Moin, ich habe heute leider per Chip eine Vorlage für die Stammbaum Erstellung downgeloaded. Habe dann den Fehler gehabt: "Seo Shell-Benachrichtigungssymbol kann nicht entfernt werden"
Habe dann im CCleaner Autostart dieses SEO gesehen und erst einmal deaktiviert. Im AppData Verzeichnis habe ich dann den Ordner gefunden und versucht zu deinstallieren aber geht nicht. Hatte dann AdAware getestet aber wieder deinstalliert. Fehler wurde nicht entfernt. Habe dann nach euer Anleitung FRST installiert und die Logdateien erstellt.

Mit der Bitte um Unterstützung.
Grüße Chris

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 09-09-2024
durchgeführt von cege_ (12-09-2024 19:23:50)
Gestartet von D:\Users\cege_\Downloads\Programme
Microsoft Windows 11 Pro Version 23H2 22631.4169 (X64) (2023-10-06 19:06:22)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-245825207-2728911537-4173236764-500 - Administrator - Disabled)
cege_ (S-1-5-21-245825207-2728911537-4173236764-1001 - Administrator - Enabled) => C:\Users\cege_
DefaultAccount (S-1-5-21-245825207-2728911537-4173236764-503 - Limited - Disabled)
Gast (S-1-5-21-245825207-2728911537-4173236764-501 - Limited - Disabled)
Jana (S-1-5-21-245825207-2728911537-4173236764-1004 - Administrator - Enabled) => C:\Users\Jana
WDAGUtilityAccount (S-1-5-21-245825207-2728911537-4173236764-504 - Limited - Disabled)
_ashbackuppb_ (S-1-5-21-245825207-2728911537-4173236764-1008 - Administrator - Enabled) => C:\Users\_ashbackuppb_.CEGE-PC

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Bitdefender Antivirus (Enabled - Up to date) {0F59B032-EA77-E3A8-2382-74A4346E5522}
AV: G DATA INTERNET SECURITY (Disabled - Up to date) {9236DD49-E94E-24D6-9122-C4F39CEA579A}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G DATA INTERNET SECURITY (Disabled) {AA0D5C6C-A321-258E-BA7D-6DC6623910E1}
FW: Bitdefender Firewall (Enabled) {37623117-A018-E2F0-08DD-DD91CABD1259}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

ActMask PDF Virtual Printer SDK (HKLM\...\ActMask PDF Virtual Printer SDK - Licensee: Asha~0729FCB9_is1) (Version:  - )
Admirals Group MT5 Terminal (HKLM\...\Admirals Group MT5 Terminal) (Version: 5.00 - MetaQuotes Ltd.)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 24.003.20112 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601078}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Ashampoo Backup Pro 17 (HKLM\...\{34B007AF-5909-F165-4B92-42DCE6E18868}_is1) (Version: 17.00 - Ashampoo GmbH & Co. KG)
Ashampoo Backup Pro 17 (HKLM\...\{91B33C97-5909-F165-4B92-42DCE6E18868}_is1) (Version: 17.11 - Ashampoo GmbH & Co. KG)
Ashampoo PDF Pro 2 (HKLM-x32\...\{0A11EA01-0224-BF80-B342-BDA165B48491}_is1) (Version: 2.1.0 - Ashampoo GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield™ 2042 (HKLM-x32\...\{45e281f3-1414-47ea-bb64-4f50d50121f3}) (Version: 1.0.78.3345 - Electronic Arts)
BitBoxApp (HKU\S-1-5-21-245825207-2728911537-4173236764-1001\...\BitBoxApp) (Version: 4.43.0.0 - Shift Crypto AG)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 27.0.1.285 - Bitdefender)
Bitdefender Internet Security (HKLM\...\Bitdefender) (Version: 27.0.27.129 - Bitdefender)
Bitdefender VPN (HKLM\...\Bitdefender VPN) (Version: 27.1.2.1 - Bitdefender)
Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version:  - Blizzard Entertainment)
Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.61.1.10 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.6.0.2 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 6.5.0 - Canon Inc.)
Canon TS7400 series Driver (HKLM\...\{1199FAD5-9546-44F3-81CF-FFDB8040B7BF}_Canon_TS7400_series) (Version: 1.02 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.27 - Piriform)
CCleaner Browser (HKLM-x32\...\CCleaner Browser) (Version: 127.0.26097.121 - Die CCleaner Browser-Autoren)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1636.4 - Piriform Software) Hidden
CEWE Fotowelt (HKLM\...\CEWE Fotowelt) (Version: 7.4.2 - CEWE Stiftung u Co. KGaA)
Druckerregistrierung (HKLM-x32\...\Canon EISRegistration) (Version: 1.9.0 - Canon Inc.)
EA app (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 13.269.0.5782 - Electronic Arts) Hidden
EA app (HKLM-x32\...\{99e78c1c-d34b-42af-bb92-112bf15e2dcf}) (Version: 13.269.0.5782 - Electronic Arts)
Firefly 2.0.12 (HKLM\...\5892dd0c-8983-51d7-b337-6e1d1da9ad4b) (Version: 2.0.12 - IOTA Foundation)
Firefly Shimmer 2.1.16 (HKLM\...\7a8430fd-f63c-5aa7-a4f7-62312e12829d) (Version: 2.1.16 - IOTA Foundation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 128.0.6613.137 - Google LLC)
KeePass Password Safe 2.57 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.57 - Dominik Reichl)
Ledger Live 2.84.1 (HKLM\...\c62032b2-0bca-5abc-b458-fd67cfc9e49b) (Version: 2.84.1 - Ledger Live Team)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 128.0.2739.67 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 128.0.2739.67 - Microsoft Corporation)
Microsoft Office Home and Business 2019 - de-de (HKLM\...\HomeBusiness2019Retail - de-de) (Version: 16.0.17928.20114 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.23026 (HKLM-x32\...\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}) (Version: 14.0.23026 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.23026 (HKLM-x32\...\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}) (Version: 14.0.23026 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.22.27821 (HKLM-x32\...\{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.22.27821 (HKLM-x32\...\{5bfc1380-fd35-4b85-9715-7351535d077e}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.34.31938 (HKLM-x32\...\{d92971ab-f030-43c8-8545-c66c818d0e05}) (Version: 14.34.31938.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.34.31938 (HKLM-x32\...\{4f84f2dc-3f70-433a-8f50-8293e0089b0f}) (Version: 14.34.31938.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.34.31938 (HKLM\...\{7DA37AE3-D8AE-49B1-9BDC-23CA0AB9FF22}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.34.31938 (HKLM\...\{0AE39060-F209-4D05-ABC7-54B8F9CFA32E}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.34.31938 (HKLM-x32\...\{080D8397-60F4-44B3-BB95-FBB950CB0B4E}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.34.31938 (HKLM-x32\...\{8DE5B0D4-A6D8-4F72-B8EF-28776A2EE5D5}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 130.0 (x64 de)) (Version: 130.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 114.0.2 - Mozilla)
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.28.0.417 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.28.0.417 - NVIDIA Corporation)
NVIDIA Grafiktreiber 561.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 561.09 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.4.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.0.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
O&O SafeErase Professional (HKLM\...\{5A24889A-ABFF-4EBF-8467-FAEB43D798F4}) (Version: 15.24.106 - O&O Software GmbH)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20018 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20114 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.17628.20110 - Microsoft Corporation) Hidden
Portfolio Performance (HKLM-x32\...\Portfolio Performance) (Version: 0.63.1 - Andreas Buchen)
ROCCAT Kone Pure Mouse Driver (HKLM-x32\...\{4905245D-56E7-4176-BE68-962728B803D6}) (Version:  - Roccat GmbH)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 8.1.0.800 - Samsung Electronics)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.18 - VideoLAN)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - CACE Technologies)
Zoom (HKU\S-1-5-21-245825207-2728911537-4173236764-1001\...\ZoomUMX) (Version: 5.15.12 (21574) - Zoom Video Communications, Inc.)
Zoom (HKU\S-1-5-21-245825207-2728911537-4173236764-1004\...\ZoomUMX) (Version: 5.15.12 (21574) - Zoom Video Communications, Inc.)

