Detected? PC Optimizer.lnk

[Skyp]

After visiting a website i got a notification from my antivirus that it found sth and blocked it. Ok, so good so far.

Then once in a while i used malwarebytes adwcleaner 8.3.0. It detected something.

Spoiler

# -------------------------------
# Malwarebytes AdwCleaner 8.3.0.0
# -------------------------------
# Build:    06-29-2021
# Database: 2021-09-09.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    10-01-2021
# Duration: 00:00:31
# OS:       Windows 10 Home
# Scanned:  31950
# Detected: 1

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

PUP.Optional.Safeapzz           C:\Windows\SysWOW64\Tasks\PC Optimizer.lnk

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.

AdwCleaner[S00].txt - [5507 octets] - [09/10/2020 18:01:14]
AdwCleaner[S01].txt - [1922 octets] - [10/10/2020 18:08:48]
AdwCleaner[C01].txt - [2038 octets] - [10/10/2020 18:10:34]
AdwCleaner[S02].txt - [1589 octets] - [10/10/2020 18:25:14]
AdwCleaner[S03].txt - [1650 octets] - [10/10/2020 18:40:43]
AdwCleaner[S04].txt - [2166 octets] - [11/10/2020 14:28:55]
AdwCleaner[S05].txt - [2227 octets] - [13/10/2020 16:24:05]
AdwCleaner[C05].txt - [2343 octets] - [13/10/2020 16:25:05]
AdwCleaner[S06].txt - [1894 octets] - [15/10/2020 15:54:19]
AdwCleaner[S07].txt - [1983 octets] - [18/10/2020 17:04:45]
AdwCleaner[C07].txt - [2153 octets] - [18/10/2020 17:04:55]
AdwCleaner[S08].txt - [2077 octets] - [18/10/2020 19:01:17]
AdwCleaner[S09].txt - [2138 octets] - [24/10/2020 13:23:53]
AdwCleaner[S10].txt - [2199 octets] - [28/10/2020 18:51:30]
AdwCleaner[S11].txt - [2260 octets] - [01/11/2020 13:32:26]
AdwCleaner[S12].txt - [2321 octets] - [04/11/2020 20:48:24]
AdwCleaner[S13].txt - [2382 octets] - [07/11/2020 17:04:16]
AdwCleaner[S14].txt - [2443 octets] - [08/11/2020 18:17:53]
AdwCleaner[S15].txt - [2504 octets] - [15/11/2020 13:58:38]
AdwCleaner[S16].txt - [2565 octets] - [19/11/2020 16:36:37]
AdwCleaner[S17].txt - [2626 octets] - [28/11/2020 12:44:43]
AdwCleaner[S18].txt - [2687 octets] - [28/11/2020 12:45:34]
AdwCleaner[S19].txt - [2748 octets] - [30/11/2020 15:35:30]
AdwCleaner[S20].txt - [2809 octets] - [30/11/2020 17:20:07]
AdwCleaner[S21].txt - [2870 octets] - [05/12/2020 21:54:24]
AdwCleaner[S22].txt - [2931 octets] - [09/12/2020 16:04:49]
AdwCleaner[S23].txt - [2992 octets] - [14/12/2020 00:07:48]
AdwCleaner[S24].txt - [3053 octets] - [17/12/2020 18:43:26]
AdwCleaner[S25].txt - [3114 octets] - [26/12/2020 20:25:23]
AdwCleaner[S26].txt - [3174 octets] - [07/03/2021 13:21:26]
AdwCleaner[S27].txt - [3235 octets] - [07/03/2021 13:22:09]
AdwCleaner[S28].txt - [3296 octets] - [10/03/2021 16:06:17]
AdwCleaner[S29].txt - [3357 octets] - [13/03/2021 17:53:37]
AdwCleaner[S30].txt - [3418 octets] - [22/03/2021 13:48:21]
AdwCleaner[S31].txt - [3480 octets] - [28/03/2021 12:45:01]
AdwCleaner[S32].txt - [3541 octets] - [28/03/2021 12:54:36]
AdwCleaner[S33].txt - [3602 octets] - [07/05/2021 15:58:02]
AdwCleaner[S34].txt - [3663 octets] - [26/05/2021 21:24:51]
AdwCleaner[S35].txt - [3724 octets] - [26/06/2021 12:18:02]
AdwCleaner[S36].txt - [3785 octets] - [08/08/2021 22:45:25]
AdwCleaner[S37].txt - [3846 octets] - [11/08/2021 16:27:13]
AdwCleaner[S38].txt - [3907 octets] - [18/09/2021 19:32:33]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S39].txt ##########
 

 

Then it got cleaned by adwcleaner

 

Spoiler

# -------------------------------
# Malwarebytes AdwCleaner 8.3.0.0
# -------------------------------
# Build:    06-29-2021
# Database: 2021-09-09.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    10-01-2021
# Duration: 00:00:01
# OS:       Windows 10 Home
# Cleaned:  1
# Failed:   0

***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

Deleted       C:\Windows\SysWOW64\Tasks\PC Optimizer.lnk

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.

