Hallo, ich habe das Problem, dass bei jedem PC-Neustart die Fehlermeldung "Seo Shell-Benachrichtigungssymbol kann nicht entfernt werden" angezeigt wird. Ich habe mir ein Programm über Chip.de herunterladen gehabt eventuell habe ich mir das Problem dadurch eingehandelt oder beim deinstallieren von Programmen.
Ich bedanke mich im voraus für eure Bemühungen.

LG
Kachmar

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 22-08.2024
durchgeführt von Kachm (Administrator) auf CAR-TRADE (HP HP Laptop 17-cp0xxx) (01-09-2024 10:19:14)
Gestartet von C:\Users\Kachm\OneDrive\Desktop\FRST64.exe
Geladene Profile: Kachm
Plattform: Microsoft Windows 11 Home Version 23H2 22631.4037 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser nicht gefunden!
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe ->) (Express Vpn LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\expressvpnd\expressvpnd.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.15.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.15.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Program Files\WindowsApps\MSTeams_24215.1007.3082.1590_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\128.0.2739.54\msedgewebview2.exe <13>
(C:\Users\Kachm\AppData\Local\Programs\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Kachm\AppData\Local\Programs\Opera\113.0.5230.47\opera_crashreporter.exe
(DriverStore\FileRepository\u0402279.inf_amd64_69a7d841d73a3298\B401510\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0402279.inf_amd64_69a7d841d73a3298\B401510\atieclxx.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc) C:\Program Files\WindowsApps\AD2F1837.myHP_36.52434.951.0_x64__v10z8vjag6ke6\win32\HP.ContextAware.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.15.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Kachm\AppData\Local\Programs\Opera\opera.exe <44>
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATISLE.EXE <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_24215.1007.3082.1590_x64__8wekyb3d8bbwe\ms-teams.exe <2>
(SECOMN64.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sound Research, Corp.) C:\Windows\System32\SECOCL64.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0402279.inf_amd64_69a7d841d73a3298\B401510\atiesrxx.exe
(services.exe ->) (Express Vpn LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCOMMRECOVERY\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_7dcf4ebd9d1b4772\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_1d957930b3685886\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_1d957930b3685886\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_1d957930b3685886\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_1d957930b3685886\x64\SysInfoCap.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncHelper.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkWiFiManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e4e95354d5d4b4dd\RtkAudUService64.exe <3>
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_36.52434.951.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(svchost.exe ->) (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) C:\Users\Kachm\AppData\Roaming\SEO\SEO.exe
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_36.52434.951.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (Express Vpn LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationService.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAUDIOSWITCH\HPAudioSwitch.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_524.18500.10.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.22621.4027_none_e971c41442bfbd4d\TiWorker.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e4e95354d5d4b4dd\RtkAudUService64.exe [1987544 2024-05-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [455968 2023-05-26] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [ExpressVPNNotificationService] => C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationServiceStarter.exe [465120 2020-08-20] (Express Vpn LLC -> ExpressVPN)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2753808 2024-03-06] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-4159054142-819946078-237485139-1001\...\Run: [MicrosoftEdgeAutoLaunch_35666411CBD4878C6E4E84356E5C70B2] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3741120 2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4159054142-819946078-237485139-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919200 2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4159054142-819946078-237485139-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISLE.EXE [421736 2021-11-11] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-4159054142-819946078-237485139-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISLE.EXE [421736 2021-11-11] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-4159054142-819946078-237485139-1001\...\Run: [Opera Browser Assistant] => C:\Users\Kachm\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3896224 2024-08-22] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-4159054142-819946078-237485139-1001\...\Run: [Opera Stable] => C:\Users\Kachm\AppData\Local\Programs\Opera\opera.exe [1386912 2024-08-29] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-4159054142-819946078-237485139-1001\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [539152 2024-06-30] (HP Inc. -> HP Inc.)
HKLM\...\Print\Monitors\EPSON ET-2750 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBSLE.DLL [184832 2017-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
Startup: C:\Users\Kachm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2024-07-30]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\Users\Kachm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SearchEngineOptimizer.lnk [2024-08-31] <==== ACHTUNG
ShortcutTarget: SearchEngineOptimizer.lnk -> C:\Users\Kachm\AppData\Roaming\SEO\SEO.exe (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) <==== ACHTUNG
HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {B440BFAC-E9BC-4FA5-B791-70EDEAD7F30F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1563080 2024-07-31] (Adobe Inc. -> Adobe Inc.)
Task: {931E9FD1-6053-4C30-B948-36459882A227} - System32\Tasks\EPSON ET-2750 Series Update {70550368-7EE2-4A2B-9538-E9FB2AE7DED3} => C:\Windows\System32\spool\drivers\x64\3\E_YTSSLE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {400295CF-6C15-4B25-8D20-EAB5C9B1FDC9} - System32\Tasks\EPSON ET-2750 Series Update {8CF7F67C-31E8-4B10-9EEE-CDFEF46F75F4} => C:\Windows\System32\spool\drivers\x64\3\E_YTSSLE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {A11D8A0B-ECE2-49BC-849A-04823D436CF1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [731152 2024-07-25] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {55949265-45DA-46E2-A37B-1EC466FCA99E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2024-07-25] (HP Inc. -> HP Inc.)
Task: {16EE9629-C28B-4189-A877-81FF6026C8DA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-07-25] (HP Inc. -> HP Inc.)
Task: {AB7C11A4-DCA2-4DDD-B7BB-54F16C0BD918} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-07-25] (HP Inc. -> HP Inc.)
Task: {72A98E4C-1B27-4C5F-AC1C-5E7739B74EE8} - System32\Tasks\HP\Consent Manager Launcher => C:\WINDOWS\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {F4A33774-B2FE-4F79-933F-44D23D6AA8CD} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1651032 2020-11-05] (HP Inc. -> HP Inc.)
Task: {6FF6D828-31B2-426B-A512-ED696A17094B} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21918696 2024-08-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {EFF9B16B-A8EE-4FA4-830F-D97FA430469B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21918696 2024-08-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {FACD1A32-F411-42CE-A600-381BEB480CB7} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141384 2024-08-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {AECAF83C-784F-4FD5-A927-B63DA81D6F04} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141384 2024-08-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Keine Datei)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {F03E9BBB-A08E-4433-8138-9EE5BAED8B06} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {72B33A73-5814-4725-B80A-78616797FE8C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DE533E57-59D0-4F96-90DB-7D90018643E4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9ACBF16B-EFB9-4ECB-8D39-DDE0EF820502} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4ED28106-31B3-44E4-B5EC-27FA0139540B} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {0EBFD358-5685-4F29-A6CD-B60750DFA105} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-4159054142-819946078-237485139-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {6D4C9FC7-27EB-416F-B3E3-80085C733FA7} - System32\Tasks\Opera scheduled assistant Autoupdate 1725113310 => C:\Users\Kachm\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5569440 2024-08-29] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Kachm\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {651D67B7-3F03-480B-9A82-27DBB955A997} - System32\Tasks\Opera scheduled Autoupdate 1725113308 => C:\Users\Kachm\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5569440 2024-08-29] (Opera Norway AS -> Opera Software)
Task: {1D74B7E9-E547-45F9-BAF6-DD57848A5CD7} - System32\Tasks\SEO => C:\Users\Kachm\AppData\Roaming\SEO\SEO.exe [11406432 2024-08-31] (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\EPSON ET-2750 Series Update {70550368-7EE2-4A2B-9538-E9FB2AE7DED3}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSLE.EXE:/EXE:{70550368-7EE2-4A2B-9538-E9FB2AE7DED3} /F:UpdateWORKGROUP\CAR-TRADE$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON ET-2750 Series Update {8CF7F67C-31E8-4B10-9EEE-CDFEF46F75F4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSLE.EXE:/EXE:{8CF7F67C-31E8-4B10-9EEE-CDFEF46F75F4} /F:UpdateWORKGROUP\CAR-TRADE$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{002d9b3e-147a-4a2e-ac1f-7166f2e2ed3e}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{002d9b3e-147a-4a2e-ac1f-7166f2e2ed3e}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{002d9b3e-147a-4a2e-ac1f-7166f2e2ed3e}\C456F6E626562776562702145747F6A756E6472757D60274D626F52374548545: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{002d9b3e-147a-4a2e-ac1f-7166f2e2ed3e}\C456F6E626562776562702145747F6A756E6472757D60274D626F52374548545: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{002d9b3e-147a-4a2e-ac1f-7166f2e2ed3e}\C456F6E626562776562702145747F6A756E6472757D60274D626F55374548545: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{002d9b3e-147a-4a2e-ac1f-7166f2e2ed3e}\C456F6E626562776562702145747F6A756E6472757D60274D626F55374548545: [DhcpDomain] fritz.box