Packages:
=========

Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC [2024-06-14] ()
AppleInc.iCloud -> C:\Program Files\WindowsApps\AppleInc.iCloud_15.2.157.0_x64__nzyj5cx40ttqa [2024-08-18] (Apple Inc.) [Startup Task]
Bitdefender CL Contextual Menu -> C:\Program Files\Bitdefender\Bitdefender Security App [2024-09-12] (Bitdefender)
HP Audio Center -> C:\Program Files\WindowsApps\AD2F1837.HPAudioCenter_1.47.308.0_x64__v10z8vjag6ke6 [2024-06-16] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.37.11.0_x64__v10z8vjag6ke6 [2024-08-07] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12132.3.2017.0_x64__nzyj5cx40ttqa [2024-05-23] (Apple Inc.) [Startup Task]
Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.95.0_x64__8wekyb3d8bbwe [2024-07-26] (Microsoft Corporation)
MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24081.55.0_x64__cw5n1h2txyewy [2024-09-06] (Microsoft Windows) [Startup Task]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-09-11] (NVIDIA Corp.)
OMEN Gaming Hub -> C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6 [2024-08-18] (HP Inc.) [Startup Task]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0 [2024-08-30] (Spotify AB) [Startup Task]
Start Experiences App -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.7.0_x64__8wekyb3d8bbwe [2024-09-06] (Microsoft Corporation)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2435.4.0_x64__cv1g1gvanyjgm [2024-09-06] (WhatsApp Inc.) [Startup Task]
Widgets Platform Runtime -> C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.4.0.0_x64__8wekyb3d8bbwe [2024-09-12] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.AccountsService_cw5n1h2txyewy [2024-09-11] (Microsoft Windows)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.DesktopSpotlight_cw5n1h2txyewy [2024-09-11] (Microsoft Windows)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.IrisService_cw5n1h2txyewy [2024-09-11] (Microsoft Windows)
Windows-Fotoanzeige -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11070.31001.0_x64__8wekyb3d8bbwe [2024-08-12] (Microsoft Corporation) [Startup Task]

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-245825207-2728911537-4173236764-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-245825207-2728911537-4173236764-1001_Classes\CLSID\{191D0D26-CB71-4D88-BBB7-12A93CC4F101} -> [iCloud Drive] => C:\Users\cege_\iCloudDrive [2023-10-30 13:34]
CustomCLSID: HKU\S-1-5-21-245825207-2728911537-4173236764-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
ContextMenuHandlers1: [SafeErase] -> {E8D43C7E-EFA1-41A2-9AD9-0CFECD1678B7} => C:\Program Files\OO Software\SafeErase\oosesh.dll [2022-06-08] (O&O Software GmbH -> O&O Software GmbH)
ContextMenuHandlers2: [SafeErase] -> {E8D43C7E-EFA1-41A2-9AD9-0CFECD1678B7} => C:\Program Files\OO Software\SafeErase\oosesh.dll [2022-06-08] (O&O Software GmbH -> O&O Software GmbH)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nvhdci.inf_amd64_9f205e7d8efa92c6\nvshext.dll [2024-09-06] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [SafeErase] -> {E8D43C7E-EFA1-41A2-9AD9-0CFECD1678B7} => C:\Program Files\OO Software\SafeErase\oosesh.dll [2022-06-08] (O&O Software GmbH -> O&O Software GmbH)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2023-06-12 11:05 - 2012-06-23 14:54 - 000061440 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\hiddriver.dll
2024-03-25 12:29 - 2024-03-14 03:23 - 002574336 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\ffmpeg.dll
2024-03-25 12:29 - 2024-03-14 03:23 - 000379392 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\libegl.dll
2024-03-25 12:29 - 2024-03-14 03:23 - 006585344 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\libglesv2.dll
2024-03-25 12:30 - 2024-03-14 03:21 - 000143360 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\resources\app\dist\magutils-napi.node
2024-03-25 12:30 - 2024-03-14 03:21 - 000087040 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\resources\app\dist\magvibrancy-napi.node
2024-03-25 12:30 - 2024-03-14 03:21 - 000636928 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\resources\app\dist\uimpewrapper-napi.node
2023-09-27 11:57 - 2024-03-14 03:23 - 004512256 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\vk_swiftshader.dll
2023-09-27 11:57 - 2024-03-14 03:23 - 000815104 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\vulkan-1.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000065024 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\ashinetutil.dll
2023-06-19 22:21 - 2023-12-05 13:16 - 000074240 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\backupServiceLib.dll
2023-06-19 22:22 - 2023-12-05 13:07 - 001299968 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\countly.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000225792 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\jsoncpp.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000056832 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\lzma.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000111616 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\minizip.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000225792 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\party.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000680448 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\sqlite.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 001077248 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\webdave.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000084480 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\zdll.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000074752 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\ziputil.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000026112 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\zlibutil.dll
2024-05-04 19:34 - 2024-05-04 19:34 - 000060928 _____ (Adobe Systems Incorporated) [Datei ist nicht signiert] C:\Program Files\Adobe\Acrobat DC\Acrobat\Locale\de_de\Adobe Send\SendAsLinkAddin.DEU
2023-06-19 14:39 - 2020-03-04 17:08 - 000123904 _____ (CANON INC.) [Datei ist nicht signiert] C:\Program Files (x86)\Canon\IJPLM\CNMPU.DLL
2023-06-12 15:12 - 2023-06-12 15:12 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Client\AppVIsvSubsystems64.dll
2023-06-12 15:12 - 2023-06-12 15:12 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppvIsvSubsystems64.dll
2023-06-12 15:12 - 2023-06-12 15:12 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Client\C2R64.dll
2023-06-12 15:12 - 2023-06-12 15:12 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2023-06-19 22:21 - 2018-06-27 10:58 - 002135040 _____ (The curl library, hxxps://curl.haxx.se/) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\ash_libcurl.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000432128 _____ (The curl library, hxxps://curl.haxx.se/) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\libcurl.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 003427328 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\libcrypto-1_1-x64.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000684544 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\libssl-1_1-x64.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000152064 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\wxbase310u_net_vc_ox.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 002171904 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\wxbase310u_vc_ox.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000165888 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\wxbase310u_xml_vc_ox.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 001377280 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\wxmsw310u_adv_vc_ox.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 004945920 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\wxmsw310u_core_vc_ox.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000642048 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\wxmsw310u_html_vc_ox.dll
2023-06-19 22:21 - 2023-12-05 13:07 - 000764416 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\wxmsw310u_xrc_vc_ox.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============

BHO: Bitdefender Anti-tracker -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security App\bdtrackerstbie.dll [2024-09-06] (Bitdefender SRL -> Bitdefender)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2024-07-25] (HP Inc. -> HP Inc.)
BHO-x32: Bitdefender Anti-tracker -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security App\antispam32\bdtrackerstbie.dll [2024-09-06] (Bitdefender SRL -> Bitdefender)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2024-07-25] (HP Inc. -> HP Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-28] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\.DEFAULT\...\adaware.com -> hxxp://adaware.com
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-245825207-2728911537-4173236764-1001\...\localhost -> localhost

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2024-05-07 20:57 - 2024-05-07 20:57 - 000000927 _____ C:\Windows\system32\drivers\etc\hosts
44.226.32.255 geoip.pango-paas.co
18.66.2.32 1uzxr3b3jraw5nlmnvbsikiioud2vilw5.web-networking.com

2023-08-05 16:37 - 2023-08-05 16:37 - 000000435 _____ C:\Windows\system32\drivers\etc\hosts.ics
172.18.224.1 CEGE-PC.mshome.net # 2028 8 4 3 14 37 16 733

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-245825207-2728911537-4173236764-1001\Control Panel\Desktop\\Wallpaper -> D:\Users\cege_\Pictures\Desktopbilder\4k-wallpaper-beach-coconut-trees-1457812.jpg
HKU\S-1-5-21-245825207-2728911537-4173236764-1004\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-245825207-2728911537-4173236764-1008\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 192.168.188.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 ist aktiviert.