*************************

[+] Delete Prefetch
[+] Delete Tracing Keys
[+] Reset Chromium Policies
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [5507 octets] - [09/10/2020 18:01:14]
AdwCleaner[S01].txt - [1922 octets] - [10/10/2020 18:08:48]
AdwCleaner[C01].txt - [2038 octets] - [10/10/2020 18:10:34]
AdwCleaner[S02].txt - [1589 octets] - [10/10/2020 18:25:14]
AdwCleaner[S03].txt - [1650 octets] - [10/10/2020 18:40:43]
AdwCleaner[S04].txt - [2166 octets] - [11/10/2020 14:28:55]
AdwCleaner[S05].txt - [2227 octets] - [13/10/2020 16:24:05]
AdwCleaner[C05].txt - [2343 octets] - [13/10/2020 16:25:05]
AdwCleaner[S06].txt - [1894 octets] - [15/10/2020 15:54:19]
AdwCleaner[S07].txt - [1983 octets] - [18/10/2020 17:04:45]
AdwCleaner[C07].txt - [2153 octets] - [18/10/2020 17:04:55]
AdwCleaner[S08].txt - [2077 octets] - [18/10/2020 19:01:17]
AdwCleaner[S09].txt - [2138 octets] - [24/10/2020 13:23:53]
AdwCleaner[S10].txt - [2199 octets] - [28/10/2020 18:51:30]
AdwCleaner[S11].txt - [2260 octets] - [01/11/2020 13:32:26]
AdwCleaner[S12].txt - [2321 octets] - [04/11/2020 20:48:24]
AdwCleaner[S13].txt - [2382 octets] - [07/11/2020 17:04:16]
AdwCleaner[S14].txt - [2443 octets] - [08/11/2020 18:17:53]
AdwCleaner[S15].txt - [2504 octets] - [15/11/2020 13:58:38]
AdwCleaner[S16].txt - [2565 octets] - [19/11/2020 16:36:37]
AdwCleaner[S17].txt - [2626 octets] - [28/11/2020 12:44:43]
AdwCleaner[S18].txt - [2687 octets] - [28/11/2020 12:45:34]
AdwCleaner[S19].txt - [2748 octets] - [30/11/2020 15:35:30]
AdwCleaner[S20].txt - [2809 octets] - [30/11/2020 17:20:07]
AdwCleaner[S21].txt - [2870 octets] - [05/12/2020 21:54:24]
AdwCleaner[S22].txt - [2931 octets] - [09/12/2020 16:04:49]
AdwCleaner[S23].txt - [2992 octets] - [14/12/2020 00:07:48]
AdwCleaner[S24].txt - [3053 octets] - [17/12/2020 18:43:26]
AdwCleaner[S25].txt - [3114 octets] - [26/12/2020 20:25:23]
AdwCleaner[S26].txt - [3174 octets] - [07/03/2021 13:21:26]
AdwCleaner[S27].txt - [3235 octets] - [07/03/2021 13:22:09]
AdwCleaner[S28].txt - [3296 octets] - [10/03/2021 16:06:17]
AdwCleaner[S29].txt - [3357 octets] - [13/03/2021 17:53:37]
AdwCleaner[S30].txt - [3418 octets] - [22/03/2021 13:48:21]
AdwCleaner[S31].txt - [3480 octets] - [28/03/2021 12:45:01]
AdwCleaner[S32].txt - [3541 octets] - [28/03/2021 12:54:36]
AdwCleaner[S33].txt - [3602 octets] - [07/05/2021 15:58:02]
AdwCleaner[S34].txt - [3663 octets] - [26/05/2021 21:24:51]
AdwCleaner[S35].txt - [3724 octets] - [26/06/2021 12:18:02]
AdwCleaner[S36].txt - [3785 octets] - [08/08/2021 22:45:25]
AdwCleaner[S37].txt - [3846 octets] - [11/08/2021 16:27:13]
AdwCleaner[S38].txt - [3907 octets] - [18/09/2021 19:32:33]
AdwCleaner[S39].txt - [4017 octets] - [01/10/2021 16:08:52]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C39].txt ##########
 

 

Was PC Optimizer.lnk something dangerous? Is it gone? I tried to google more about it, but nothing seemed to come up. I mean adwcleaner doesn't mention anything anymore so... I also run malwarebytes through the laptop and nothing. Do i need to change my whole passwords and so on ? 