Edge: 
=======
Edge Profile: C:\Users\Kachm\AppData\Local\Microsoft\Edge\User Data\Default [2024-09-01]
Edge Extension: (Google Docs Offline) - C:\Users\Kachm\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-06-23]
Edge Extension: (Edge relevant text changes) - C:\Users\Kachm\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-06-23]

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-07-30] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-08-23] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-07-30] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR HKU\S-1-5-21-4159054142-819946078-237485139-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

Opera: 
=======
OPR DefaultProfile: Default

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-07-31] (Adobe Inc. -> Adobe Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9202688 2024-08-01] (Microsoft Corporation -> Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [206304 2020-10-02] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 ExpressVPNService; C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe [437472 2020-08-20] (Express Vpn LLC -> ExpressVPN)
R3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncHelper.exe [3522976 2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [891256 2020-07-30] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_1d957930b3685886\x64\AppHelperCap.exe [928192 2024-07-18] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_1d957930b3685886\x64\DiagsCap.exe [926768 2024-07-18] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_1d957930b3685886\x64\NetworkCap.exe [922672 2024-07-18] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [241104 2024-08-06] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_1d957930b3685886\x64\SysInfoCap.exe [926248 2024-07-18] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_7dcf4ebd9d1b4772\x64\TouchpointAnalyticsClientService.exe [569008 2024-05-07] (HP Inc. -> HP Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe [1427024 2024-08-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.161.0811.0001\OneDriveUpdaterService.exe [3863568 2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
R2 RtkWiFiManServ; C:\WINDOWS\RtkWiFiManServ.exe [821608 2023-12-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R2 SECOMNService; C:\WINDOWS\System32\SECOMN64.exe [760776 2022-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Sound Research, Corp.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe [3199648 2024-08-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe [133704 2024-08-23] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AMDAfdAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\amdacpafd.inf_amd64_c2523568ee4598fc\amdacpafd.sys [436256 2024-01-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [56248 2024-04-22] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0402279.inf_amd64_69a7d841d73a3298\B401510\amdkmdag.sys [106583664 2024-04-22] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [55608 2023-06-27] (Apple Inc. -> Apple Inc.)
S3 AX88179; C:\WINDOWS\System32\DriverStore\FileRepository\netax88179_178a.inf_amd64_a8bb8a6e92764769\ax88179_178a.sys [79872 2022-05-07] (Microsoft Windows -> ASIX Electronics Corp.)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [106496 2022-05-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 dlcdcncm; C:\WINDOWS\System32\drivers\dlcdcncm660.sys [161632 2024-03-06] (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.)
S3 expressvpnsplittunnel; C:\Program Files (x86)\ExpressVPN\splittunnel\expressvpnsplittunnel.sys [37024 2020-08-20] (ExprsVPN LLC -> ExpressVPN)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [76832 2022-09-30] (Samsung Electronics CO., LTD. -> QUALCOMM Incorporated)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tapexpressvpn; C:\WINDOWS\System32\drivers\tapexpressvpn.sys [52904 2020-08-20] (ExprsVPN LLC -> The OpenVPN Project)
S3 UsbNcm; C:\WINDOWS\System32\drivers\UsbNcm.sys [167936 2024-07-04] (Microsoft Windows -> )
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22080 2024-08-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [602504 2024-08-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2024-08-23] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40200 2023-11-17] (HP Inc. -> HP)
U3 aspnet_state; kein ImagePath
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-09-01 10:46 - 2024-09-01 10:46 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2024-09-01 10:19 - 2024-09-01 10:19 - 000029992 _____ C:\Users\Kachm\OneDrive\Desktop\FRST.txt
2024-09-01 10:19 - 2024-09-01 10:19 - 000000000 ____D C:\FRST
2024-09-01 10:18 - 2024-09-01 10:18 - 002397184 _____ (Farbar) C:\Users\Kachm\OneDrive\Desktop\FRST64.exe
2024-09-01 10:10 - 2024-09-01 10:10 - 000722202 _____ C:\WINDOWS\system32\perfh007.dat
2024-09-01 10:10 - 2024-09-01 10:10 - 000149258 _____ C:\WINDOWS\system32\perfc007.dat
2024-08-31 16:08 - 2024-08-31 16:08 - 002086048 _____ () C:\Users\Kachm\Downloads\OperaSetup (1).exe
2024-08-31 16:08 - 2024-08-31 16:08 - 000004512 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1725113310
2024-08-31 16:08 - 2024-08-31 16:08 - 000004252 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1725113308
2024-08-31 16:08 - 2024-08-31 16:08 - 000001387 _____ C:\Users\Kachm\OneDrive\Desktop\Opera-Browser.lnk
2024-08-31 16:08 - 2024-08-31 16:08 - 000001387 _____ C:\Users\Kachm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2024-08-31 16:00 - 2024-08-31 16:00 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2024-08-31 15:55 - 2024-07-04 17:08 - 000002766 _____ C:\WINDOWS\system32\Tasks\HPAUDIOSWITCH