Network Binding:
=============
WLAN: Realtek RTL8822CE 802.11ac PCIe Adapter -> rtwlane.sys
Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys
Ethernet: Realtek Gaming GbE Family Controller -> rt640x64.sys

nt_rtf64: Realtek LightWeight Filter (NDIS6.40)
vms_vsf: Erweiterungsfilter für virtuellen Hyper-V-Switch
vms_vsp: Extension-Protokoll für virtuellen Hyper-V-Switch

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run: => "Ashampoo Backup PB"
HKU\S-1-5-21-245825207-2728911537-4173236764-1001\...\StartupApproved\StartupFolder: => "SearchEngineOptimizer.lnk"
HKU\S-1-5-21-245825207-2728911537-4173236764-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-245825207-2728911537-4173236764-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_723DBCC29151A239E54B2790086662AB"
HKU\S-1-5-21-245825207-2728911537-4173236764-1001\...\StartupApproved\Run: => "Adaware Privacy"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{5295BC39-DFD7-440F-8C6E-FB8A6D553198}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C5757036-EF4D-45BD-91AD-0DE2505CD87B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{F13E25ED-2AE6-4525-9CAB-EC2B9ED2909F}E:\ea games\battlefield 2042\bf2042.exe] => (Allow) E:\ea games\battlefield 2042\bf2042.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [UDP Query User{EFEB76EC-4B15-4249-8184-32EB5318E586}E:\ea games\battlefield 2042\bf2042.exe] => (Allow) E:\ea games\battlefield 2042\bf2042.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{973DA8C9-41C9-4423-88F1-C05753A77614}] => (Allow) C:\Program Files\Admirals Group MT5 Terminal\metatester64.exe (MetaQuotes Ltd -> MetaQuotes Ltd.)
FirewallRules: [{435524A8-AA19-4AFA-8D55-CA005448D042}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{85D257F7-F159-4C1D-8B14-31E1C516D523}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{ED1360FE-4443-4DDD-939B-4F105E4323AB}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23231.411.2342.9597_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A168C7FB-FFAA-43A3-827E-AC49FAF4F08E}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23231.411.2342.9597_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{269A18EC-6088-4501-BDA7-3EC81BDCBBF9}] => (Allow) C:\Users\cege_\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{D74BC869-730E-4DD6-8E96-4742CA950EEF}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12132.3.2017.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{4D4D666B-E288-47D4-B792-BCCB891AB33A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12132.3.2017.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{CF491C1B-79A1-4BCA-99C9-26A71700D0DD}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12132.3.2017.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{46452D12-9048-46A8-98CC-D4A170C3F769}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12132.3.2017.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{EABB6141-FEFE-4652-ABB7-47BC9526C17E}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12132.3.2017.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{FBB91774-2A13-4C59-83C8-BBD9522F7DD8}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12132.3.2017.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{D4434579-8AC0-4E12-AC36-8E64AA02D02E}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12132.3.2017.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{215EACCE-4244-4557-817B-A786D5E2D979}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12132.3.2017.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{294E17FB-6981-4648-878F-AEA104E62996}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{EBED89B0-552D-4A02-8059-F590BB745EA1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{8FC5A934-2569-4711-A11C-0C0578E550AC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{755225AE-9C2A-4C59-8EEC-9431C94F3E0F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{0E7E254C-7766-45FD-9FFD-7C675E4D2E1E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{356D157B-D238-4D47-B005-F0B59BD0E126}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{26DC423C-A033-4E7F-A8C6-6FF70064C18A}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{C2B81104-AA31-4F4E-AA7C-4BA04F27D7EB}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{25290148-7DC7-4CEA-A006-9719AC2A39E9}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{246255E9-ED68-4E63-A5A7-AF3CDA64CF80}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{F957A09A-8444-467D-8A69-8D9F8D581248}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{3348AB56-5596-490A-899D-A6E2621C10E9}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{F2E6E65A-2B57-45CD-94CB-C82DB860D9CB}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{5609E17D-0DA9-4B2F-B4E2-93563B458D52}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{2271949A-A107-4E75-BB8A-0CBE42E40D52}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{4E3EC925-1852-49D1-821E-6DD3B0FD8DFD}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALaunchHelper.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{026A92B9-1EBB-42F7-9027-69037404196C}] => (Allow) E:\EA Games\Battlefield 2042\EAAntiCheat.GameServiceLauncher.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{8114A530-DFA9-4423-9FC3-2708495D22C2}] => (Allow) E:\EA Games\Battlefield 2042\EAAntiCheat.GameServiceLauncher.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{4A29537B-DD08-40A4-A23D-31301E53EB22}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{AAFC77EF-572D-40E1-BF56-26E55FC186D8}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{92F3ADCD-F525-4485-9300-016DAB3B1221}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{1936AC66-68E2-4489-8C8F-29DB9035F793}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{F42A7226-6F8E-4A68-8F30-74D3201158CB}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{D87900CF-EEFC-4130-93B1-CDB021D21CCD}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{061D7F8D-68EE-47C7-B75D-05C035E5C325}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{B4FF0926-76BF-4F8F-B37F-2AA8D953F0C7}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{C29C7B12-EF81-450E-813F-1552DA423893}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{4A0C7E4F-1809-490C-944B-34D8BB9E080E}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{348EC2D0-972F-4C9E-8E81-06B9D3BBEC34}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{CF5D5440-CFA6-48FE-877C-606AF212E7B7}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{C0137F3C-76BA-4C10-B5E1-7BCF2844D641}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{C1186F76-496A-4FB5-84BF-61AEAC04C77A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{D6AB2375-70DD-4707-8350-5A7E2B90B6F0}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{189A8D3B-7DD5-4626-851D-CD145C8E66C6}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{01A62BB2-E1EE-49F3-B16A-05FB7CC81918}] => (Allow) C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
FirewallRules: [{C997EC0F-1B70-4459-923F-54B61EEC0A8D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{B574CF27-2632-4648-BCD1-D34FA54A76E9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{B033EFBE-2249-4F06-9E6E-19C54E7EDD0B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{B7F8029A-5442-417F-B48A-EC49A97A7C06}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{8BE16280-0AF3-4332-A04D-7BC6172A8493}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{F79F8583-639B-4183-AC54-F9EBF1D9D41D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{CE75433E-F4F3-4081-8EF8-3D36F4634D1B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{4C7B6F84-D66C-44E2-9DB3-7F8E7CE6D879}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{B737ABA9-ED22-442E-B2E1-265D15FB6FF6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{55E65037-FE0D-495A-AE3D-389B7A15EAAE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{1FE61725-2F00-4EC2-9525-9E6311EEB34B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.127.3200.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E2B5F4FC-BC83-4EFE-AF60-DB7602785064}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.127.3200.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E5A153AC-4F94-4491-97FB-93C0DEEA1679}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.127.3200.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{21BD6034-DB6E-4C9D-B736-CF18526D7C3C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.127.3200.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2EFBB212-3B69-4E4A-8FB7-F8F0B69EBF21}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\128.0.2739.67\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B48A9E36-A69F-4832-B45A-DEFBBE2F1DD1}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Wiederherstellungspunkte =========================

06-09-2024 08:52:36 Geplanter Prüfpunkt
11-09-2024 17:59:23 Windows Update
12-09-2024 11:24:37 Quick Driver Updater Restore Point
12-09-2024 11:38:30 Quick Driver Updater Restore Point

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (09/12/2024 07:02:18 PM) (Source: IPF) (EventID: 17) (User: NT-AUTORITÄT)
Description: Event-ID 17

Error: (09/12/2024 07:02:18 PM) (Source: IPF) (EventID: 17) (User: NT-AUTORITÄT)
Description: Event-ID 17

Error: (09/12/2024 07:02:18 PM) (Source: IPF) (EventID: 17) (User: NT-AUTORITÄT)
Description: Event-ID 17

Error: (09/12/2024 07:02:18 PM) (Source: IPF) (EventID: 17) (User: NT-AUTORITÄT)
Description: Event-ID 17

Error: (09/12/2024 07:02:18 PM) (Source: IPF) (EventID: 17) (User: NT-AUTORITÄT)
Description: Event-ID 17

Error: (09/12/2024 07:02:18 PM) (Source: IPF) (EventID: 17) (User: NT-AUTORITÄT)
Description: Event-ID 17

Error: (09/12/2024 07:02:18 PM) (Source: IPF) (EventID: 17) (User: NT-AUTORITÄT)
Description: Event-ID 17

Error: (09/12/2024 07:02:18 PM) (Source: IPF) (EventID: 17) (User: NT-AUTORITÄT)
Description: Event-ID 17


Systemfehler:
=============
Error: (09/12/2024 07:04:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (09/12/2024 07:04:19 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (60000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update-Dienst (gupdate) erreicht.

Error: (09/12/2024 07:02:19 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT-AUTORITÄT)
Description: Beim Update für den sicheren Start konnte eine Variable für den sicheren Start nicht aktualisiert werden. Fehler: -2147020471. Weitere Informationen finden Sie unter https://go.microsoft.com/fwlink/?linkid=2169931

Error: (09/12/2024 06:58:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (09/12/2024 06:58:51 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (60000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update-Dienst (gupdate) erreicht.

Error: (09/12/2024 06:56:53 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT-AUTORITÄT)
Description: Beim Update für den sicheren Start konnte eine Variable für den sicheren Start nicht aktualisiert werden. Fehler: -2147020471. Weitere Informationen finden Sie unter https://go.microsoft.com/fwlink/?linkid=2169931

Error: (09/12/2024 06:56:22 PM) (Source: DCOM) (EventID: 10010) (User: CEGE-PC)
Description: Der Server "{CE6AF8E5-3A75-4AF5-BD59-C42E7228B4F4}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/12/2024 06:43:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.