 

Thx in advance.

[nasdaq]

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Ensure that you are in an Administrator Account
Double-click to run it. When the tool opens click Yes to disclaimer.
Check the boxes as seen here:

Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
http://deeprybka.trojaner-board.de/eset/eng/attachlogs.png

Attach the file(s). A 2 Steps process.
Reply to this topic.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach. <- Step 1.
Click Attach this file. <- Step 2.
Click the Add reply button.

Please post the logs  for my review.

Let me know what problems persists.

Wait for further instructions

p.s.
The Farbar program is updated often.
If it's identified as suspicious by your Anti-Virus program trust it if Downloaded from the link I provided.
You should restore the program from the Quarantine folder.
====

[Skyp]

41 minutes ago, nasdaq said:

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Ensure that you are in an Administrator Account
Double-click to run it. When the tool opens click Yes to disclaimer.
Check the boxes as seen here:

Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
http://deeprybka.trojaner-board.de/eset/eng/attachlogs.png

Attach the file(s). A 2 Steps process.
Reply to this topic.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach. <- Step 1.
Click Attach this file. <- Step 2.
Click the Add reply button.

Please post the logs  for my review.

Let me know what problems persists.

Wait for further instructions

p.s.
The Farbar program is updated often.
If it's identified as suspicious by your Anti-Virus program trust it if Downloaded from the link I provided.
You should restore the program from the Quarantine folder.
====

 

