] (Spotify AB -> Spotify Ltd) HKU\S-1-5-21-3310186217-59780300-2360943929-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [90952552 2020-11-12] (Skype Software Sarl -> Skype Technologies S.A.) HKU\S-1-5-21-3310186217-59780300-2360943929-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\*****\AppData\Local\WebEx\WebexHost.exe [7755192 2022-05-27] (Cisco WebEx LLC -> Cisco Webex LLC) HKU\S-1-5-21-3310186217-59780300-2360943929-1001\...\Run: [EPSDNMON] => "" (Keine Datei) HKU\S-1-5-21-3310186217-59780300-2360943929-1001\...\Run: [EPLTarget\P0000000000000002] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIMGE.EXE [298560 2014-03-20] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) HKU\S-1-5-21-3310186217-59780300-2360943929-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIMGE.EXE [298560 2014-03-20] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) HKU\S-1-5-21-3310186217-59780300-2360943929-1001\...\Run: [MicrosoftEdgeAutoLaunch_ED43EE0B1F6253A827B32F67F6B676D7] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3788224 2024-01-25] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [65192 2021-12-23] (Adobe Inc. -> Adobe Systems Inc) HKLM\...\Print\Monitors\Brother PT-D600 Monitor: C:\WINDOWS\system32\BSPD60L6.DLL [80896 2014-07-30] (Microsoft Windows Hardware Compatibility Publisher -> Brother Industries, Ltd.) HKLM\...\Print\Monitors\EPSON Universal Print Driver 64MonitorBE: C:\WINDOWS\system32\E_2LM0DE.DLL [184832 2017-07-14] (Seiko Epson Corporation) [Datei ist nicht signiert] HKLM\...\Print\Monitors\EPSON WF-5690 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBKNE.DLL [179712 2013-10-22] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) HKLM\...\Print\Monitors\EPSON WF-6590 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBMGE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\121.0.6167.139\Installer\chrmstp.exe [2024-01-30] (Google LLC -> Google LLC) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firefox ESR.lnk [2018-05-21] ShortcutTarget: Firefox ESR.lnk -> C:\Program Files (x86)\Mozilla Firefox ESR\firefox.exe (Mozilla Corporation -> Mozilla Corporation) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Opera-Browser.lnk [2023-03-20] ShortcutTarget: Opera-Browser.lnk -> C:\Program Files\Opera\launcher.exe (Opera Norway AS -> Opera Software) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RSSOwlnix.lnk [2020-07-07] ShortcutTarget: RSSOwlnix.lnk -> C:\Program Files (x86)\RSSOwlnix\RSSOwlnix.exe () [Datei ist nicht signiert] Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Thunderbird.lnk [2019-04-07] ShortcutTarget: Thunderbird.lnk -> C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation -> Mozilla Corporation) GroupPolicy: Beschränkung - Edge <==== ACHTUNG GroupPolicy\User: Beschränkung ? <==== ACHTUNG Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {427905E7-3F01-4B70-91C4-DEAFD73D3DE0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1566200 2023-09-20] (Adobe Inc. -> Adobe Inc.) Task: {48C055CA-7E29-48E0-884C-6F8864EBA137} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4096992 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {4BEF55AC-6642-419A-866A-7ECB5BB1017B} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [4434400 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {FDC33951-505B-449F-B98B-F4F25D068384} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2018-01-08] (Apple Inc. -> Apple Inc.) Task: {9C7FA4BA-B687-436D-9F75-45D6A13CA8C1} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (Keine Datei) Task: {FB787F2A-A92E-43D6-87EE-FA1C03737D8E} - System32\Tasks\DiskHealth => C:\Program Files\EaseUS\EaseUS Partition Master\DiskHealth\DiskHealthAuto.exe [101384 2023-12-13] (CHENGDU YIWO Tech Development Co., Ltd. -> ) Task: {ABDCCA4C-CB4C-4C3A-993E-891A88F1F066} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) Task: {E11D3D3C-8F7B-44BC-BCF3-489865418A2A} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) Task: {1E2CF83F-3E58-4B49-9139-43A053B2ED85} - System32\Tasks\EPSON WF-5690 Series Invitation {087D4A83-2071-4605-82EC-041C159B42D7} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKNE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) Task: {3C8238E9-47F4-42BE-AE5D-8FEDAD247353} - System32\Tasks\EPSON WF-5690 Series Update {087D4A83-2071-4605-82EC-041C159B42D7} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKNE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) Task: {D44391AA-1A74-4557-9FCA-D61DA90AE814} - System32\Tasks\EPSON WF-6590 Series Update {A286F309-44B9-4BB3-9C0C-15F78BC74E04} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMGE.EXE [690536 2013-11-22] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) Task: {B281D198-DBCE-456B-A5F3-9723E36AF3D6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-11-02] (Google Inc -> Google Inc.) Task: {F2DEA07B-5ECA-4FCE-9739-97C4AD514F94} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-11-02] (Google Inc -> Google Inc.) Task: {37842AE0-CAAF-4B56-8D3B-07888BD9350C} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [227888 2019-10-02] (Key for TBT Legacy Driver -> Intel Corporation) Task: {3A98E592-63DE-46DA-95EB-076B697EF023} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on switch user if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [227888 2019-10-02] (Key for TBT Legacy Driver -> Intel Corporation) Task: {ABFA0351-427E-4B80-AF4D-03227C87A968} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [227888 2019-10-02] (Key for TBT Legacy Driver -> Intel Corporation) Task: {EC128A7D-5EAB-4E8D-BF50-836B8378387D} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\tbtsvc.exe [2311216 2019-10-02] (Key for TBT Legacy Driver -> Intel Corporation) Task: {2DD373AD-EBAC-4C81-A2EA-496D70EC4998} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => C:\WINDOWS\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> start ThunderboltService Task: {FB2F4325-266E-43C5-B779-B2082EDEA639} - System32\Tasks\Lenovo Power Management Driver PnP Task => C:\WINDOWS\System32\ibmpmsvc.exe -PnPTask (Keine Datei) Task: {BD376ECD-5A7B-493B-B56A-16769573EF59} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [74952 2022-11-20] (Lenovo -> Lenovo Group Ltd.) Task: {7D58E31D-51E4-443B-9DC6-06272B21FBB3} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\WINDOWS\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService Task: {67853A4F-B838-40B2-9A76-BD476D34475A} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\WINDOWS\System32\reg.exe [77312 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32 Task: {79E09A7D-CA72-4DE4-A68F-9478D343EDAB} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\2fb0bcd3-89ae-48f2-8e9a-79e548e72339 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.) Task: {8CF51221-ACC5-4854-900F-D44AD5E5B911} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\4a79915c-714b-4180-8c09-24069933e764 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.) Task: {1FC688B3-7DEB-43F1-8F99-A638A177E9E3} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\98c408ea-5434-4f01-bf9d-291de908f802 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.) Task: {44C96529-A374-4655-8968-4207FD4C470E} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\e4ad96d5-6043-4afb-942b-46e9b36e935c => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.) Task: {EC74D4CF-93D6-472E-9EC7-E869013FA2DE} - System32\Tasks\Lenovo\Lenovo ITS PnP Task => C:\WINDOWS\System32\LITSSvc.exe [1260488 2023-01-17] (Lenovo -> Lenovo.) Task: {F85C9788-7161-4471-A6C7-8A7B6295959F} - System32\Tasks\Lenovo\Lenovo ITS Task => C:\WINDOWS\System32\LITSSvc.exe [1260488 2023-01-17] (Lenovo -> Lenovo.) Task: {6115A8F1-8944-4925-97C5-E4E4E50207E5} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-3310186217-59780300-2360943929-1001 => C:\Users\*****\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [89096 2023-04-10] (Lenovo (Beijing) Limited -> Lenovo Group Limited) Task: {DCFE1D5A-185D-4001-A0DC-BCCE57E4468D} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe [331544 2018-09-06] (Lenovo -> ) Task: {3706805F-A2E5-4431-8124-E5856E111B18} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [1321240 2018-09-06] (Lenovo -> Lenovo) Task: {8496A188-FF83-41FD-94FA-6728ED56BD72} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [10920216 2018-09-06] (Lenovo -> Lenovo) Task: {F5A8BB78-9154-4ECE-A9D1-E1857C3AB894} - System32\Tasks\Lenovo\Power Manager\Background monitor => C:\WINDOWS\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe [129016 2022-12-04] (Lenovo -> Lenovo) Task: {6A26D351-B031-45ED-B1CC-0035DCB52BD6} - System32\Tasks\Lenovo\Power Manager\Uninstall task => C:\WINDOWS\SysWOW64\PowerMgrInst.exe [65016 2022-12-04] (Lenovo -> ) Task: {D3CD2BEC-B597-454A-9875-82CA46A0AA3E} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService Task: {EDEC9AE4-23EC-4B21-98DE-0C1CC4C86484} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo) Task: {AADDF768-7629-40AA-AFDA-177E2F7A1A5F} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo) Task: {39BEFB56-4DAF-493F-88D1-E71F2D2A0436} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo) Task: {1F719657-CF65-4AE0-8852-8A2EBCCC53D3} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo) Task: {8DFF0EA1-7328-49ED-BFEE-AE9CEAD5A00B} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo) Task: {E89B5ADF-6BBE-46F6-9E4F-E78583E77E21} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo) Task: {A74069B3-79DE-42EE-9B10-637677BE22CD} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo) Task: {D8B420AC-D620-47B1-A989-76E5AE79364A} - System32\Tasks\Lenovo\Vantage\Schedule\NotificationCenter => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe NotificationCenter (Keine Datei) Task: {D1BDECCE-D228-4C1E-926C-8DB880F28800} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo) Task: {DBCD58C7-4471-4487-994B-68726035B7A3} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo) Task: {E208D4CF-660D-432A-9CFD-2B5F875CF3EF} - System32\Tasks\Lenovo\Vantage\Schedule\VantageTelemetryAddinTask => C:\Program Files (x86)\Lenovo\VantageService\3.6.15.0\ScheduleEventAction.exe VantageTelemetryAddinTask (Keine Datei) Task: {C74E43D6-B6E2-457E-BCF4-106515EDBCFB} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\uninstall.exe [311776 2023-11-16] (Lenovo -> Lenovo) Task: {01429CEA-954B-4BB5-A54D-7E719CC4D4B0} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28425192 2024-01-13] (Microsoft Corporation -> Microsoft Corporation) Task: {EB9A0C9A-2D6E-40D3-9271-5ACB8C5F0C36} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28425192 2024-01-13] (Microsoft Corporation -> Microsoft Corporation) Task: {B54784A8-9C2B-424F-9ADF-2A5286BD7132} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [218048 2024-01-13] (Microsoft Corporation -> Microsoft Corporation) Task: {D92F433C-E77C-400D-AF18-3EEC9D105674} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [218048 2024-01-13] (Microsoft Corporation -> Microsoft Corporation) Task: {0560649C-2DCC-4D6D-A81F-43755E7D5155} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {54AF5CEC-491F-4818-A8DD-9D85476D424A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {445C5C0E-3947-45DF-A192-7A65DB871F2D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {94FD38DE-FAA8-43D4-8F02-4BD0F744FAA7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {B062A87B-9FF5-42CD-BFE3-61571B122749} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34720 2024-01-28] (Mozilla Corporation -> Mozilla Foundation) Task: {B060B9C2-4C48-4A52-A55B-E93FF0310D55} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log