Windows Defender:
================
Date: 2024-09-12 18:52:17
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {85CAF32F-5A4B-4F97-9BA9-C2E47C682243}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Vollständige Überprüfung
Benutzer: CEGE-PC\cege_ 

Date: 2024-02-17 14:25:42
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {A7C59474-03D9-4A71-8EA3-2CDF7A5B4738}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 
Event[0]

Date: 2024-09-12 18:39:43
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.405.112.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.24010.10
Fehlercode: 0x80240022
Fehlerbeschreibung: Die Suche des Programms nach Definitionsaktualisierungen ist nicht möglich.  

Date: 2024-09-12 18:39:43
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.405.112.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.24010.10
Fehlercode: 0x80240022
Fehlerbeschreibung: Die Suche des Programms nach Definitionsaktualisierungen ist nicht möglich.  

Date: 2024-02-17 14:20:13
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.403.824.0
Update Source: Microsoft Center zum Schutz vor Schadsoftware
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.23110.2
Fehlercode: 0x80072ee7
Fehlerbeschreibung: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.  

Date: 2024-02-17 14:20:13
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.403.824.0
Update Source: Microsoft Center zum Schutz vor Schadsoftware
Sicherheitstyp: AntiSpyware
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.23110.2
Fehlercode: 0x80072ee7
Fehlerbeschreibung: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.  

Date: 2024-02-17 14:20:13
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.403.824.0
Update Source: Microsoft Center zum Schutz vor Schadsoftware
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.23110.2
Fehlercode: 0x80072ee7
Fehlerbeschreibung: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.  

CodeIntegrity:
===============
Date: 2024-09-12 19:14:49
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bitdefender\Bitdefender Security\bdamsi\dlls_267082758074159632\antimalware_provider64.dll that did not meet the Windows signing level requirements. 


==================== Speicherinformationen =========================== 

BIOS: AMI F.24 01/04/2024
Hauptplatine: HP 89B5
Prozessor: 12th Gen Intel(R) Core(TM) i5-12400F
Prozentuale Nutzung des RAM: 31%
Installierter physikalischer RAM: 32523.77 MB
Verfügbarer physikalischer RAM: 22145.52 MB
Summe virtueller Speicher: 34571.77 MB
Verfügbarer virtueller Speicher: 23536.63 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:442.49 GB) (Free:322.09 GB) (Model: NVMe WD_BLACK SN770 1TB) NTFS
Drive d: (DATEN) (Fixed) (Total:931.5 GB) (Free:833.61 GB) (Model: Samsung SSD 870 EVO 1TB) NTFS
Drive e: (SPIELE) (Fixed) (Total:488.28 GB) (Free:264.99 GB) (Model: NVMe WD_BLACK SN770 1TB) NTFS

\\?\Volume{2656fefa-b9ba-4119-abe5-ac67a3730b32}\ () (Fixed) (Total:0.63 GB) (Free:0.08 GB) NTFS
\\?\Volume{3fdf569a-ddd7-4667-8389-aad9879d19f1}\ () (Fixed) (Total:0.09 GB) (Free:0.03 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt =======================
         

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 09-09-2024
durchgeführt von cege_ (Administrator) auf CEGE-PC (HP Victus by HP 15L Gaming Desktop TG02-0xxx) (12-09-2024 19:23:01)
Gestartet von D:\Users\cege_\Downloads\Programme\FRST64.exe
Geladene Profile: cege_ & _ashbackuppb_
Plattform: Microsoft Windows 11 Pro Version 23H2 22631.4169 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12132.3.2017.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(C:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\backupService-abpb.exe ->) () [Datei ist nicht signiert] C:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\oxHelper.exe
(C:\Program Files\Bitdefender Agent\ProductAgentService.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\27.0.1.285\DiscoverySrv.exe
(C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\bdagent.exe
(C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe
(C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bduserhost.exe <3>
(C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe ->) (S.C. BITDEFENDER S.R.L. -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\wsccommunicator.exe
(C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(C:\Program Files\WindowsApps\AppleInc.iCloud_15.2.157.0_x64__nzyj5cx40ttqa\iCloud\iCloudHome.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc) C:\Program Files\WindowsApps\AppleInc.iCloud_15.2.157.0_x64__nzyj5cx40ttqa\iCloud\iCloudCKKS.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_524.23700.10.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\128.0.2739.67\msedgewebview2.exe <6>
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_98792a9ca78941b9\x64\SysInfoCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_98792a9ca78941b9\x64\BridgeCommunication.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_helper.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2408.5.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe
(explorer.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnapp.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <11>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE
(Gen Digital Inc. -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\timeout.exe <2>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(PrintCtrl.exe ->) (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe <2>
(ROCCAT GmbH) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.exe
(SECOMN64.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOCL64.exe
(services.exe ->) (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Ashampoo GmbH & Co. KG -> ) C:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\backupService-abpb.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\redline\bdredline.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\Safepay\bdservicehost.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe <3>
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnService.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Get Aura Inc -> AnchorFree Inc.) C:\Program Files\Bitdefender\Bitdefender VPN\UnifiedSDK.Service\UnifiedSDK.Service.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_7dcf4ebd9d1b4772\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_98792a9ca78941b9\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_98792a9ca78941b9\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_98792a9ca78941b9\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_98792a9ca78941b9\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpomencustomcapcomp.inf_amd64_f1b47696babae655\x64\OmenCap\OmenCap.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_191d9fb378307f35\ipfsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_74e28d819fb21cc3\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Microsoft Update Health Tools\uhssvc.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvhdci.inf_amd64_9f205e7d8efa92c6\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (O&O Software GmbH -> O&O Software GmbH) C:\Program Files\OO Software\SafeErase\Shared\SafeEraseAgent\SafeEraseAgent.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9d3a92437ffb40b7\RtkAudUService64.exe <2>
(services.exe ->) (Samsung Electronics Co., Ltd. -> Clonix & CottonCandy) C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(sihost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.2.157.0_x64__nzyj5cx40ttqa\iCloud\iCloudDrive.exe
(sihost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.2.157.0_x64__nzyj5cx40ttqa\iCloud\iCloudHome.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24081.55.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.2.157.0_x64__nzyj5cx40ttqa\iCloud\ApplePhotoStreams.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.2.157.0_x64__nzyj5cx40ttqa\iCloud\APSDaemon.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.2.157.0_x64__nzyj5cx40ttqa\iCloud\iCloudOutlookConfig64.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple, Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.2.157.0_x64__nzyj5cx40ttqa\iCloud\secd.exe
(svchost.exe ->) (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) C:\Users\cege_\AppData\Roaming\SEO\SEO.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.4.0.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mmgaserver.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vdsldr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe <4>
konnte nicht auf den Prozess zugreifen -> vmmemCmZygote