2024-08-31 15:54 - 2024-08-31 15:55 - 000000000 ____D C:\AdwCleaner
2024-08-31 15:54 - 2024-08-31 15:54 - 008790880 _____ (Malwarebytes) C:\Users\Kachm\OneDrive\Desktop\adwcleaner(1).exe
2024-08-31 15:33 - 2024-08-31 15:33 - 000003530 _____ C:\WINDOWS\system32\Tasks\SEO
2024-08-31 15:29 - 2024-08-31 15:29 - 000000000 ____D C:\Users\Kachm\AppData\Roaming\Free File Viewer Pro
2024-08-31 15:22 - 2024-08-31 15:22 - 000000000 ____D C:\Users\Kachm\AppData\Roaming\ATViewer
2024-08-31 15:21 - 2024-08-31 15:33 - 000000000 ____D C:\Users\Kachm\AppData\Roaming\SEO
2024-08-31 15:21 - 2024-08-31 15:21 - 005447260 _____ C:\Users\Kachm\OneDrive\מסמכים\Universal573Viewer (2).zip
2024-08-31 15:20 - 2024-08-31 15:20 - 005447260 _____ C:\Users\Kachm\OneDrive\מסמכים\Universal573Viewer.zip
2024-08-31 14:53 - 2024-08-31 14:53 - 000000202 _____ C:\Users\Kachm\OneDrive\Desktop\mobile registrierung.txt
2024-08-31 14:52 - 2024-08-31 14:52 - 000000000 ____D C:\Users\Kachm\OneDrive\Desktop\Bilder
2024-08-22 19:39 - 2024-08-22 19:39 - 000011570 _____ C:\Users\Kachm\OneDrive\מסמכים\Kalk._1.xlsx
2024-08-22 12:27 - 2024-08-31 14:57 - 000000682 _____ C:\Users\Kachm\OneDrive\Desktop\m.txt
2024-08-20 13:37 - 2024-08-20 13:38 - 000012161 _____ C:\Users\Kachm\OneDrive\Desktop\KAUFBESTÄTIGUNG.eml
2024-08-20 13:06 - 2024-08-23 11:57 - 000001595 _____ C:\Users\Kachm\OneDrive\Desktop\Outlook (new).lnk
2024-08-20 12:41 - 2024-08-20 12:41 - 000001400 _____ C:\Users\Kachm\OneDrive\Desktop\Outlook.lnk
2024-08-20 12:30 - 2024-08-20 12:30 - 000000000 ____D C:\Users\Kachm\OneDrive\מסמכים\Outlook-Dateien
2024-08-19 15:12 - 2024-08-19 15:12 - 000000424 _____ C:\Users\Kachm\OneDrive\Desktop\Dieser PC.lnk
2024-08-18 11:30 - 2024-08-23 11:55 - 000010249 _____ C:\Users\Kachm\Downloads\Fahrtenbuch Vorlage FastBill.xlsx
2024-08-18 11:30 - 2024-08-18 11:30 - 000012988 _____ C:\Users\Kachm\Downloads\Fahrtenbuch-Vorlage.xlsx
2024-08-18 11:29 - 2024-08-18 11:29 - 000107255 _____ C:\Users\Kachm\Downloads\Vorlage_Reisekostenabrechnung.xlsx
2024-08-15 11:43 - 2024-08-15 11:43 - 000026169 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-08-15 11:42 - 2024-08-15 11:42 - 000026169 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-08-08 12:37 - 2024-08-08 12:42 - 000000000 ____D C:\Users\Kachm\OneDrive\Desktop\EPSON DRUCKER
2024-08-08 12:35 - 2024-08-08 12:35 - 000000000 ____D C:\ProgramData\UDL
2024-08-08 12:35 - 2024-08-08 12:35 - 000000000 ____D C:\ProgramData\Sony Corporation
2024-08-08 12:30 - 2024-09-01 09:45 - 000000000 ____D C:\Users\Kachm\AppData\Roaming\EPSON
2024-08-08 12:30 - 2024-08-15 18:30 - 000000939 _____ C:\WINDOWS\Tasks\EPSON ET-2750 Series Update {70550368-7EE2-4A2B-9538-E9FB2AE7DED3}.job
2024-08-08 12:30 - 2024-08-08 12:30 - 000004138 _____ C:\WINDOWS\system32\Tasks\EPSON ET-2750 Series Update {70550368-7EE2-4A2B-9538-E9FB2AE7DED3}
2024-08-08 12:29 - 2024-08-15 18:30 - 000000939 _____ C:\WINDOWS\Tasks\EPSON ET-2750 Series Update {8CF7F67C-31E8-4B10-9EEE-CDFEF46F75F4}.job
2024-08-08 12:29 - 2024-08-08 12:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2024-08-08 12:29 - 2024-08-08 12:35 - 000000000 ____D C:\Program Files (x86)\EPSON Software
2024-08-08 12:29 - 2024-08-08 12:35 - 000000000 ____D C:\Program Files (x86)\epson
2024-08-08 12:29 - 2024-08-08 12:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2024-08-08 12:29 - 2024-08-08 12:29 - 000004138 _____ C:\WINDOWS\system32\Tasks\EPSON ET-2750 Series Update {8CF7F67C-31E8-4B10-9EEE-CDFEF46F75F4}
2024-08-08 12:29 - 2024-08-08 12:29 - 000000000 ____D C:\WINDOWS\twain_64
2024-08-08 12:29 - 2024-08-08 12:29 - 000000000 ____D C:\Program Files\EpsonNet
2024-08-08 12:29 - 2024-08-08 12:29 - 000000000 ____D C:\Program Files\epson
2024-08-08 12:29 - 2024-08-08 12:29 - 000000000 ____D C:\Program Files\Common Files\EPSON
2024-08-08 12:29 - 2020-10-02 18:10 - 000206304 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\escsvc64.exe
2024-08-08 12:29 - 2020-10-02 18:10 - 000165392 _____ (TWAIN Working Group) C:\WINDOWS\system32\twaindsm.dll
2024-08-08 12:29 - 2020-10-02 18:10 - 000147472 _____ (TWAIN Working Group) C:\WINDOWS\SysWOW64\twaindsm.dll
2024-08-08 12:28 - 2024-08-08 12:42 - 000000000 ____D C:\ProgramData\Epson
2024-08-08 12:28 - 2024-08-08 12:28 - 012238080 _____ (SEIKO EPSON CORPORATION) C:\Users\Kachm\Downloads\epson630363eu.exe
2024-08-03 15:44 - 2024-08-03 15:44 - 000000000 ____D C:\Users\Kachm\AppData\Roaming\Microsoft\Stationery
2024-08-03 15:44 - 2024-08-03 15:44 - 000000000 ____D C:\Users\Kachm\AppData\Roaming\Microsoft\Signatures
2024-08-03 15:40 - 2024-08-20 13:01 - 000000000 ____D C:\Users\Kachm\AppData\Roaming\Microsoft\UProof
2024-08-03 15:40 - 2024-08-03 15:40 - 000001400 _____ C:\Users\Kachm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2024-08-03 15:40 - 2024-08-03 15:40 - 000000000 ____D C:\Users\Kachm\AppData\Roaming\Microsoft\Proof
2024-08-03 15:40 - 2024-08-03 15:40 - 000000000 ____D C:\Users\Kachm\AppData\Roaming\Microsoft\Outlook
2024-08-03 14:02 - 2024-08-03 14:02 - 000001501 _____ C:\Users\Kachm\OneDrive\Desktop\mobile.de.lnk
2024-08-03 13:39 - 2024-08-23 11:49 - 000000000 ____D C:\Users\Kachm\OneDrive\Desktop\CarTrade Leonberg Unterlagen
2024-08-02 09:15 - 2024-08-02 09:15 - 000002548 _____ C:\Users\Kachm\OneDrive\Desktop\Word.lnk
2024-08-02 09:14 - 2024-08-02 09:14 - 000002544 _____ C:\Users\Kachm\OneDrive\Desktop\Excel.lnk
2024-08-02 08:55 - 2024-08-02 08:55 - 000000000 ____D C:\Users\Kachm\OneDrive\מסמכים\Benutzerdefinierte Office-Vorlagen