Task: {5CF519B5-3ECE-4CEC-981B-BBA88238C345} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1542264 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) Task: {398B7260-BBB9-484C-89FC-282B158FF7E6} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [960632 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) Task: {8CCC0143-35BE-4040-B003-FB29424C5406} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [655480 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) Task: {B8549311-588A-40AA-BFF6-85C442FF7E20} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [655480 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) Task: {71195E17-DCE9-4D98-BC8F-2D1AF9EEA908} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436344 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) Task: {53929300-832B-40E0-9667-6C21B99B51C4} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728184 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) Task: {8884E41D-51C0-488E-A596-45A86309F464} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728184 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) Task: {5568F883-40CC-49EA-906B-1E69B7AD718F} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3310186217-59780300-2360943929-1002 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Keine Datei) Task: {EC1B0C85-A2D4-4099-978C-F8876B13447E} - System32\Tasks\Opera scheduled assistant Autoupdate 1582724004 => C:\Program Files\Opera\launcher.exe [2350496 2024-01-25] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Program Files\Opera\assistant" $(Arg0) Task: {D39D895A-37E6-4280-9735-4E0F27EC2D05} - System32\Tasks\Opera scheduled Autoupdate 1526947784 => C:\Program Files\Opera\launcher.exe [2350496 2024-01-25] (Opera Norway AS -> Opera Software) Task: {0BAAAC9F-9203-4776-BC27-37A38B3D2CBC} - System32\Tasks\RTFTrack => C:\WINDOWS\RTFTrack.exe [5463008 2017-10-15] (Realtek Semiconductor Corp. -> Realtek semiconductor) Task: {FD6EB42C-11EB-49C9-BC09-239549F5FEB1} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618912 2022-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {2D30A5A4-3AEC-4D43-B428-33B00CFC98AA} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618912 2022-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {E9356DCB-B563-436C-87C0-723A99831CDC} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618912 2022-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {25638F7F-5B29-419D-A2E7-7400A3F840FA} - System32\Tasks\RtsCM => C:\WINDOWS\RtsCM64.exe [225248 2017-10-15] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) Task: {1C9A2569-5573-438B-ABF8-2492D8086260} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904552 2023-08-15] (Lenovo -> ) Task: {37E6B52C-D1F6-4073-B737-C145B6373E91} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904552 2023-08-15] (Lenovo -> ) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\EPSON WF-5690 Series Invitation {087D4A83-2071-4605-82EC-041C159B42D7}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKNE.EXE Task: C:\WINDOWS\Tasks\EPSON WF-5690 Series Update {087D4A83-2071-4605-82EC-041C159B42D7}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKNE.EXE:/EXE:{087D4A83-2071-4605-82EC-041C159B42D7} /F:UpdateWORKGROUP\LAPTOP-*****$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi Task: C:\WINDOWS\Tasks\EPSON WF-6590 Series Update {A286F309-44B9-4BB3-9C0C-15F78BC74E04}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMGE.EXE:/EXE:{A286F309-44B9-4BB3-9C0C-15F78BC74E04} /F:UpdateWORKGROUP\LAPTOP-*****$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{1e2822e4-3935-451e-aca5-c2619b761f7e}: [DhcpNameServer] 150.213.1.3 Tcpip\..\Interfaces\{4ac4fb99-b2d9-4f4c-a6e6-4de8cccda416}: [DhcpNameServer] 172.20.10.1 Tcpip\..\Interfaces\{528a1544-a938-4cf2-a381-f09fb6c6e2ac}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{c990cb3a-14ce-466d-8404-21756b8a1b41}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{c990cb3a-14ce-466d-8404-21756b8a1b41}: [DhcpDomain] speedport.ip Tcpip\..\Interfaces\{c990cb3a-14ce-466d-8404-21756b8a1b41}\745727B656E63716C61647: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{c990cb3a-14ce-466d-8404-21756b8a1b41}\745727B656E63716C61647: [DhcpDomain] speedport.ip Tcpip\..\Interfaces\{c990cb3a-14ce-466d-8404-21756b8a1b41}\75C414E4D24443D455A4A4: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{c990cb3a-14ce-466d-8404-21756b8a1b41}\75C414E4D24443D455A4A4: [DhcpDomain] speedport.ip Tcpip\..\Interfaces\{dccad915-4ca9-4b40-b245-58c05bc85427}: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{dccad915-4ca9-4b40-b245-58c05bc85427}: [DhcpDomain] fritz.box Tcpip\..\Interfaces\{f75a989c-9b37-4b6c-8fbd-f3228e9b392d}: [DhcpNameServer] 192.168.2.1 HKU\S-1-5-21-3310186217-59780300-2360943929-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <==== ACHTUNG HKU\S-1-5-21-3310186217-59780300-2360943929-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <==== ACHTUNG Edge: ======= Edge DefaultProfile: Profile 1 Edge Profile: C:\Users\*****\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2024-01-31] Edge Extension: (Google Docs Offline) - C:\Users\*****\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-18] Edge Extension: (Edge relevant text changes) - C:\Users\*****\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] FireFox: ======== FF DefaultProfile: *****.default FF DownloadDir: C:\Dokumente und Einstellungen\*****\Desktop FF DownloadDir: C:\Users\*****\Desktop FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\*****.default [2024-01-31] FF user.js: detected! => C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\*****.default\user.js [2020-02-09] FF DownloadDir: C:\Dokumente und Einstellungen\*****\Desktop FF Homepage: Mozilla\Firefox\Profiles\*****.default -> hxxps://www.google.de/webhp?complete=0 FF NewTab: Mozilla\Firefox\Profiles\*****.default -> about:blank FF NetworkProxy: Mozilla\Firefox\Profiles\*****.default -> ftp", "216.244.71.143" FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\*****.chromium [2024-01-31] FF Homepage: Mozilla\Firefox\Profiles\*****.chromium -> about:blank FF NewTab: Mozilla\Firefox\Profiles\*****.chromium -> about:blank FF Session Restore: Mozilla\Firefox\Profiles\*****.chromium -> ist aktiviert. FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-05-01] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2019-08-06] [] [ist nicht signiert] FF Plugin: @java.com/DTPlugin,version=11.361.2 -> C:\Program Files\Java\jre1.8.0_361\bin\dtplugin\npDeployJava1.