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Ashampoo Backup PB] => C:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\backupClient-abpb.exe [955240 2023-12-05] (Ashampoo GmbH & Co. KG -> )
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security App\bdagent.exe [1088232 2024-09-06] (Bitdefender SRL -> Bitdefender)
HKLM\...\Run: [KeePass 2 PreLoad] => C:\Program Files\KeePass Password Safe 2\KeePass.exe [3308928 2024-06-01] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
HKLM\...\Run: [BdVpnApp] => C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe [498592 2024-08-08] (Bitdefender SRL -> Bitdefender)
HKLM-x32\...\Run: [RoccatKonePure] => C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.EXE [561152 2014-01-20] (ROCCAT GmbH) [Datei ist nicht signiert]
HKU\S-1-5-21-245825207-2728911537-4173236764-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45120304 2024-08-16] (Gen Digital Inc. -> Piriform Software Ltd)
HKU\S-1-5-21-245825207-2728911537-4173236764-1001\...\Run: [MicrosoftEdgeAutoLaunch_723DBCC29151A239E54B2790086662AB] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3741256 2024-09-05] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-245825207-2728911537-4173236764-1004\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45120304 2024-08-16] (Gen Digital Inc. -> Piriform Software Ltd)
HKU\S-1-5-21-245825207-2728911537-4173236764-1004\...\Run: [MicrosoftEdgeAutoLaunch_1DCFC33FDD0C888F6A149A13AC8253CE] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3741256 2024-09-05] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\ActMaskR: C:\Windows\System32\spool\prtprocs\x64\ActPrint.dll [51848 2018-09-14] (ActMask Group Co., Ltd -> ActMask Co.,Ltd)
HKLM\...\Windows x64\Print Processors\Canon TS7400 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDH7.DLL [525824 2021-09-12] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS7400 series: C:\Windows\system32\CNMLMH7.DLL [962560 2021-09-12] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{052EB454-9F19-CB42-7875-807F79F311C4}] -> C:\Program Files (x86)\CCleaner Browser\Application\127.0.26097.121\Installer\chrmstp.exe [2024-08-28] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\128.0.6613.137\Installer\chrmstp.exe [2024-09-12] (Google LLC -> Google LLC)
Startup: C:\Users\cege_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SearchEngineOptimizer.lnk [2024-09-12] <==== ACHTUNG
ShortcutTarget: SearchEngineOptimizer.lnk -> C:\Users\cege_\AppData\Roaming\SEO\SEO.exe (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) <==== ACHTUNG
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {12F68A84-D873-4844-A9AA-4CC8412FE5DE} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1563080 2024-07-31] (Adobe Inc. -> Adobe Inc.)
Task: {F732F211-CFF7-419A-BB29-12ADFF57032E} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\27.0.1.285\WatchDog.exe [1155888 2024-08-23] (Bitdefender SRL -> Bitdefender) -> C:\Program Files\Bitdefender Agent\27.0.1.285\repair
Task: {839825E9-FCF5-4BA9-8540-379112DE9E64} - System32\Tasks\CCleaner Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [2977264 2024-08-19] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
Task: {110570E9-9B46-4A28-A561-79932C8B33EE} - System32\Tasks\CCleaner Browser Heartbeat Task (Logon) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [2977264 2024-08-19] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
Task: {DF103E2B-1663-4B92-9DF5-42547FA37921} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [829408 2024-08-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {DF232151-25C8-4BE8-A472-DED49AC56C95} - System32\Tasks\CCleanerBrowserProtectS-1-5-21-245825207-2728911537-4173236764-1001 => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowserProtect.exe [1717416 2024-05-01] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
Task: {A52CB666-0B23-467B-ABA9-715A6540B468} - System32\Tasks\CCleanerBrowserProtectS-1-5-21-245825207-2728911537-4173236764-1004 => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowserProtect.exe [1717416 2024-05-01] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
Task: {E407836D-303B-428E-BBC6-C03C012620E6} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [5075248 2024-08-16] (Gen Digital Inc. -> Gen Digital Inc. All rights reserved.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "797cb533-0d3c-4027-972f-55567aa4c17b" --version "6.27.11214" --silent
Task: {11C1EA95-A991-4406-B1E2-6842A8BE16E7} - System32\Tasks\CCleanerSkipUAC - cege_ => C:\Program Files\CCleaner\CCleaner.exe [39072560 2024-08-16] (Gen Digital Inc. -> Piriform Software Ltd)
Task: {46F60DF8-7F88-4916-98AD-BC6ECE0313D2} - System32\Tasks\CCleanerSkipUAC - Jana => C:\Program Files\CCleaner\CCleaner.exe [39072560 2024-08-16] (Gen Digital Inc. -> Piriform Software Ltd)
Task: {CC1E998D-F2D1-46D8-A4D4-169609EFCD85} - System32\Tasks\CCleanerUpdateTaskMachineCore => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208168 2023-06-19] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {F95A354B-D94C-49D6-99C7-BEBC26E97AAC} - System32\Tasks\CCleanerUpdateTaskMachineUA => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208168 2023-06-19] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {A834E383-F40B-4B16-B8CE-9F4751A743DC} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{B2FC6007-97B5-480E-9703-C00CFE21CB71} => C:\Program Files (x86)\Google\GoogleUpdater\130.0.6679.0\updater.exe [4884584 2024-08-26] (Google LLC -> Google LLC)
Task: {820525B4-BD47-423F-AB81-DC915464A970} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2024-07-25] (HP Inc. -> HP Inc.)
Task: {ACB5F903-5BB8-4607-BCA7-2997C44BBEC3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-07-25] (HP Inc. -> HP Inc.)
Task: {17E10CCA-D268-4E17-A2B2-2C6BD53E2298} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-07-25] (HP Inc. -> HP Inc.)
Task: {C7D5ED9F-4011-4331-9EEB-BA2C71E86ECA} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28605656 2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {E110FB9E-3C08-487F-889D-A8081951ACD3} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28605656 2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {D3D426C8-7AB5-4ACA-A365-D15BCB676F52} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312520 2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {37A340CD-92F2-4B7D-B63F-31F34CADD076} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312520 2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {08254E39-156F-4C88-A8D6-082724E9E01A} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [187024 2024-08-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {BC41BFA1-E756-4235-B461-4E9DC7CFEACB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-09-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3619BBB9-5CCC-40DA-A33D-E6C032975CAA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-09-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F8A56625-438A-490A-9422-884CC009EC60} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-09-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8FBFC3C3-EE9B-4C5E-AA48-BF946328864E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-09-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {786EC98F-E6D1-4B90-AD41-C3D095745542} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [672328 2024-09-12] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {211A0E0D-8973-4E0E-8459-76A3158F8D9F} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-245825207-2728911537-4173236764-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [672328 2024-09-12] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {5FAFD789-93DC-47DB-BCFE-4B9E119682BC} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34376 2024-09-12] (Mozilla Corporation -> Mozilla Foundation)
Task: {59981DF0-FA9E-4591-BEAE-49BE10468881} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1277480 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {DC50C3B0-7702-42B8-BFD1-CBD9D46873D0} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3347496 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {99EC4B54-F410-41A2-A323-690BB38A716F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646696 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {370DB305-C38E-4206-99D0-686DCABBF699} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FC468702-5471-4ACF-B454-D96D16B901B8} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B05A89D1-6DB1-4EBE-BC81-968E168D5EF5} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4D3AFBF2-8F40-4E9D-A2C9-6AE9E3C51494} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {15B129C9-A29C-4B78-9F3F-348DA8DDC13A} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EEA59D17-80C1-4E29-8C4D-0D7230BFD02F} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E4997DF2-31A2-4218-930D-0787149CEF9F} - System32\Tasks\RtkAudUService64_BG => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9d3a92437ffb40b7\RtkAudUService64.exe [1994024 2023-12-10] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {6E860B70-F959-4AC6-82E4-FA7636FE9558} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [140405056 2024-03-14] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) -> C:\Program Files (x86)\Samsung\Samsung Magician\\--disable-gpu-sandbox /AUTOHIDE
Task: {89BA90F7-1D0D-4469-853D-76AA0EEA5B07} - System32\Tasks\SEO => C:\Users\cege_\AppData\Roaming\SEO\SEO.exe [11406432 2024-09-12] (BUSINESS CONVERS TRACK S.R.L. -> Business Convers Track S.R.L.) <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.188.1
Tcpip\..\Interfaces\{3dab7169-283b-4724-8cb3-c643ed3e92ea}: [DhcpNameServer] 192.168.188.1
Tcpip\..\Interfaces\{3dab7169-283b-4724-8cb3-c643ed3e92ea}: [DhcpDomain] fritz.box

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\cege_\AppData\Local\Microsoft\Edge\User Data\Default [2024-09-12]
Edge Extension: (Yoroi) - C:\Users\cege_\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\akoiaibnepcedcplijmiamnaigbepmcb [2024-09-12]
Edge Extension: (Bitdefender Anti-tracker) - C:\Users\cege_\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dbconhplchnbippmjabbcedokimacfjl [2024-07-26]
Edge Extension: (Google Docs Offline) - C:\Users\cege_\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-09-12]
Edge Extension: (Edge relevant text changes) - C:\Users\cege_\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-14]
Edge Extension: (G DATA WebProtection) - C:\Users\cege_\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pehnahjhohlhchmcpcjcfnafkebenbgn [2024-06-13]
Edge HKLM-x32\...\Edge\Extension: [dbconhplchnbippmjabbcedokimacfjl]

FireFox:
========
FF DefaultProfile: 7e57grht.default
FF ProfilePath: C:\Users\cege_\AppData\Roaming\Mozilla\Firefox\Profiles\7e57grht.default [2024-09-12]
FF ProfilePath: C:\Users\cege_\AppData\Roaming\Mozilla\Firefox\Profiles\guedlqow.default-release [2024-09-12]
FF Notifications: Mozilla\Firefox\Profiles\guedlqow.default-release -> hxxps://www.tui.com
FF Extension: (Yoroi) - C:\Users\cege_\AppData\Roaming\Mozilla\Firefox\Profiles\guedlqow.default-release\Extensions\{530f7c6c-6077-4703-8f71-cb368c663e35}.xpi [2024-08-15]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security App\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security App\bdtbext [2024-01-30] [] [ist nicht signiert]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security App\bdtbext
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-09-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=3 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1636.4\npCCleanerBrowserUpdate3.dll [2023-06-19] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=9 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1636.4\npCCleanerBrowserUpdate3.dll [2023-06-19] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2024-02-17] <==== ACHTUNG (Zeigt auf eine *.cfg Datei)
FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2024-02-17] <==== ACHTUNG