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-09-01 10:14 - 2024-06-23 23:50 - 000000000 ____D C:\Users\Kachm\AppData\Roaming\Microsoft\Excel
2024-09-01 10:14 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-09-01 10:12 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-09-01 10:10 - 2024-07-04 17:12 - 001663100 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-09-01 10:10 - 2022-05-07 07:22 - 000000000 ____D C:\WINDOWS\INF
2024-09-01 10:04 - 2024-06-23 23:50 - 000000000 ___RD C:\Users\Kachm\OneDrive
2024-09-01 10:04 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-09-01 10:03 - 2024-07-04 17:07 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-09-01 10:03 - 2024-06-20 18:48 - 000012288 ___SH C:\DumpStack.log.tmp
2024-09-01 10:03 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ServiceState
2024-09-01 09:58 - 2022-05-07 07:17 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2024-09-01 09:41 - 2021-07-24 09:37 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2024-09-01 09:37 - 2024-07-04 17:02 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-08-31 16:11 - 2024-06-20 18:48 - 000000000 ____D C:\ProgramData\HP
2024-08-31 16:11 - 2021-07-24 09:30 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2024-08-31 16:11 - 2021-02-21 11:00 - 000000000 ___HD C:\hp
2024-08-31 16:11 - 2021-02-21 10:56 - 000000000 ____D C:\Program Files\HPCOMMRECOVERY
2024-08-31 16:11 - 2021-02-21 10:53 - 000000000 ____D C:\Program Files (x86)\HP
2024-08-31 15:58 - 2021-07-24 09:41 - 000000000 ____D C:\Program Files\McAfee
2024-08-31 15:53 - 2024-06-23 23:49 - 000000000 ____D C:\Users\Kachm\AppData\Local\Packages
2024-08-31 15:53 - 2022-05-07 07:24 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2024-08-31 15:53 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-08-31 15:53 - 2021-07-24 09:41 - 000000000 ____D C:\ProgramData\McAfee
2024-08-31 15:53 - 2021-07-24 09:32 - 000000000 ____D C:\ProgramData\Packages
2024-08-31 15:46 - 2024-06-23 23:49 - 000000000 ____D C:\Users\Kachm\AppData\Local\D3DSCache
2024-08-31 12:39 - 2024-06-20 18:48 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-08-28 17:22 - 2024-07-10 13:59 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-08-28 17:22 - 2024-07-10 13:59 - 000002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-08-28 17:19 - 2024-07-31 19:18 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-08-28 17:19 - 2024-07-30 11:55 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-08-28 17:19 - 2024-07-30 11:55 - 000002155 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-08-28 17:19 - 2024-07-04 17:07 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4159054142-819946078-237485139-1001
2024-08-23 14:07 - 2024-06-20 18:48 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-08-23 14:07 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Windows Defender
2024-08-21 14:21 - 2024-07-30 11:50 - 000000000 ____D C:\Program Files\Microsoft Office
2024-08-20 12:08 - 2024-07-04 15:44 - 000000000 ____D C:\Users\Kachm\AppData\Local\CrashDumps
2024-08-15 18:46 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-08-15 18:31 - 2024-07-04 17:07 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2024-08-15 18:30 - 2024-07-04 17:02 - 000597560 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-08-15 18:30 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\WUModels
2024-08-15 18:29 - 2024-07-04 17:59 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2024-08-15 18:29 - 2024-07-04 17:04 - 000000000 ____D C:\Users\Kachm
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\UUS
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemResources
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemApps
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\schemas
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\Provisioning
2024-08-15 18:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-08-15 11:47 - 2024-07-04 15:45 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-08-15 11:47 - 2022-05-07 07:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-08-15 11:45 - 2024-07-04 15:45 - 197093640 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-08-15 11:45 - 2022-05-07 07:25 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2024-08-15 11:45 - 2022-05-07 07:24 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2024-08-08 12:55 - 2024-06-25 18:08 - 000000000 ____D C:\Users\Kachm\AppData\Local\Comms
2024-08-08 12:35 - 2021-02-21 10:56 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2024-08-08 12:34 - 2021-07-24 09:38 - 000000000 ____D C:\ProgramData\Package Cache
2024-08-08 12:29 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-08-06 17:46 - 2024-07-04 17:07 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2024-08-06 17:46 - 2024-06-30 10:27 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2024-08-02 09:07 - 2024-06-25 18:09 - 000000000 ____D C:\Users\Kachm\AppData\Local\HP