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.361.2 -> C:\Program Files\Java\jre1.8.0_361\bin\plugin2\npjp2.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom) [Datei ist nicht signiert] FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom) [Datei ist nicht signiert] FF Plugin-x32: @java.com/DTPlugin,version=11.202.2 -> C:\Program Files (x86)\Java\jre1.8.0_202\bin\dtplugin\npDeployJava1.dll [2023-05-12] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.202.2 -> C:\Program Files (x86)\Java\jre1.8.0_202\bin\plugin2\npjp2.dll [2023-05-12] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom) [Datei ist nicht signiert] FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\Air\nppdf32.dll [2022-07-29] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom) [Datei ist nicht signiert] FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\config-prefs.js [2018-08-18] Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default [2024-01-31] CHR DownloadDir: C:\Users\*****\Desktop CHR HomePage: Default -> hxxps://www.google.de/ CHR Extension: (Get cookies.txt LOCALLY) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\cclelndahbckbenkjhflpdbgdldlbecc [2024-01-08] CHR Extension: (Adobe Acrobat: Tools zum Bearbeiten, Konvertieren und Signieren von PDF-Dateien) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-12-15] CHR Extension: (Google Docs Offline) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-24] CHR Extension: (Chrome Audio Capture) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfokdmfpdnokpmpbjhjbcabgligoelgp [2023-10-05] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29] CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Guest Profile [2018-11-02] CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\System Profile [2018-11-02] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] Opera: ======= OPR DefaultProfile: Default ==================== Dienste (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-09-20] (Adobe Inc. -> Adobe Inc.) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [4555744 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated) S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-07-05] (Apple Inc. -> Apple Inc.) R2 ApsInsSvc; C:\WINDOWS\System32\ApsInsSvc.exe [150304 2017-08-21] (Lenovo -> Lenovo.) R2 AvmSwitchUsb; C:\Program Files (x86)\avmwlanstick\AVMSwitchUsb.exe [125440 2018-08-27] () [Datei ist nicht signiert] S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert] R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13777080 2024-01-13] (Microsoft Corporation -> Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2024-01-23] (Dropbox, Inc -> Dropbox, Inc.) R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [391656 2016-08-24] (Digital Wave Ltd -> Digital Wave Ltd.) R2 Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [189464 2020-06-02] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) R2 EaseUS UPDATE SERVICE; C:\Program Files (x86)\EaseUS\ENS\ensserver.exe [36872 2023-12-13] (CHENGDU YIWO Tech Development Co., Ltd. -> ) R3 EPMVssEaseusProvider; C:\WINDOWS\system32\dllhost.exe /Processid:{7332520F-9687-45F2-8D87-E188134B181A} [22384 2023-11-15] (Microsoft Windows -> Microsoft Corporation) R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (SEIKO EPSON Corporation -> Seiko Epson Corporation) R2 FirmwareUpdateService; C:\WINDOWS\Firmware\FwUpdatebin\FWUpdateService.exe [431176 2021-03-29] (Fibocom Wireless Inc. -> TODO: <公司名>) R2 IBMPMSVC; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_7b52940a5893ba07\x64\ibmpmsvc.exe [1031024 2023-06-20] (Lenovo -> Lenovo) R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.) R2 Lenovo Instant On; C:\WINDOWS\SysWOW64\Lenovo\PowerMgr\EasyResume.exe [2352344 2022-12-04] (Lenovo -> Lenovo Group Limited) R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\LenovoVantageService.exe [34168 2023-11-16] (Lenovo -> Lenovo) R2 LITSSVC; C:\WINDOWS\System32\DriverStore\FileRepository\litsdrv.inf_amd64_4eda545e0ed970d1\LITSSvc.exe [1083864 2023-10-02] (Lenovo -> Lenovo.) S2 LPlatSvc; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_7b52940a5893ba07\x64\LPlatSvc.exe [915824 2023-06-20] (Lenovo -> Lenovo) S3 LSC.Services.SystemService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [337688 2018-09-06] (Lenovo -> Lenovo) R2 PelService; C:\Program Files\Lenovo\Lenovo Mouse Suite\PelService.exe [178688 2012-03-13] () [Datei ist nicht signiert] S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [534472 2023-12-13] (Microsoft Windows Publisher -> Microsoft Corporation) R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2019-08-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [780328 2019-08-16] (DEVGURU Co., Ltd. -> DEVGURU Co., LTD.) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [15549240 2023-03-22] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) R2 TeraCopyService; C:\Program Files\TeraCopy\TeraCopyService.exe [110416 2017-05-05] (Code Sector -> Code Sector) R2 TPHKLOAD; C:\WINDOWS\System32\DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\TPHKLOAD.exe [473760 2021-10-22] (Lenovo -> Lenovo Group Limited) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 AKCCID; C:\WINDOWS\System32\drivers\AKCCID.sys [57280 2018-07-13] (Alcorlink Corp. -> Generic) S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2023-11-06] (CHENGDU AOMEI Tech Co., Ltd. -> ) S3 avmeject; C:\WINDOWS\System32\drivers\avmeject.sys [14120 2018-08-27] (AVM Computersysteme Vertriebs GmbH -> AVM Berlin) S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2021-09-15] (Microsoft Corporation) [Datei ist nicht signiert] S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [154112 2021-10-13] (Microsoft Corporation) [Datei ist nicht signiert] S3 btnetBUs; C:\WINDOWS\System32\Drivers\btnetBus.sys [34440 2009-08-26] (IVT SOFTWARE TECHNOLOGY Inc. -> ) S3 CYUSB3; C:\WINDOWS\System32\Drivers\CYUSB3.sys [91952 2018-11-16] (Cypress Semiconductor Corporation -> Cypress Semiconductor) S3 ddmdrv; C:\WINDOWS\system32\ddmdrv.sys [35760 2023-11-06] (CHENGDU AOMEI Tech Co., Ltd. -> ) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) S3 ebrntdrv; C:\WINDOWS\system32\ebrntdrv.sys [27728 2023-06-19] (Microsoft Windows Hardware Compatibility Publisher -> ) S3 epmdkdrv; C:\WINDOWS\system32\epmdkdrv.sys [27728 2022-12-29] (Microsoft Windows Hardware Compatibility Publisher -> ) R0 EPMVolFl; C:\WINDOWS\System32\drivers\EPMVolFl.sys [30136 2022-12-29] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Codename Longhorn DDK provider) R0 EUDCPEPM; C:\WINDOWS\System32\drivers\EUDCPEPM.sys [76344 2022-12-29] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) R1 EUEDKEPM; C:\WINDOWS\system32\drivers\EUEDKEPM.sys [24656 2022-12-29] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) S3 flashUsbWdf; C:\WINDOWS\System32\drivers\flashUsbWdf.sys [47784 2020-06-15] (Intel Corporation -> emsys Embedded Systems GmbH) R3 IBMPMDRV; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_7b52940a5893ba07\x64\ibmpmdrv.sys [56128 2023-06-20] (Lenovo -> Lenovo) R3 MpKsla7d2ec3b; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D050181B-B696-47EA-9018-FD732DC5AFAB}\MpKslDrv.sys [263560 2024-01-31] (Microsoft Windows -> Microsoft Corporation) S3 NPF; C:\WINDOWS\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.) R3 phidmice; C:\WINDOWS\system32\DRIVERS\phidmice.sys [34816 2013-03-26] (Microsoft Windows Hardware Compatibility Publisher -> TPMX Electronics Ltd.) R1 PMDRVS; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_7b52940a5893ba07\x64\pmdrvs.sys [41792 2023-06-20] (Lenovo -> Lenovo) R3 pmouself; C:\WINDOWS\system32\DRIVERS\pmouself.sys [23040 2013-03-26] (Microsoft Windows Hardware Compatibility Publisher -> TPMX Electronics Ltd.) R3 pvendrlf; C:\WINDOWS\system32\DRIVERS\pvendrlf.sys [12288 2013-03-26] (Microsoft Windows Hardware Compatibility Publisher -> TPMX Electronics Ltd.) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] (Empty Loop -> ) S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [24064 2023-10-11] (Microsoft Corporation) [Datei ist nicht signiert] S3 vl810filter; C:\WINDOWS\system32\DRIVERS\vl810filter.sys [17008 2011-11-17] (VIA Technologies Inc. -> VIA Labs, Inc.) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55856 2023-12-06] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation) S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [594304 2023-12-06] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-06] (Microsoft Windows -> Microsoft Corporation) S3 EuGdiDrv; \SystemRoot\system32\EuGdiDrv.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2024-01-31 15:02 - 2024-01-31 15:03 - 000155797 _____ C:\Users\*****\Desktop\FRST.txt 2024-01-31 14:24 - 2024-01-31 15:03 - 000000000 ____D C:\FRST 2024-01-31 14:18 - 2024-01-31 14:18 - 002389504 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe 2024-01-28 18:37 - 2024-01-29 06:54 - 000000000 ____D C:\Program Files\Mozilla Firefox 2024-01-28 13:32 - 2024-01-29 06:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2024-01-27 14:42 - 2024-01-27 14:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag 2024-01-23 21:32 - 2024-01-23 21:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2024-01-23 03:51 - 2024-01-23 03:51 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2024-01-12 23:09 - 2024-01-12 23:09 - 002097948 _____ C:\WINDOWS\Minidump\011224-14156-01.dmp 2024-01-11 22:41 - 2024-01-11 22:47 - 000001024 ____H C:\AMTAG.BIN 2024-01-11 22:41 - 2024-01-11 22:47 - 000000000 ____D C:\Program Files (x86)\AOMEI Partition Assistant 2024-01-11 22:41 - 2024-01-11 22:46 - 000001973 _____ C:\WINDOWS\GA_OF.dat 2024-01-11 22:41 - 2024-01-11 22:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant 2024-01-11 22:41 - 2024-01-11 22:41 - 000000000 ____D C:\ProgramData\AOMEIPA 2024-01-11 22:41 - 2023-11-06 15:29 - 002482672 _____ C:\WINDOWS\ampa.exe 2024-01-11 22:41 - 2023-11-06 15:29 - 001332728 _____ C:\WINDOWS\ddmmain.exe 2024-01-11 22:41 - 2023-11-06 15:29 - 000038320 _____ C:\WINDOWS\SysWOW64\ampa.sys 2024-01-11 22:41 - 2023-11-06 15:29 - 000038320 _____ C:\WINDOWS\system32\ampa.sys 2024-01-11 22:41 - 2023-11-06 15:29 - 000035760 _____ C:\WINDOWS\system32\ddmdrv.sys 2024-01-11 22:40 - 2024-01-11 22:41 - 000000000 ____D C:\ProgramData\AomeiBR 2024-01-11 22:39 - 2024-01-11 22:39 - 000003402 _____ C:\WINDOWS\system32\Tasks\DiskHealth 2024-01-11 22:36 - 2024-01-11 22:36 - 000000000 ____D C:\Users\*****\AppData\Local\DiskHealth 2024-01-11 22:25 - 2024-01-11 22:25 - 000000000 ____D C:\Users\*****\AppData\Local\EPMUI 2024-01-11 22:15 - 2024-01-11 22:15 - 000000000 ____D C:\Users\*****\AppData\Local\SpacePop 2024-01-11 22:15 - 2024-01-11 22:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 2024-01-11 