Chrome: 
=======
CHR Profile: C:\Users\cege_\AppData\Local\Google\Chrome\User Data\Default [2024-09-12]
CHR DownloadDir: D:\Users\cege_
CHR Notifications: Default -> hxxps://de.scalable.capital; hxxps://regpop.ashampoo.com; hxxps://www.holidaycheck.de; hxxps://www.youtube.com
CHR HomePage: Default -> hxxps://www.bing.com?pc=U316&form=CHROMN
CHR DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> duckduckgo.com
CHR DefaultNewTabURL: Default -> hxxps://duckduckgo.com/chrome_newtab
CHR DefaultSuggestURL: Default -> hxxps://duckduckgo.com/ac/?q={searchTerms}&type=list
CHR Extension: (Solflare Wallet) - C:\Users\cege_\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhhhlbepdkbapadjdnnojkbgioiodbic [2024-08-21]
CHR Extension: (DuckDuckGo) - C:\Users\cege_\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2024-07-30]
CHR Extension: (Yoroi) - C:\Users\cege_\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffnbelfdoeiohenkjibnmadjiehjhajb [2024-09-06]
CHR Extension: (Google Docs Offline) - C:\Users\cege_\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-08-30]
CHR Extension: (Bitdefender Anti-tracker) - C:\Users\cege_\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2024-07-19]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\cege_\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-06-11]
CHR HKU\S-1-5-21-245825207-2728911537-4173236764-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-245825207-2728911537-4173236764-1004\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-07-31] (Adobe Inc. -> Adobe Inc.)
R3 AfVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\UnifiedSDK.Service\UnifiedSDK.Service.exe [69128688 2024-06-14] (Get Aura Inc -> AnchorFree Inc.)
R2 ashbackuppb; c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\backupService-abpb.exe [39272 2023-12-05] (Ashampoo GmbH & Co. KG -> )
S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [2569352 2024-08-02] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
R2 BDAppSrv; C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe [851648 2024-09-06] (Bitdefender SRL -> Bitdefender)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [849328 2024-09-06] (Bitdefender SRL -> Bitdefender)
R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [849328 2024-09-06] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2963856 2023-07-20] (Bitdefender SRL -> Bitdefender)
R2 bdredline_agent; C:\Program Files\Bitdefender Agent\redline\bdredline.exe [2574864 2023-07-20] (Bitdefender SRL -> Bitdefender)
R2 BDSafepaySrv; C:\Program Files\Bitdefender\Bitdefender Security App\Safepay\bdservicehost.exe [849328 2024-09-06] (Bitdefender SRL -> Bitdefender)
R2 bdvpnservice; C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnservice.exe [512016 2024-08-08] (Bitdefender SRL -> Bitdefender)
S2 ccleaner; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208168 2023-06-19] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
S3 CCleanerBrowserElevationService; C:\Program Files (x86)\CCleaner Browser\Application\127.0.26097.121\elevation_service.exe [1651840 2024-08-19] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
S3 ccleanerm; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208168 2023-06-19] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1086256 2024-08-16] (Gen Digital Inc. -> Piriform Software Ltd)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14042624 2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
R2 CMigrationService; C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe [761664 2024-03-14] (Samsung Electronics Co., Ltd. -> Clonix & CottonCandy)
R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [133080 2021-01-11] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd)
R2 dptftcs; C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_191d9fb378307f35\ipfsvc.exe [557096 2023-06-23] (Intel Corporation -> Intel Corporation)
S3 EAAntiCheatService; C:\Program Files\EA\AC\eaanticheat.gameservice.exe [89292568 2024-08-13] (Electronic Arts, Inc. -> Electronic Arts)
S3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [13772392 2024-08-09] (Electronic Arts, Inc. -> Electronic Arts)
R2 HPAppHelperCap; C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_98792a9ca78941b9\x64\AppHelperCap.exe [927840 2024-08-18] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_98792a9ca78941b9\x64\DiagsCap.exe [926200 2024-08-18] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_98792a9ca78941b9\x64\NetworkCap.exe [922216 2024-08-18] (HP Inc. -> HP Inc.)
R2 HPOmenCap; C:\Windows\System32\DriverStore\FileRepository\hpomencustomcapcomp.inf_amd64_f1b47696babae655\x64\OmenCap\OmenCap.exe [755152 2023-10-19] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_98792a9ca78941b9\x64\SysInfoCap.exe [927336 2024-08-18] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_7dcf4ebd9d1b4772\x64\TouchpointAnalyticsClientService.exe [569008 2024-05-07] (HP Inc. -> HP Inc.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [446360 2022-04-27] (Canon Inc. -> )
S2 Intel(R) Platform License Manager Service; C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
R2 ipfsvc; C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_uf.exe [2778760 2022-09-19] (Intel Corporation -> Intel Corporation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe [1427024 2024-09-12] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nvhdci.inf_amd64_9f205e7d8efa92c6\Display.NvContainer\NVDisplay.Container.exe [1275528 2024-09-06] (NVIDIA Corporation -> NVIDIA Corporation)
R2 OO SafeEraseAgent; C:\Program Files\OO Software\SafeErase\Shared\SafeEraseAgent\SafeEraseAgent.exe [25632 2022-06-08] (O&O Software GmbH -> O&O Software GmbH)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [701808 2024-08-23] (Bitdefender SRL -> Bitdefender)
R2 SamsungMagicianSVC; C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe [445760 2024-03-14] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [530448 2024-09-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [288912 2024-09-06] (Bitdefender SRL -> Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [849328 2024-09-06] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe [3199648 2024-09-12] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe [133704 2024-09-12] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [39272 2023-06-27] (Apple Inc. -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [55608 2023-06-27] (Apple Inc. -> Apple Inc.)
R1 atc; C:\Windows\System32\DRIVERS\atc.sys [7190480 2024-09-06] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender S.R.L. Bucharest, ROMANIA)
S3 atvi-brynhildr; C:\ProgramData\Battle.net_components\brynhildr_odin\brynhildr.sys [2336008 2023-06-12] (Activision Publishing Inc -> Activision Blizzard, Inc.)
R2 BdDci4; C:\Windows\system32\DRIVERS\bddci4.sys [922672 2024-07-15] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [24568 2023-05-08] (Microsoft Windows Early Launch Anti-Malware Publisher -> Bitdefender)
R3 bdprivmon; C:\Windows\system32\DRIVERS\bdprivmon.sys [49200 2023-08-09] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender SRL)
S3 bduefiscan; C:\Windows\system32\DRIVERS\bduefiscan.sys [42432 2024-09-06] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R1 bdvpn_netfilter; C:\Windows\System32\drivers\bdvpn_netfilter.sys [94600 2023-11-12] (Pango Inc. -> Pango Inc)
S3 cthda; C:\Windows\system32\drivers\cthda.sys [1090416 2021-01-11] (Creative Technology Ltd -> Creative Technology Ltd)
S3 cthdb; C:\Windows\system32\DRIVERS\cthdb.sys [53616 2021-01-11] (Creative Technology Ltd -> Creative Technology Ltd)
R0 fse; C:\Windows\System32\drivers\fse.sys [218488 2024-09-11] (Microsoft Windows -> Microsoft Corporation)
S3 FXVAD; C:\Windows\system32\drivers\fxvad.sys [326656 2022-04-15] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R1 Gemma; C:\Windows\System32\DRIVERS\gemma.sys [1490896 2024-09-06] (Microsoft Windows Hardware Compatibility Publisher -> BitDefender S.R.L. Bucharest, ROMANIA)
R3 HPCustomCapDriver; C:\Windows\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R3 HPOmenCustomCapDriver; C:\Windows\System32\DriverStore\FileRepository\hpomencustomcapdriver.inf_amd64_326f2e1d16385daf\x64\hpomencustomcapdriver.sys [24960 2022-09-02] (HP Inc. -> HP Inc.)
R3 iaLPSS2_I2C_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-18] (Intel Corporation -> Intel Corporation)
R0 iaStorVD; C:\Windows\System32\drivers\iaStorVD.sys [1605320 2022-12-23] (Intel Corporation -> Intel Corporation)
R2 Ignisv2; C:\Windows\System32\DRIVERS\ignisv2.sys [849968 2024-05-30] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R3 IntelGNA; C:\Windows\System32\DriverStore\FileRepository\gna.inf_amd64_04d4eecc5838a558\gna.sys [88784 2022-08-10] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\Windows\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_cf69bf74fab8a0f5\ipf_acpi.sys [87176 2022-09-19] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_cpu.sys [80520 2022-09-19] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_lf.sys [443528 2022-09-19] (Intel Corporation -> Intel Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [36600 2015-11-15] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 NvModuleTracker; C:\Windows\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [47240 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
S3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
R1 rtf64; C:\Windows\system32\DRIVERS\rtf64x64.sys [67496 2023-03-23] (Realtek Semiconductor Corp. -> Realtek)
R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [629184 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R0 vlflt; C:\Windows\System32\DRIVERS\vlflt.sys [1432528 2024-07-15] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S3 vmbusproxy; C:\Windows\system32\drivers\vmbusproxy.sys [94208 2023-12-04] (Microsoft Windows -> )
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [22080 2024-09-12] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [602504 2024-09-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105864 2024-09-12] (Microsoft Windows -> Microsoft Corporation)
S3 wintun; C:\Windows\System32\drivers\wintun.sys [29592 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
U3 aswbdisk; kein ImagePath
S3 EAAntiCheat; system32\drivers\eaanticheat.sys [X]
S3 GENERICDRV; \??\C:\Windows\TEMP\AMI\5.06\amigendrv64.sys [X] <==== ACHTUNG