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 22-08.2024
durchgeführt von Kachm (01-09-2024 10:20:18)
Gestartet von C:\Users\Kachm\OneDrive\Desktop
Microsoft Windows 11 Home Version 23H2 22631.4037 (X64) (2024-07-04 15:08:09)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-4159054142-819946078-237485139-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4159054142-819946078-237485139-503 - Limited - Disabled)
Gast (S-1-5-21-4159054142-819946078-237485139-501 - Limited - Disabled)
Kachm (S-1-5-21-4159054142-819946078-237485139-1001 - Administrator - Enabled) => C:\Users\Kachm
WDAGUtilityAccount (S-1-5-21-4159054142-819946078-237485139-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee (Disabled - Up to date) {0BE13B34-492A-21C0-AE43-C1742279CCB6}
FW: McAfee (Disabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 24.003.20054 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601078}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
CarDeluxe Version 3 (HKLM-x32\...\{425446D6-9965-4686-8861-687729D91C3B}_is1) (Version: 3 - CarDeluxe GmbH & Co. KG)
Druckerdeinstallation für EPSON ET-2750 Series (HKLM\...\EPSON ET-2750 Series) (Version:  - Seiko Epson Corporation)
Epson Easy Photo Print 2 (HKLM-x32\...\{7E0261C4-8495-4365-BE48-647701D8B9BD}) (Version: 2.8.3.0 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{9D0A1045-5307-4003-A8D7-F049436827CD}) (Version: 3.11.79 - Seiko Epson Corporation)
Epson Printer Connection Checker (HKLM-x32\...\{DE32F90E-1A29-4D74-BCF1-E7DDB25D713A}) (Version: 3.4.0.0 - Seiko Epson Corporation)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version:  - Seiko Epson Corporation)
EPSON Scan OCR Component (HKLM-x32\...\{3615C893-F844-4A5B-B949-8409EAB62271}) (Version: 3.00.05 - Seiko Epson Corporation)
Epson ScanSmart (HKLM-x32\...\{B9696691-3FCC-4247-8030-3DAC7BD7E2F8}) (Version: 3.7.12 - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{711E8536-AB71-4455-A6C4-357FDBBEBF91}) (Version: 4.6.7 - Seiko Epson Corporation)
EPSON-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.57.0.0 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)
ExpressVPN (HKLM-x32\...\{E5B9C3E5-889C-4F22-A959-F4B8468D8835}) (Version: 7.12.1.4 - ExpressVPN) Hidden
ExpressVPN (HKLM-x32\...\{ebd248cd-b3ef-4e14-b91a-d626fa5c392a}) (Version: 7.12.1.4 - ExpressVPN)
HP Audio Switch (HKLM-x32\...\{0B1DA73D-0562-4DE1-B942-CEF286CF2EDD}) (Version: 1.0.211.0 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.19.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 128.0.2739.54 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 128.0.2739.54 - Microsoft Corporation)
Microsoft Office LTSC Professional Plus 2021 - de-de (HKLM\...\ProPlus2021Volume - de-de) (Version: 16.0.14332.20763 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.161.0811.0001 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.24.19202 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27027 (HKLM-x32\...\{39e28474-b67b-4209-af1b-e9ad0a83d8ca}) (Version: 14.16.27027.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 X86 Additional Runtime - 14.16.27024 (HKLM-x32\...\{7258184A-EC44-4B1A-A7D3-68D85A35BFD0}) (Version: 14.16.27024 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2017 X86 Minimum Runtime - 14.16.27024 (HKLM-x32\...\{5EEFCEFB-E5F7-4C82-99A5-813F04AA4FBD}) (Version: 14.16.27024 - Microsoft Corporation) Hidden
MyEpson Portal (HKLM-x32\...\{3361D415-BA35-4143-B301-661991BA6219}) (Version: 1.1.3.6 - SEIKO EPSON CORPORATION) Hidden
MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version:  - Seiko Epson Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20763 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20763 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.14332.20763 - Microsoft Corporation) Hidden
Opera Stable 113.0.5230.47 (HKU\S-1-5-21-4159054142-819946078-237485139-1001\...\Opera 113.0.5230.47) (Version: 113.0.5230.47 - Opera Software)
WinRAR 7.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 7.01.0 - win.rar GmbH)