22:15 - 2023-06-19 13:06 - 000163328 _____ C:\WINDOWS\system32\setupdrvx64.exe 2024-01-11 22:15 - 2023-06-19 13:06 - 000000010 _____ C:\WINDOWS\system32\setupdrv.ini 2024-01-11 22:14 - 2023-12-13 02:01 - 006031880 _____ C:\WINDOWS\system32\BootMan.exe 2024-01-11 22:14 - 2023-12-13 02:01 - 000022024 _____ C:\WINDOWS\system32\EuEpmGdi.dll 2024-01-11 22:14 - 2022-12-29 13:34 - 000174216 _____ C:\WINDOWS\system32\setupepmdrvx64.exe 2024-01-11 22:14 - 2022-12-29 13:34 - 000030136 _____ (Windows (R) Codename Longhorn DDK provider) C:\WINDOWS\system32\Drivers\EPMVolFl.sys 2024-01-11 22:14 - 2022-12-29 13:34 - 000000057 _____ C:\WINDOWS\system32\setupepmdrv.ini 2024-01-11 03:58 - 2024-01-11 03:58 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom 2024-01-11 03:53 - 2024-01-11 03:53 - 000000000 ____D C:\Users\*****\AppData\Local\DropboxUpdate 2024-01-10 17:09 - 2024-01-10 17:11 - 000000000 ___HD C:\$WinREAgent 2024-01-01 12:50 - 2023-11-01 11:05 - 003147880 _____ (Intel Corporation) C:\WINDOWS\system32\qve.signed.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 003041888 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_dcap_quoteverify.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 002533584 _____ (Intel Corporation) C:\WINDOWS\system32\qe3.signed.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 001618128 _____ (Intel Corporation) C:\WINDOWS\system32\pce.signed.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000805072 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_quote_ex.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000805072 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_epid.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000800464 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_launch.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000693864 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_quote_ex.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000693856 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_epid.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000688224 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_launch.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000177872 _____ (Intel Corporation) C:\WINDOWS\system32\id_enclave.signed.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000174688 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_dcap_ql.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000131280 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_urts.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000107624 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_urts.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000075984 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_enclave_common.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000060512 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_enclave_common.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000059600 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_platform.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000048736 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_platform.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000043728 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_uae_service.dll 2024-01-01 12:50 - 2023-11-01 11:05 - 000037992 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_uae_service.dll ==================== Ein Monat (geänderte) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2024-01-31 15:03 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Registration 2024-01-31 15:03 - 2019-10-04 10:56 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData 2024-01-31 15:01 - 2021-12-18 01:26 - 000000000 ____D C:\WINDOWS\SystemTemp 2024-01-31 15:01 - 2018-11-02 19:43 - 000000000 ____D C:\Program Files (x86)\Google 2024-01-31 15:01 - 2018-05-31 17:04 - 000000000 ____D C:\Users\*****\Desktop\screenshots 2024-01-31 14:59 - 2020-11-02 10:07 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2024-01-31 14:59 - 2020-11-02 09:58 - 000008192 ___SH C:\DumpStack.log.tmp 2024-01-31 14:59 - 2020-07-07 01:53 - 000000000 ____D C:\Program Files (x86)\RSSOwlnix 2024-01-31 14:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState 2024-01-31 14:59 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2024-01-31 14:59 - 2018-12-21 22:14 - 000000000 ____D C:\WINDOWS\Firmware 2024-01-31 14:59 - 2018-05-21 11:28 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2024-01-31 14:59 - 2018-05-20 19:27 - 000000000 ____D C:\Users\*****\AppData\LocalLow\Mozilla 2024-01-31 14:59 - 2018-05-20 19:09 - 000000000 ___HD C:\Intel 2024-01-31 14:59 - 2018-05-20 18:42 - 000000000 __SHD C:\Users\*****\IntelGraphicsProfiles 2024-01-31 14:59 - 2018-02-20 01:54 - 000000000 ____D C:\ProgramData\NVIDIA 2024-01-31 14:57 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2024-01-31 14:55 - 2022-09-11 17:22 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2024-01-31 14:03 - 2018-05-23 02:23 - 000000000 ____D C:\Users\*****\AppData\Roaming\KeePass 2024-01-31 13:38 - 2018-05-21 04:29 - 000000000 ____D C:\Users\*****\AppData\Local\JDownloader v2.0 2024-01-31 13:37 - 2018-05-21 02:09 - 000000000 ____D C:\Users\*****\AppData\Roaming\vlc 2024-01-31 12:47 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps 2024-01-31 12:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2024-01-31 12:42 - 2020-11-02 09:58 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2024-01-31 12:39 - 2020-11-02 10:10 - 002333496 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2024-01-31 12:39 - 2020-11-02 09:39 - 000479478 _____ C:\WINDOWS\system32\perfh011.dat 2024-01-31 12:39 - 2020-11-02 09:39 - 000133340 _____ C:\WINDOWS\system32\perfc011.dat 2024-01-31 12:39 - 2019-12-07 