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-09-12 19:22 - 2024-09-12 19:23 - 000000000 ____D C:\FRST
2024-09-12 19:09 - 2024-09-12 19:09 - 000722420 _____ C:\Windows\system32\perfh007.dat
2024-09-12 19:09 - 2024-09-12 19:09 - 000149496 _____ C:\Windows\system32\perfc007.dat
2024-09-12 18:30 - 2024-09-12 19:06 - 000000000 ____D C:\ProgramData\Adaware PC Cleaner
2024-09-12 11:55 - 2024-09-12 18:20 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-09-12 11:40 - 2024-09-12 11:40 - 000003526 _____ C:\Windows\system32\Tasks\SEO
2024-09-12 11:24 - 2017-04-04 15:13 - 000088984 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\amdkmpfd.sys
2024-09-12 11:10 - 2024-09-12 11:40 - 000000000 ____D C:\Users\cege_\AppData\Roaming\SEO
2024-09-11 18:34 - 2024-09-11 18:36 - 000000000 ___HD C:\$WinREAgent
2024-09-11 17:58 - 2024-09-11 17:58 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2024-09-11 17:56 - 2024-09-06 05:43 - 000121872 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2024-09-11 17:53 - 2024-09-06 14:59 - 025312776 _____ C:\Windows\system32\nvidia-pcc.exe
2024-09-11 17:53 - 2024-09-06 14:59 - 002040680 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2024-09-11 17:53 - 2024-09-06 14:59 - 002040680 _____ C:\Windows\system32\vulkaninfo.exe
2024-09-11 17:53 - 2024-09-06 14:59 - 001584008 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-09-11 17:53 - 2024-09-06 14:59 - 001584008 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2024-09-11 17:53 - 2024-09-06 14:59 - 001446760 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2024-09-11 17:53 - 2024-09-06 14:59 - 001446760 _____ C:\Windows\system32\vulkan-1.dll
2024-09-11 17:53 - 2024-09-06 14:59 - 001296744 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2024-09-11 17:53 - 2024-09-06 14:59 - 001296744 _____ C:\Windows\SysWOW64\vulkan-1.dll
2024-09-11 17:53 - 2024-09-06 14:59 - 000477840 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2024-09-11 17:53 - 2024-09-06 14:59 - 000374280 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2024-09-11 17:53 - 2024-09-06 14:56 - 001079432 _____ (NVIDIA Corporation) C:\Windows\system32\nvml.dll
2024-09-11 17:53 - 2024-09-06 14:56 - 000669816 _____ (NVIDIA Corporation) C:\Windows\system32\nvofapi64.dll
2024-09-11 17:53 - 2024-09-06 14:56 - 000505992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvofapi.dll
2024-09-11 17:53 - 2024-09-06 14:55 - 071847568 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2024-09-11 17:53 - 2024-09-06 14:55 - 002178728 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2024-09-11 17:53 - 2024-09-06 14:55 - 001629304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2024-09-11 17:53 - 2024-09-06 14:55 - 001546896 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2024-09-11 17:53 - 2024-09-06 14:55 - 001202800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2024-09-11 17:53 - 2024-09-06 14:55 - 001034888 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2024-09-11 17:53 - 2024-09-06 14:55 - 000856696 _____ (NVIDIA Corporation) C:\Windows\system32\nvidia-smi.exe
2024-09-11 17:53 - 2024-09-06 14:55 - 000797216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2024-09-11 17:53 - 2024-09-06 14:54 - 016199824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2024-09-11 17:53 - 2024-09-06 14:54 - 014270496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2024-09-11 17:53 - 2024-09-06 14:54 - 006914056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2024-09-11 17:53 - 2024-09-06 14:54 - 005349512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcudadebugger.dll
2024-09-11 17:53 - 2024-09-06 14:54 - 003788960 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2024-09-11 17:53 - 2024-09-06 14:54 - 000461456 _____ (NVIDIA Corporation) C:\Windows\system32\nvdebugdump.exe
2024-09-11 17:53 - 2024-09-06 14:53 - 005910136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2024-09-11 17:53 - 2024-09-06 14:53 - 000853536 _____ (NVIDIA Corporation) C:\Windows\system32\MCU.exe
2024-09-11 17:53 - 2024-09-06 14:52 - 007133648 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2024-09-11 17:53 - 2024-09-06 14:52 - 006212848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2024-09-11 17:53 - 2024-09-06 05:43 - 000127247 _____ C:\Windows\system32\nvinfo.pb
2024-08-30 12:55 - 2024-08-30 12:55 - 000091080 _____ C:\ProgramData\agent.update.1725015309.bdinstall.v2.bin
2024-08-30 07:48 - 2024-08-30 07:48 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2024-08-15 17:50 - 2024-08-15 17:50 - 000000000 ____D C:\Users\cege_\AppData\Local\BattlefieldGameData.kin-release.Win32
2024-08-14 22:07 - 2024-08-14 22:07 - 000026169 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-08-14 22:06 - 2024-08-14 22:06 - 000026169 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-09-12 19:17 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-09-12 19:12 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemTemp
2024-09-12 19:09 - 2023-06-10 21:15 - 001662900 _____ C:\Windows\system32\PerfStringBackup.INI
2024-09-12 19:09 - 2022-05-07 07:22 - 000000000 ____D C:\Windows\INF
2024-09-12 19:06 - 2023-06-12 11:18 - 000000000 ____D C:\Program Files\CCleaner
2024-09-12 19:02 - 2023-10-30 13:34 - 000000000 ___RD C:\Users\cege_\iCloudDrive
2024-09-12 19:02 - 2023-10-06 21:05 - 000012288 ___SH C:\DumpStack.log.tmp
2024-09-12 19:02 - 2023-10-06 21:05 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-09-12 19:02 - 2023-10-06 21:05 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-09-12 19:02 - 2023-06-11 23:25 - 000000000 ____D C:\Users\cege_\AppData\Roaming\Samsung Magician
2024-09-12 19:02 - 2023-06-10 21:13 - 000000000 ____D C:\ProgramData\NVIDIA
2024-09-12 19:02 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\ServiceState
2024-09-12 19:01 - 2022-05-07 07:17 - 000786432 _____ C:\Windows\system32\config\BBI
2024-09-12 18:56 - 2023-10-06 21:06 - 000001623 _____ C:\Windows\system32\config\VSMIDK
2024-09-12 18:55 - 2023-06-10 21:25 - 000000000 ____D C:\Users\cege_\AppData\Local\D3DSCache
2024-09-12 18:52 - 2023-10-06 21:05 - 000000000 ____D C:\Windows\system32\Drivers\wd
2024-09-12 18:52 - 2022-05-07 07:17 - 000131072 _____ C:\Windows\system32\config\ELAM
2024-09-12 18:34 - 2023-10-06 21:05 - 000354000 _____ C:\Windows\system32\FNTCACHE.DAT
2024-09-12 18:32 - 2023-10-06 22:04 - 000000000 ____D C:\Windows\Panther
2024-09-12 18:20 - 2023-06-22 12:23 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-09-12 18:18 - 2023-06-22 12:23 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-09-12 18:16 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\AppReadiness
2024-09-12 12:24 - 2023-06-22 12:23 - 000000965 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-09-12 12:24 - 2023-06-22 12:23 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2024-09-12 11:21 - 2023-06-19 14:34 - 000000000 ____D C:\Users\cege_\AppData\Roaming\Microsoft\Word
2024-09-12 10:14 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-09-12 10:13 - 2023-10-06 21:06 - 000000000 ____D C:\ProgramData\Packages
2024-09-12 10:13 - 2023-06-10 21:26 - 000000000 ____D C:\Users\cege_\AppData\Local\PlaceholderTileLogoFolder
2024-09-12 10:13 - 2023-06-10 21:25 - 000000000 ____D C:\Users\cege_\AppData\Local\Packages
2024-09-12 10:05 - 2023-06-10 21:28 - 000000000 ____D C:\Windows\system32\MRT