Packages:
=========

Amazon Alexa -> C:\Program Files\WindowsApps\57540AMZNMobileLLC.AmazonAlexa_3.25.1156.0_x64__22t9g3sebte08 [2024-06-25] (AMZN Mobile LLC.) [Startup Task]
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m [2024-07-10] (Advanced Micro Devices Inc.) [Startup Task]
Dropbox-Sonderaktion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.27.0_x64__xbfy0k16fey96 [2024-08-03] (Dropbox Inc.)
Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_1.2.0.0_x64__v10z8vjag6ke6 [2024-06-25] (HP Inc.)
Gebrauchtwagen & Neuwagen » mobile.de -> C:\Program Files\WindowsApps\www.mobile.de-3E2F3B9_1.0.0.0_neutral__jxsgcwjt93c6r [2024-08-03] (www.mobile.de)
HP Audio Center -> C:\Program Files\WindowsApps\AD2F1837.HPAudioCenter_1.51.329.0_x64__v10z8vjag6ke6 [2024-07-10] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.6.2.0_x64__v10z8vjag6ke6 [2024-07-15] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.3.7.0_x64__v10z8vjag6ke6 [2024-06-30] (HP Inc.)
HP QuickDrop -> C:\Program Files\WindowsApps\AD2F1837.HPQuickDrop_2.5.10921.0_x64__v10z8vjag6ke6 [2024-06-25] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_155.1.1088.0_x64__v10z8vjag6ke6 [2024-08-06] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.37.11.0_x64__v10z8vjag6ke6 [2024-08-06] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.15.0_x64__v10z8vjag6ke6 [2024-06-30] (HP Inc.)
Kleinanzeigen -> C:\Program Files\WindowsApps\www.kleinanzeigen.de-EA83E5F7_1.0.0.0_neutral__avyssx7cs0qwt [2024-07-15] (www.kleinanzeigen.de)
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2407.18002.0_x64__8wekyb3d8bbwe [2024-08-08] (Microsoft Corporation) [Startup Task]
Microsoft Teams -> C:\Program Files\WindowsApps\MSTeams_24215.1007.3082.1590_x64__8wekyb3d8bbwe [2024-08-31] (Microsoft) [Startup Task]
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_53.21110.548.0_x64__8wekyb3d8bbwe [2024-06-30] (Microsoft Corporation)
Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.2.2331.0_x64__8wekyb3d8bbwe [2024-08-28] (Microsoft Corporation)
Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.95.0_x64__8wekyb3d8bbwe [2024-07-25] (Microsoft Corporation)
MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24072.45.0_x64__cw5n1h2txyewy [2024-08-18] (Microsoft Windows) [Startup Task]
myHP -> C:\Program Files\WindowsApps\AD2F1837.myHP_36.52434.951.0_x64__v10z8vjag6ke6 [2024-08-31] (HP Inc.) [Startup Task]
Solitär -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSolitaire_7.5.18.0_x64__kx24dqmazqk8j [2024-08-09] (Random Salad Games LLC)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0 [2024-08-30] (Spotify AB) [Startup Task]
Start Experiences App -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.7.0_x64__8wekyb3d8bbwe [2024-08-31] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\LKG\MicrosoftWindows.LKG.DesktopSpotlight_cw5n1h2txyewy [2024-08-15] (Microsoft Windows)
Windows-Fotoanzeige -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11070.31001.0_x64__8wekyb3d8bbwe [2024-08-08] (Microsoft Corporation) [Startup Task]
WinRAR -> C:\Program Files\WinRAR [2024-07-10] (win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-4159054142-819946078-237485139-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Kachm\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.24.19202\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4159054142-819946078-237485139-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\Kachm\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\AmazonShopping.lnk -> C:\Program Files (x86)\HP\Shared\WizLink.exe () -> hxxp://www.amazon.com/gp/ubp/oneButton/config/redirectHome?tagbase=hpga1-ubpl&ref=aagateway-taskbar-hp
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gratistests.lnk -> C:\Program Files (x86)\Online Services\Adobe\WizLink.exe () -> hxxp://js.redirect.hp.com/jumpstation?type=103&RedeemCode=qWjTQeu%2f%2b92FW%2bQc9A7fapIyH91O7f3mQ644O9iQ3fSC7ihelvZ%2bW%2bGI7vBdhL0o0R%2b9BmElQjTCZ022OxamINTqJHuhwLLFbX9XXV%2ffVf42F4Pg9DLM0zpeJel%2bXy97wIWj5x%2bK9iZcJgRStiimpJ1xxBxJ0yHbeIYoC9JLSkU%3d
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass.lnk -> C:\Program Files (x86)\Online Services\LastPass\WizLink.exe () -> hxxp://js.redirect.hp.com/jumpstation?bd=lastpass&c=*&locale=*&pf=*&s=*&tp=edge

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2024-08-18 12:08 - 2024-08-18 12:08 - 000138240 _____ () [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.IWs06dcaa36#\805c5a592d1b45da15291fa2e9d30029\Interop.IWshRuntimeLibrary.ni.dll
2024-08-18 12:08 - 2024-08-18 12:08 - 000139776 _____ (hardcodet.net) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Hardcodet.W6cab32f3#\cbabf0eef2571fc2de85892b1128ed34\Hardcodet.Wpf.TaskbarNotification.ni.dll
2024-08-18 12:06 - 2024-08-18 12:06 - 000432640 _____ (HP Inc.) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LauncherSDK\c773db867c4bb6de6c81b1e775fc24e7\LauncherSDK.ni.dll
2024-08-18 12:06 - 2024-08-18 12:06 - 000037888 _____ (HP Inc.) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Logging\6477d4ce7f119f8f4865ad669a81b78f\Logging.ni.dll
2024-08-18 12:06 - 2024-08-18 12:06 - 000153088 _____ (HP Inc.) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\RpcClient\448979b96b991463cc66075e76b1eea0\RpcClient.ni.dll
2024-08-18 12:06 - 2024-08-18 12:06 - 000118272 _____ (HP Inc.) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\WMISDK\46872337f58727bb91430f1f3cfe4c59\WMISDK.ni.dll
2024-08-18 12:08 - 2024-08-18 12:08 - 001716736 _____ (Mark Heath & Contributors) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\NAudio\297e8ad3181936d240ebad16eff69105\NAudio.ni.dll
2024-07-30 11:52 - 2024-07-30 11:52 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2024-07-30 11:52 - 2024-07-30 11:52 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2024-08-18 12:08 - 2024-08-18 12:08 - 003088896 _____ (Newtonsoft) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\5b31a17d013a009ac668140e3ad0fcf2\Newtonsoft.Json.ni.dll
2024-08-18 12:06 - 2024-08-18 12:06 - 003884544 _____ (Newtonsoft) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Newtonsoft.Json\b1a093d66b55edfb8caf2d09a85a9d07\Newtonsoft.Json.ni.dll
2024-03-06 14:18 - 2024-03-06 14:18 - 000242176 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON Software\Event Manager\epnsm.dll
2024-01-11 12:25 - 2024-01-11 12:25 - 000057856 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON Software\Event Manager\EPNWPSHDevFinder.DLL
2024-01-11 12:25 - 2024-01-11 12:25 - 000291328 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON Software\Event Manager\LcMgr.dll
2021-10-26 16:58 - 2021-10-26 16:58 - 000647168 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON\MyEpson Portal\Condition Viewer_00000012\ConView.dll
2021-10-26 10:00 - 2021-10-26 10:00 - 000708608 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON\MyEpson Portal\Configration_00000171\MepCfg.dll
2020-04-17 10:15 - 2020-04-17 10:15 - 000577536 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON\MyEpson Portal\MepUploader_00000542\MepUploader.dll
2019-02-22 15:09 - 2019-02-22 15:09 - 000475136 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON\MyEpson Portal\Online Manual_00000013\MepFAQ.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 000500736 ____S (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\WINDOWS\System32\enppmon.dll
2024-08-18 12:08 - 2024-08-18 12:08 - 000780288 _____ (The Apache Software Foundation) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\log4net\6133b3d60deaab6114d67f1f5471b981\log4net.ni.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============

SearchScopes: HKLM -> {D65E73D8-BD6F-4BE5-A084-FBB8A5AF9653} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {D65E73D8-BD6F-4BE5-A084-FBB8A5AF9653} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-4159054142-819946078-237485139-1001 -> {D65E73D8-BD6F-4BE5-A084-FBB8A5AF9653} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2024-07-25] (HP Inc. -> HP Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-07-30] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2024-07-25] (HP Inc. -> HP Inc.)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-07-30] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-4159054142-819946078-237485139-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\hp backgrounds\backgrounddefault.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 ist aktiviert.