15:51 - 000746440 _____ C:\WINDOWS\system32\perfh007.dat 2024-01-31 12:39 - 2019-12-07 15:51 - 000150810 _____ C:\WINDOWS\system32\perfc007.dat 2024-01-31 12:39 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF 2024-01-31 05:30 - 2020-11-02 10:01 - 000000000 ____D C:\Users\***** 2024-01-31 00:52 - 2021-02-06 21:24 - 000000000 ____D C:\Users\*****\.rssowlnix-beta 2024-01-30 23:58 - 2018-11-02 19:43 - 000002300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2024-01-30 18:48 - 2018-12-06 21:11 - 000000000 ____D C:\Users\*****\AppData\Roaming\TeraCopy 2024-01-30 08:54 - 2018-05-22 01:09 - 000000000 ____D C:\Program Files\Opera 2024-01-29 18:00 - 2020-03-30 12:09 - 000000000 ____D C:\WINDOWS\TempInst 2024-01-29 10:04 - 2018-05-28 13:38 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Excel 2024-01-29 07:00 - 2020-11-02 10:07 - 000003980 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1526947784 2024-01-29 07:00 - 2018-05-22 01:09 - 000001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk 2024-01-29 06:54 - 2018-05-20 19:24 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2024-01-28 13:33 - 2018-05-21 01:56 - 000001285 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk 2024-01-28 03:07 - 2018-08-14 02:18 - 000000000 ____D C:\Users\*****\.mediathek3 2024-01-27 18:21 - 2018-05-21 01:47 - 000000000 ____D C:\Program Files (x86)\Mp3tag 2024-01-27 17:47 - 2018-05-21 12:41 - 000000000 ____D C:\Users\*****\AppData\Roaming\foobar2000 2024-01-27 16:56 - 2018-05-21 23:14 - 000000000 ____D C:\Users\*****\AppData\LocalLow\uTorrent 2024-01-27 16:56 - 2018-05-21 01:58 - 000000000 ____D C:\Users\*****\AppData\Roaming\uTorrent 2024-01-25 23:12 - 2020-06-21 12:06 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2024-01-25 10:40 - 2020-11-02 09:58 - 000442776 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2024-01-25 10:40 - 2018-05-21 01:23 - 000001250 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job 2024-01-25 10:40 - 2018-05-21 01:23 - 000001246 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job 2024-01-25 01:45 - 2020-11-02 10:07 - 000004310 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA 2024-01-25 01:45 - 2020-11-02 10:07 - 000004078 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore 2024-01-24 18:34 - 2019-07-08 11:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother P-touch 2024-01-24 18:34 - 2018-07-28 18:28 - 000000000 ____D C:\Program Files (x86)\Brother 2024-01-23 21:33 - 2018-05-21 01:23 - 000000000 ____D C:\Users\*****\AppData\Local\Dropbox 2024-01-23 21:32 - 2018-05-21 01:23 - 000000000 ____D C:\Program Files (x86)\Dropbox 2024-01-23 19:33 - 2018-05-21 15:16 - 000000000 ____D C:\Users\*****\AppData\Local\babl-0.1 2024-01-20 12:11 - 2018-05-21 01:24 - 000000000 ____D C:\Users\*****\AppData\Roaming\Dropbox 2024-01-18 20:52 - 2020-11-02 10:07 - 000003926 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2024-01-18 20:52 - 2020-11-02 10:07 - 000003802 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2024-01-16 18:28 - 2018-06-22 18:22 - 000000000 ____D C:\Users\*****\AppData\Roaming\dvdcss 2024-01-14 12:37 - 2018-05-20 19:32 - 000000000 ____D C:\Users\*****\AppData\Local\D3DSCache 2024-01-14 00:44 - 2018-05-21 02:50 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2024-01-12 23:09 - 2021-02-13 14:35 - 1736077220 _____ C:\WINDOWS\MEMORY.DMP 2024-01-12 23:09 - 2021-02-13 14:35 - 000000000 ____D C:\WINDOWS\Minidump 2024-01-12 06:57 - 2018-05-20 19:54 - 000918944 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2024-01-12 00:30 - 2019-10-05 17:10 - 000000000 ____D C:\Users\*****\AppData\Roaming\Telegram Desktop 2024-01-11 22:41 - 2022-03-09 19:38 - 000000000 ____D C:\ProgramData\boost_interprocess 2024-01-11 22:25 - 2022-09-19 21:26 - 000000000 ____D C:\Users\*****\AppData\Local\cache 2024-01-11 22:15 - 2022-11-17 19:35 - 000000000 ____D C:\Program Files\EaseUS 2024-01-11 05:21 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2024-01-11 05:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2024-01-11 05:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources 2024-01-11 05:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup 2024-01-11 05:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences 2024-01-11 05:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2024-01-11 03:58 - 2020-11-08 18:01 - 000000000 ____D C:\Users\*****\AppData\Roaming\Zoom 2024-01-10 18:00 - 2018-05-20 18:42 - 000000000 ____D C:\Users\*****\AppData\Local\Packages 2024-01-10 17:17 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2024-01-10 17:09 - 2018-05-20 19:53 - 000000000 ____D C:\WINDOWS\system32\MRT 2024-01-10 17:04 - 2018-05-20 19:53 - 189718008 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2024-01-03 05:14 - 2018-05-21 02:57 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Word 2024-01-02 04:03 - 2018-05-21 02:57 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Office ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======== 2019-06-04 14:06 - 2019-06-04 14:06 - 000027473 _____ () C:\Users\*****\AppData\Roaming\18b52c8c33e941e69e02382bd7ba3796 2019-06-04 14:06 - 2019-06-04 14:06 - 000008880 _____ () C:\Users\*****\AppData\Roaming\18b52c8c33e941e69e02382bd7ba3796thumb 2019-06-04 14:05 - 2019-06-04 14:05 - 000027473 _____ () C:\Users\*****\AppData\Roaming\1937ead3c1ae4aa38d5fa4bb517c0c53 2019-06-04 14:05 - 2019-06-04 14:05 - 000008880 _____ () C:\Users\*****\AppData\Roaming\1937ead3c1ae4aa38d5fa4bb517c0c53thumb 2019-06-04 14:05 - 2019-06-04 14:05 - 000027473 _____ () C:\Users\*****\AppData\Roaming\2afb04babe104db6b8dd084fbf3dd852 2019-06-04 14:05 - 2019-06-04 14:05 - 000008880 _____ () C:\Users\*****\AppData\Roaming\2afb04babe104db6b8dd084fbf3dd852thumb 2023-09-14 21:09 - 2023-09-14 21:09 - 