2024-09-12 10:03 - 2023-06-10 21:28 - 199688632 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-09-12 08:01 - 2023-06-12 16:03 - 000000000 ____D C:\Users\cege_\AppData\Roaming\Microsoft\Excel
2024-09-12 07:18 - 2023-06-11 21:33 - 000002199 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-09-11 18:48 - 2023-09-27 13:02 - 000000000 ____D C:\Windows\system32\Microsoft-Edge-WebView
2024-09-11 18:48 - 2023-08-05 16:34 - 000000000 ____D C:\Windows\system32\HvsiSettingsProviders
2024-09-11 18:48 - 2022-05-07 12:39 - 000000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
2024-09-11 18:48 - 2022-05-07 12:39 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ___SD C:\Windows\SysWOW64\F12
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ___SD C:\Windows\system32\F12
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\WUModels
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\Dism
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemResources
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\oobe
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\HealthAttestationClient
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\Dism
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\ShellExperiences
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\Provisioning
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\PolicyDefinitions
2024-09-11 18:48 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\bcastdvr
2024-09-11 18:40 - 2022-05-07 07:17 - 000000000 ____D C:\Windows\CbsTemp
2024-09-11 18:38 - 2023-06-10 21:07 - 003212800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2024-09-11 18:10 - 2023-06-19 14:50 - 000000000 ____D C:\Users\cege_\AppData\Roaming\com.adobe.dunamis
2024-09-11 18:10 - 2023-06-19 14:33 - 000000000 ____D C:\Users\cege_\AppData\Local\Adobe
2024-09-11 18:10 - 2023-06-10 21:25 - 000000000 ____D C:\Users\cege_\AppData\Roaming\Adobe
2024-09-11 18:00 - 2023-06-19 14:38 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2024-09-11 18:00 - 2023-06-19 14:37 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-09-11 17:58 - 2023-06-10 21:13 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2024-09-11 17:57 - 2023-06-10 21:25 - 000000000 ____D C:\Users\cege_\AppData\Local\NVIDIA
2024-09-09 22:02 - 2023-10-06 21:05 - 000003756 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-09-09 22:02 - 2023-10-06 21:05 - 000003632 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-09-06 19:43 - 2023-06-19 14:39 - 000000000 ____D C:\ProgramData\CanonIJPLM
2024-09-06 19:39 - 2023-10-06 21:05 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-09-06 10:43 - 2023-09-14 17:41 - 000000000 ____D C:\Users\cege_\AppData\Roaming\Zoom
2024-09-06 09:15 - 2023-06-12 11:18 - 000000666 _____ C:\Windows\Tasks\CCleanerCrashReporting.job
2024-09-06 08:31 - 2024-02-17 15:59 - 001490896 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\Windows\system32\Drivers\gemma.sys
2024-09-06 08:29 - 2024-02-17 15:59 - 000042432 _____ (Bitdefender) C:\Windows\system32\Drivers\bduefiscan.sys
2024-09-06 08:28 - 2024-02-17 15:59 - 007190480 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\Windows\system32\Drivers\atc.sys
2024-08-30 12:55 - 2024-02-17 15:58 - 000003846 _____ C:\Windows\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2024-08-30 12:55 - 2024-02-17 15:56 - 000000000 ____D C:\Program Files\Bitdefender Agent
2024-08-30 10:03 - 2023-06-12 15:04 - 000000000 ____D C:\Users\cege_\AppData\Roaming\KeePass
2024-08-30 07:49 - 2023-06-19 21:54 - 000000000 ____D C:\Users\cege_\AppData\Local\CrashDumps
2024-08-30 07:48 - 2023-06-12 15:05 - 000000000 ____D C:\Program Files\Microsoft Office
2024-08-30 07:48 - 2023-06-12 11:18 - 000003936 _____ C:\Windows\system32\Tasks\CCleaner Update
2024-08-30 07:48 - 2023-06-12 11:18 - 000003380 _____ C:\Windows\system32\Tasks\CCleanerCrashReporting
2024-08-28 21:47 - 2023-06-19 21:42 - 000002379 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner Browser.lnk
2024-08-28 21:47 - 2023-06-19 21:42 - 000000000 ____D C:\Program Files (x86)\CCleaner Browser
2024-08-26 07:27 - 2023-06-13 19:51 - 000000000 ____D C:\Program Files\PortfolioPerformance
2024-08-18 12:19 - 2023-11-20 20:11 - 000000000 ____D C:\Users\cege_\AppData\Roaming\vlc
2024-08-18 12:13 - 2023-06-12 16:03 - 000000000 ____D C:\Users\cege_\AppData\Roaming\Microsoft\Office
2024-08-15 20:02 - 2023-06-19 21:47 - 000000000 ____D C:\Users\cege_\AppData\Roaming\Ledger Live
2024-08-15 19:03 - 2023-06-19 21:47 - 000000000 ____D C:\Program Files\Ledger Live
2024-08-15 19:02 - 2024-03-30 00:26 - 000000000 ____D C:\Users\cege_\AppData\Roaming\Firefly Shimmer
2024-08-15 19:02 - 2024-03-30 00:26 - 000000000 ____D C:\Program Files\Firefly Shimmer
2024-08-15 19:01 - 2023-10-17 19:31 - 000000000 ____D C:\Program Files\Firefly
2024-08-15 19:01 - 2023-06-19 21:55 - 000000000 ____D C:\Users\cege_\AppData\Roaming\Firefly
2024-08-15 17:50 - 2023-10-12 19:45 - 000000000 ____D C:\ProgramData\Packer
2024-08-15 17:39 - 2023-10-12 19:45 - 000000000 ____D C:\Users\cege_\AppData\Roaming\EAAntiCheat.Installer.Tool
2024-08-15 17:39 - 2023-10-12 19:45 - 000000000 ____D C:\Program Files\EA
2024-08-15 15:07 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-08-14 22:29 - 2022-05-07 12:39 - 000000000 ___SD C:\Windows\system32\AppV
2024-08-14 22:29 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\UUS
2024-08-14 22:29 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2024-08-14 22:29 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemApps
2024-08-14 22:29 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\WinMetadata
2024-08-14 22:29 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\Sgrm
2024-08-14 22:29 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2024-08-14 22:29 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\appraiser
2024-08-14 22:29 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\ShellComponents
2024-08-14 22:09 - 2022-05-07 07:25 - 000209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
2024-08-14 22:09 - 2022-05-07 07:24 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2023-06-15 17:29 - 2023-06-15 17:29 - 000000000 _____ () C:\Users\cege_\AppData\Roaming\gdfw.log
2023-06-15 17:29 - 2023-06-15 17:29 - 000000779 _____ () C:\Users\cege_\AppData\Roaming\gdscan.log

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

System aufräumen: unnötige und veraltete Programme deinstallieren

Bitte über Einstellungen/Apps folgende Programme/Apps deinstallieren:

• Bitdefender Agent
• Bitdefender Internet Security
• Bitdefender VPN
• CCleaner
• CCleaner Browser
• CCleaner Update Helper
• Druckerregistrierung
• Google Chrome (durch Mozilla Firefox ersetzen)

Okay. Wird gemacht und dann die Log Dateien erneut posten?
Danke schon einmal!

Wenn alles weg ist kannst du adwCleaner laufen lassen.

adwCleaner

Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei in CODE-Tags.

adwcleaner zwecks Kontrolle bitte wiederholen, falls es Funde gab.

Guten Abend,
der Adaware Cleaner hat es bereinigt!!

Vielen Dank für die Hilfe!!

Bitte die Logs posten.

Fehlende Rückmeldung
Dieses Thema wurde aus unseren Abos gelöscht. Somit bekommen wir keine Benachrichtigung über neue Antworten.
Solltest Du das Thema erneut brauchen, schicke uns bitte eine Erinnerung inklusive Link zum Thema.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Alle anderen bitte hier klicken und ein eigenes Thema erstellen!