Network Binding:
=============
Ethernet 4: USB Dock Ethernet -> dlcdcncm660.sys
Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys
Ethernet 2: ExpressVPN TAP Adapter -> tapexpressvpn.sys
WLAN: Realtek RTL8821CE 802.11ac PCIe Adapter -> rtwlane.sys

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [UDP Query User{86B96A13-F120-4461-B7DC-2075E7D5DF66}C:\users\kachm\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\kachm\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [TCP Query User{1F38CFD6-975D-4675-B373-477EAB389F1C}C:\users\kachm\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\kachm\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{A2785027-8053-40C1-A9DA-375D1B9297C4}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteams.exe => Keine Datei
FirewallRules: [{54AFD2A7-0887-46BE-818B-752EC866CE53}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteams.exe => Keine Datei
FirewallRules: [{15BD0CE2-476E-4398-BBC4-DDDC04140C7B}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => Keine Datei
FirewallRules: [{369B114B-8A1B-4874-956C-507386E50AC3}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{66BD9248-D078-4BF5-B316-58ED395131E0}] => (Allow) C:\Users\Kachm\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => Keine Datei
FirewallRules: [{C75F834B-B0ED-4A52-95BC-864418FC11AF}] => (Allow) C:\Users\Kachm\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => Keine Datei
FirewallRules: [{A7BDF08C-82D1-4FEA-96CA-183B4AF30D41}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
FirewallRules: [{1282236F-9DEA-477B-AD68-D3120BBBBDB9}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
FirewallRules: [{54789D3E-E54A-4625-8B58-3121F30AFD1E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.126.3208.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{86B34656-4915-4BA7-91A1-A2349623CBD9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.126.3208.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{193A573D-BC83-46FE-B9C1-0E83E1CD1E28}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.126.3208.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FC25C645-8DA1-4253-B41F-A12901FA6A6F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.126.3208.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FC7FA02C-67D2-4086-A920-4C4410EF59DD}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24215.1105.3082.1600_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A1E4FE4B-EBC2-487E-98E0-2CAE3D2E6480}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24215.1105.3082.1600_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3B84B1B0-910D-4917-BF68-ED4974F0A812}] => (Allow) C:\Program Files\WindowsApps\MSTeams_24215.1007.3082.1590_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3B1B6A96-6126-4C3F-A96C-1A92B0A05B26}] => (Allow) C:\Program Files\WindowsApps\MSTeams_24215.1007.3082.1590_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8603693E-B55D-4D23-9141-8466DDC2754B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{9B5804A3-34C9-4C68-BEF2-EB2747A16586}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{D4F9A760-A2B0-4411-81B6-B4516DD8969C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{285A2E9E-249A-450E-92E8-66A9D96B6309}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{27A3FDD5-AD81-409F-8B76-CD45C2A9877D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{87A45B98-D7B4-4CC0-A67C-8352946CCC41}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{A237BF33-F7BB-4332-AFBF-B38CEF8271DF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{35164C2A-C4DA-4611-AFC7-272D411FB1A9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{94D42509-A4EC-4ADF-9709-6D5A35EFED74}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{2F446D61-9479-4838-B833-8D7A495C45A5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{C885EC9E-54D5-4083-80B8-31394541E1CD}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\128.0.2739.54\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

22-08-2024 19:53:00 Windows Update
22-08-2024 19:53:00 Windows Update
22-08-2024 19:53:05 Windows Update
27-08-2024 13:44:32 Windows Update
27-08-2024 13:44:37 Windows Update
27-08-2024 13:44:45 Windows Update
31-08-2024 13:48:11 Windows Update
31-08-2024 15:55:33 AdwCleaner_BeforeCleaning_31/08/2024_15:55:33
31-08-2024 15:57:07 AdwCleaner_BeforeCleaning_31/08/2024_15:57:07

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (09/01/2024 10:03:40 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\CAR-TRADE$ über https://AMD-KeyId-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 01 Sep 2024 08:03:42 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 3de88db1-ead1-4b1b-9256-1507daa632a8

Methode: GET(219ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (09/01/2024 10:03:40 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für Lokales System über https://AMD-KeyId-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 01 Sep 2024 08:03:41 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 9508309c-ac2d-429b-8506-f6cac634234b

Methode: GET(250ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (09/01/2024 09:51:46 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\CAR-TRADE$ über https://AMD-KeyId-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 01 Sep 2024 07:51:48 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 1c45f361-1da9-42ff-8d08-7dfb5fb2e000

Methode: GET(188ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (09/01/2024 09:51:46 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für Lokales System über https://AMD-KeyId-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 01 Sep 2024 07:51:47 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: dfac8dd2-816f-46b8-bcc4-de417250b65e

Methode: GET(343ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (09/01/2024 09:36:58 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\CAR-TRADE$ über https://AMD-KeyId-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 01 Sep 2024 07:36:59 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 5ab555de-bf84-4cb1-a6f7-3351c3a75f0d

Methode: GET(250ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (09/01/2024 09:36:57 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für Lokales System über https://AMD-KeyId-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 01 Sep 2024 07:36:59 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: b206bf8c-a71d-45cb-a4ff-49da6cab8f50

Methode: GET(297ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (09/01/2024 09:36:24 AM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]

Error: (08/31/2024 04:00:19 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\CAR-TRADE$ über https://AMD-KeyId-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sat, 31 Aug 2024 14:00:21 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: fd589601-1ef1-40b7-a13e-a3442aea16b5

Methode: GET(234ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)


Systemfehler:
=============
Error: (08/31/2024 04:00:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WildTangentHelper" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2024 04:00:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "HP Comm Recover" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2024 04:00:12 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "HvHost" wurde mit folgendem Fehler beendet: 
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2024 03:59:46 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (08/31/2024 03:59:46 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (08/31/2024 03:59:46 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (08/31/2024 03:58:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WildTangentHelper" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2024 03:58:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "HP Comm Recover" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.