000022283 _____ () C:\Users\*****\AppData\Roaming\2d962d3f5c76440e8a55d11dbc520be9 2023-09-14 21:09 - 2023-09-14 21:09 - 000007653 _____ () C:\Users\*****\AppData\Roaming\2d962d3f5c76440e8a55d11dbc520be9thumb 2019-06-04 14:05 - 2019-06-04 14:05 - 000027473 _____ () C:\Users\*****\AppData\Roaming\2d975a39a0974fb9bef95d0e662bb250 2019-06-04 14:05 - 2019-06-04 14:05 - 000008880 _____ () C:\Users\*****\AppData\Roaming\2d975a39a0974fb9bef95d0e662bb250thumb 2023-09-14 21:08 - 2023-09-14 21:08 - 000022283 _____ () C:\Users\*****\AppData\Roaming\2e4bc56671e047ffbd37cd4ad3985adc 2023-09-14 21:08 - 2023-09-14 21:08 - 000007653 _____ () C:\Users\*****\AppData\Roaming\2e4bc56671e047ffbd37cd4ad3985adcthumb 2023-09-14 21:08 - 2023-09-14 21:08 - 000022283 _____ () C:\Users\*****\AppData\Roaming\33146f83f68443c8b5d60f0c953bbe9e 2023-09-14 21:08 - 2023-09-14 21:08 - 000007653 _____ () C:\Users\*****\AppData\Roaming\33146f83f68443c8b5d60f0c953bbe9ethumb 2019-06-04 14:05 - 2019-06-04 14:05 - 000027473 _____ () C:\Users\*****\AppData\Roaming\443f3dc3d93a47698f55dc86b100ed46 2019-06-04 14:05 - 2019-06-04 14:05 - 000008880 _____ () C:\Users\*****\AppData\Roaming\443f3dc3d93a47698f55dc86b100ed46thumb 2019-06-04 14:05 - 2019-06-04 14:05 - 000027473 _____ () C:\Users\*****\AppData\Roaming\4c9a9f9e760f4ffea9f2027d41f87521 2019-06-04 14:05 - 2019-06-04 14:05 - 000008880 _____ () C:\Users\*****\AppData\Roaming\4c9a9f9e760f4ffea9f2027d41f87521thumb 2023-09-14 21:09 - 2023-09-14 21:09 - 000022283 _____ () C:\Users\*****\AppData\Roaming\55e5c567a4a04dd8b03c8ed0fad9b464 2023-09-14 21:09 - 2023-09-14 21:09 - 000007653 _____ () C:\Users\*****\AppData\Roaming\55e5c567a4a04dd8b03c8ed0fad9b464thumb 2023-09-14 21:08 - 2023-09-14 21:08 - 000022283 _____ () C:\Users\*****\AppData\Roaming\5c9e49123fc540d6a256686c6845f68e 2023-09-14 21:08 - 2023-09-14 21:08 - 000007653 _____ () C:\Users\*****\AppData\Roaming\5c9e49123fc540d6a256686c6845f68ethumb 2019-06-04 14:05 - 2019-06-04 14:05 - 000027473 _____ () C:\Users\*****\AppData\Roaming\67023b8f946a4266a84615dc85f55724 2019-06-04 14:05 - 2019-06-04 14:05 - 000008880 _____ () C:\Users\*****\AppData\Roaming\67023b8f946a4266a84615dc85f55724thumb 2023-09-14 21:08 - 2023-09-14 21:08 - 000022283 _____ () C:\Users\*****\AppData\Roaming\6e6892049ab74388a2c6a2760754e990 2023-09-14 21:08 - 2023-09-14 21:08 - 000007653 _____ () C:\Users\*****\AppData\Roaming\6e6892049ab74388a2c6a2760754e990thumb 2023-09-14 21:09 - 2023-09-14 21:09 - 000022283 _____ () C:\Users\*****\AppData\Roaming\76124928372f4e0dbe52f985b903f819 2023-09-14 21:09 - 2023-09-14 21:09 - 000007653 _____ () C:\Users\*****\AppData\Roaming\76124928372f4e0dbe52f985b903f819thumb 2019-06-04 14:05 - 2019-06-04 14:05 - 000027473 _____ () C:\Users\*****\AppData\Roaming\78349044210b4cb49814ed76fadcd405 2019-06-04 14:05 - 2019-06-04 14:05 - 000008880 _____ () C:\Users\*****\AppData\Roaming\78349044210b4cb49814ed76fadcd405thumb 2019-06-04 14:05 - 2019-06-04 14:05 - 000027473 _____ () C:\Users\*****\AppData\Roaming\a85ec1b879a24eda9ffafccbe8819de5 2019-06-04 14:05 - 2019-06-04 14:05 - 000008880 _____ () C:\Users\*****\AppData\Roaming\a85ec1b879a24eda9ffafccbe8819de5thumb 2023-09-14 21:09 - 2023-09-14 21:09 - 000022283 _____ () C:\Users\*****\AppData\Roaming\be18fe02f4d14c7d8f411c6e56bab15a 2023-09-14 21:09 - 2023-09-14 21:09 - 000007653 _____ () C:\Users\*****\AppData\Roaming\be18fe02f4d14c7d8f411c6e56bab15athumb 2023-09-14 21:08 - 2023-09-14 21:08 - 000022283 _____ () C:\Users\*****\AppData\Roaming\c1836377df384516b086f7e4acd55b42 2023-09-14 21:08 - 2023-09-14 21:08 - 000007653 _____ () C:\Users\*****\AppData\Roaming\c1836377df384516b086f7e4acd55b42thumb 2019-06-04 14:03 - 2019-06-04 14:03 - 000095085 _____ () C:\Users\*****\AppData\Roaming\DefaultAlbumArt.png 2019-06-04 14:03 - 2019-06-04 14:03 - 000165847 _____ () C:\Users\*****\AppData\Roaming\DefaultArtistArt.png 2019-06-04 14:03 - 2019-06-04 14:03 - 000164313 _____ () C:\Users\*****\AppData\Roaming\DefaultPlaylistArt.png 2019-06-04 14:03 - 2019-06-04 14:03 - 000095085 _____ () C:\Users\*****\AppData\Roaming\DefaultTrackArt.png 2023-09-14 21:09 - 2023-09-14 21:09 - 000022283 _____ () C:\Users\*****\AppData\Roaming\f7a4ca8f03164dafbaeaf2c80fc13516 2023-09-14 21:09 - 2023-09-14 21:09 - 000007653 _____ () C:\Users\*****\AppData\Roaming\f7a4ca8f03164dafbaeaf2c80fc13516thumb 2023-09-14 21:08 - 2023-09-14 21:08 - 000022283 _____ () C:\Users\*****\AppData\Roaming\f8d89b5e7bc34b66baba28c36394da86 2023-09-14 21:08 - 2023-09-14 21:08 - 000007653 _____ () C:\Users\*****\AppData\Roaming\f8d89b5e7bc34b66baba28c36394da86thumb 2019-06-04 14:05 - 2019-06-04 14:05 - 000027473 _____ () C:\Users\*****\AppData\Roaming\fbe6f7d189e544bb866d1a5da5bc1084 2019-06-04 14:05 - 2019-06-04 14:05 - 000008880 _____ () C:\Users\*****\AppData\Roaming\fbe6f7d189e544bb866d1a5da5bc1084thumb 2022-07-17 03:10 - 2022-07-17 03:10 - 000034402 _____ () C:\Users\*****\AppData\Local\78F57F57317C464dBA624E9E40DD03EC.volume-off.lbx 2018-09-28 16:11 - 2018-09-28 16:11 - 000000000 _____ () C:\Users\*****\AppData\Local\oobelibMkey.log 2023-12-14 14:54 - 2023-12-14 14:54 - 000009553 _____ () C:\Users\*****\AppData\Local\recently-used.xbel 2019-02-08 01:44 - 2023-07-14 20:43 - 000007596 _____ () C:\Users\*****\AppData\Local\Resmon.ResmonCfg ==================== SigCheck ============================ (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) ==================== Ende von FRST.txt ======================== |
Themen zu Windows-Sicherheit findet aktive Bedrohung: Entfernung nicht möglich |
adobe, bonjour, defender, desktop, einstellungen, entfernen, firefox, ftp, google, homepage, internet, internet explorer, mozilla, mp3, prozesse, realtek, registry, rundll, scan, services.exe, software, stick, svchost.exe, system, warnung |