Windows Defender:
================
Date: 2024-08-31 16:17:37
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {2F7199BF-B824-4DFB-BF94-E87AF22EBB3D}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2024-08-30 14:29:59
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {8508C252-7131-4370-8EAD-3EDD9CA9EC5F}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2024-08-29 15:49:21
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {FC362628-E5C0-43AC-AA78-6B8FC0FC0019}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2024-08-28 17:31:37
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {A1503B7D-5783-410B-A1E7-1F659ED1B057}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2024-08-28 11:18:07
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {DA1D64EB-3392-47A7-96A1-D8B86664E455}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 
Event[0]

Date: 2024-08-31 15:57:46
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.417.407.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.24070.3
Fehlercode: 0x80240022
Fehlerbeschreibung: Die Suche des Programms nach Definitionsaktualisierungen ist nicht möglich.  

Date: 2024-08-31 15:57:46
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.417.407.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.24070.3
Fehlercode: 0x80240022
Fehlerbeschreibung: Die Suche des Programms nach Definitionsaktualisierungen ist nicht möglich.  

CodeIntegrity:
===============
Date: 2024-08-31 15:51:07
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\McAfee\wps\1.21.162.1\mc-sec-plugin-x64.dll that did not meet the Windows signing level requirements. 

Date: 2024-08-31 15:51:05
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\McAfee\wps\1.21.162.1\mc-sec-plugin-x64.dll that did not meet the Windows signing level requirements. 


==================== Speicherinformationen =========================== 

BIOS: AMI F.29 05/08/2024
Hauptplatine: HP 88C6
Prozessor: AMD Ryzen 5 5500U with Radeon Graphics 
Prozentuale Nutzung des RAM: 85%
Installierter physikalischer RAM: 7501.91 MB
Verfügbarer physikalischer RAM: 1106.66 MB
Summe virtueller Speicher: 20813.91 MB
Verfügbarer virtueller Speicher: 10534.34 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:475.96 GB) (Free:398 GB) (Model: KBG40ZNV512G KIOXIA) NTFS

\\?\Volume{817b2754-06ab-4939-a1c1-64668632969b}\ () (Fixed) (Total:0.7 GB) (Free:0.08 GB) NTFS
\\?\Volume{50a70ad4-4d9b-4081-a29b-820095bd2021}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 1E1F4777)

Partition: GPT.

==================== Ende von Addition.txt =======================
         

# -------------------------------
# Malwarebytes AdwCleaner 8.4.2.0
# -------------------------------
# Build:    03-04-2024
# Database: 2024-03-04.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    09-01-2024
# Duration: 00:00:00
# OS:       Windows 11 (Build 22631.4037)
# Cleaned:  0
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1420 octets] - [01/09/2024 10:27:34]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
         

Scripting/Repair mit FRST64

WARNUNG AN ALLE MITLESER !!!
Dieses FRST-Script ist ausschließlich für diesen Nutzer gedacht und sollte niemals 1:1 für ein anderes System angewendet werden!

• Kopiere den gesamten Inhalt der folgenden Code-Box:
  

  Start::
  CloseProcesses:
  Startup: C:\Users\Kachm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SearchEngineOptimizer.lnk [2024-08-31] <==== ACHTUNG
  ShortcutTarget: SearchEngineOptimizer.lnk -> C:\Users\Kachm\AppData\Roaming\SEO\SEO.exe (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) <==== ACHTUNG
  HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG
  Task: {1D74B7E9-E547-45F9-BAF6-DD57848A5CD7} - System32\Tasks\SEO => C:\Users\Kachm\AppData\Roaming\SEO\SEO.exe [11406432 2024-08-31] (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) <==== ACHTUNG
  C:\WINDOWS\system32\Tasks\SEO
  C:\Users\Kachm\AppData\Roaming\SEO
  emptytemp:
  End::
           

• Starte nun FRST und klicke direkt den Reparieren Button.Wichtig: Du brauchst den Inhalt der Code-Box nirgends einfügen, da sich FRST den Code aus der Zwischenablage holt!
• Das Tool führt die gewünschten Schritte aus und erstellt eine fixlog.txt im selben Verzeichnis, in dem sich FRST befindet.
• Gegebenenfalls muss dein Rechner neu gestartet werden.
• Poste mir den Inhalt der fixlog.txt mit deiner nächsten Antwort.

Hallo vielen Dank für Ihre Hilfe. Im Anhang sende ich Ihnen den Inhalt der fixlog.

Entfernungsergebnis von Farbar Recovery Scan Tool (x64) Version: 22-08.2024
durchgeführt von Kachm (06-09-2024 11:43:41) Run:1
Gestartet von C:\Users\Kachm\OneDrive\Desktop
Geladene Profile: Kachm
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
Start::
CloseProcesses:
Startup: C:\Users\Kachm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SearchEngineOptimizer.lnk [2024-08-31] <==== ACHTUNG
ShortcutTarget: SearchEngineOptimizer.lnk -> C:\Users\Kachm\AppData\Roaming\SEO\SEO.exe (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) <==== ACHTUNG
HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG
Task: {1D74B7E9-E547-45F9-BAF6-DD57848A5CD7} - System32\Tasks\SEO => C:\Users\Kachm\AppData\Roaming\SEO\SEO.exe [11406432 2024-08-31] (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) <==== ACHTUNG
C:\WINDOWS\system32\Tasks\SEO
C:\Users\Kachm\AppData\Roaming\SEO
emptytemp:
End::
*****************

Prozesse erfolgreich geschlossen.
C:\Users\Kachm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SearchEngineOptimizer.lnk => erfolgreich verschoben
C:\Users\Kachm\AppData\Roaming\SEO\SEO.exe => erfolgreich verschoben
HKLM\SOFTWARE\Policies\Google => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1D74B7E9-E547-45F9-BAF6-DD57848A5CD7}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1D74B7E9-E547-45F9-BAF6-DD57848A5CD7}" => erfolgreich entfernt
C:\WINDOWS\System32\Tasks\SEO => erfolgreich verschoben
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SEO" => erfolgreich entfernt
"C:\WINDOWS\system32\Tasks\SEO" => nicht gefunden

"C:\Users\Kachm\AppData\Roaming\SEO" Ordner verschieben:

C:\Users\Kachm\AppData\Roaming\SEO => erfolgreich verschoben

=========== EmptyTemp: ==========

FlushDNS => abgeschlossen
BITS transfer queue => 1048576 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 9496905 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 75678146 B
Edge => 0 B
Firefox => 0 B
Opera => 18781951 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 3498 B
Kachm => 89388439 B

RecycleBin => 13176953 B
EmptyTemp: => 198 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 11:43:56 ====
         

Kontrollscans mit MBAM und RK

• Malwarebytes
• RogueKiller

Poste nach Abschluss der beiden Scans die Logs in CODE-Tags.