FRST.txt

Spoiler

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 02-10-2021
durchgeführt von Li (Administrator) auf LAPTOP-90GTT0RJ (Acer Nitro AN517-51) (02-10-2021 20:39:49)
Gestartet von C:\Users\charl\Desktop\Program
Geladene Profile: Li
Platform: Windows 10 Home Version 21H1 19043.1237 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Opera
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Acer Incorporated -> ) C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\NitroSense Service\PSAdminAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\NitroSense Service\PSAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\NitroSense Service\PSSvc.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QAAdminAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QAAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QALockHandler.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QASvc.exe
(Acer Incorporated) C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3030.0_x64__48frkmn4z8aw4\DesktopApp\AcerRegistrationBackGroundTask.exe
(Discord Inc. -> Discord Inc.) C:\Users\charl\AppData\Local\Discord\app-1.0.9003\Discord.exe <6>
(Electronic Arts, Inc. -> ) C:\Program Files (x86)\Origin\QtWebEngineProcess.exe <10>
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <10>
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_92cf9d9d84f1d3db\igfxext.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.3\avp.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.3\avpui.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksde.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksdeui.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2108.25001.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CastSrv.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(miHoYo Co.,Ltd. -> miHoYo) C:\Program Files\Genshin Impact\launcher.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_06d1dc0974d420af\Display.NvContainer\NVDisplay.Container.exe <2>
(Opera Software AS -> Opera Software) C:\Users\charl\AppData\Local\Programs\Opera\79.0.4143.72\opera_crashreporter.exe
(Opera Software AS -> Opera Software) C:\Users\charl\AppData\Local\Programs\Opera\opera.exe <70>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(The Qt Company Oy -> The Qt Company Ltd.) C:\Program Files\Genshin Impact\QtWebEngineProcess.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo77ac.inf_amd64_d5839c9d7c0bda64\WavesSvc64.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [838432 2019-03-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo77ac.inf_amd64_d5839c9d7c0bda64\WavesSvc64.exe [1464728 2019-01-31] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [321112 2019-07-19] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM-x32\...\Run: [Genshin Impact Beta_Launcher] => [X]
HKLM-x32\...\Run: [Genshin Impact_Launcher] => [X]
HKU\S-1-5-21-153190474-230077284-4282690832-1001\...\Run: [Discord] => C:\Users\charl\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-153190474-230077284-4282690832-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4282600 2021-09-17] (Valve -> Valve Corporation)
HKU\S-1-5-21-153190474-230077284-4282690832-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3145912 2021-09-16] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-153190474-230077284-4282690832-1001\...\Run: [Opera Browser Assistant] => C:\Users\charl\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4092112 2021-09-28] (Opera Software AS -> Opera Software)
HKU\S-1-5-18\...\RunOnce: [Kaspersky Setup] => C:\ProgramData\Kaspersky Lab Setup Files\SAAS21.1.15.500.0.221.0\au_setup_9CC17B70-0A3B-11EB-951E-04ED33E3A28C\startup.exe [2612320 2020-10-09] (Kaspersky Lab -> Kaspersky)
HKLM\...\Windows x64\Print Processors\Canon MG3600 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCT.DLL [30208 2015-03-12] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3600 series: C:\Windows\system32\CNMLMCT.DLL [406528 2015-03-12] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\94.0.4606.71\Installer\chrmstp.exe [2021-09-30] (Google LLC -> Google LLC)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0566B7CD-792D-444B-98A8-AE260E38F11F} - \Software Update Application -> Keine Datei <==== ACHTUNG
Task: {0FE9C03A-419C-40E1-A867-61672D3F2B3D} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {105D676A-D551-4274-81E7-97AC52E4FD87} - \Microsoft\Windows\Speech\HeadsetButtonPress -> Keine Datei <==== ACHTUNG
Task: {12230DE6-3087-4930-88C2-F17B7A90EE15} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-10-09] (Google LLC -> Google LLC)
Task: {1949073A-8FDA-4EA4-8E59-407CDB02440F} - \Microsoft\Windows\WindowsUpdate\sihpostreboot -> Keine Datei <==== ACHTUNG
Task: {1EEFC2BF-5232-4894-B1E9-9C0F0CADEC66} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-10-09] (Google LLC -> Google LLC)
Task: {23327452-F154-4B59-9CD9-A7CF6503A65D} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3636EC8E-54FE-487F-8084-ECFD9A1EA74E} - \ACCBackgroundApplication -> Keine Datei <==== ACHTUNG
Task: {3A828CDD-9A6A-4AAF-B7F7-28594027EDA4} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [752136 2020-10-16] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
Task: {4B6D476E-463A-4576-B155-C05E397CBFAD} - \ACC -> Keine Datei <==== ACHTUNG
Task: {5881967C-761C-4600-B322-2B0602CAA2EC} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {589AA955-A3F7-4F06-8453-89AE69217ED5} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6E9EF3D3-F61A-4300-97BF-93FAD4D1CBA1} - System32\Tasks\Opera scheduled assistant Autoupdate 1602254951 => C:\Users\charl\AppData\Local\Programs\Opera\launcher.exe [42731728 2021-09-28] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\charl\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {71AAC200-67AB-4436-AB24-E36CFD38088C} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [65064 2020-03-16] (Acer Incorporated -> Acer)
Task: {71F7638C-3B1E-46E0-88BD-41E842BA1671} - System32\Tasks\AcerCMUpdateTask2.1.16258 => C:\Program Files (x86)\Acer\Amundsen\2.1.16258\AWC.exe [152880 2016-09-20] (Acer Incorporated -> )
Task: {7CAFD4FF-DCA2-4DFC-8BD5-F90524C90066} - \NitroSense -> Keine Datei <==== ACHTUNG
Task: {7E234380-A8B1-4394-AD77-3AF72C1488D1} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8E757F7C-E7A2-4293-AB6E-7E16BBC2315C} - \ACCAgent -> Keine Datei <==== ACHTUNG
Task: {90103F88-F201-4376-B5C4-15DD5AB2349D} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {9E12355C-2824-43C4-969D-A93578BD7B12} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A2164AF9-95A0-4782-ADE2-9A46B8A5398A} - \AcerNetworkOptimizerStart -> Keine Datei <==== ACHTUNG
Task: {A277B370-0B3B-4217-92E0-E6AB8A1C2F44} - \UEIPInvitation -> Keine Datei <==== ACHTUNG
Task: {AEE2F813-D7B7-45A9-B71F-12596643D1B2} - System32\Tasks\Power Button => C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe [2770984 2020-09-10] (Acer Incorporated -> Acer Incorporated)
Task: {AF50FEA8-6C79-4A88-94F4-A4A0C4BA1FFF} - System32\Tasks\Quick Access => C:\Program Files\Acer\Quick Access Service\QALauncher.exe [447528 2020-09-10] (Acer Incorporated -> Acer Incorporated)
Task: {B1E4FF39-D6D4-4798-A4DB-57E8FD9316BF} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [680888 2021-09-30] (Mozilla Corporation -> Mozilla Foundation)
Task: {B40D8A34-DD86-4732-89DA-0EB40B0283FC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {BD32AC49-48E0-4C5A-B97C-D1AD4144FEE8} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {C658144F-C1E5-460E-9D3D-9C47730D53BA} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C89F9E87-DCF2-40E3-97B7-6FB7D9E47165} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134504 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {C99C0D73-3EDB-4ED7-9E1E-F0A480DB574A} - \UbtFrameworkService -> Keine Datei <==== ACHTUNG
Task: {CBFB6BE6-9828-4121-A91C-8ADE8B6B1C36} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> Keine Datei <==== ACHTUNG
Task: {D323F646-9052-4433-A5C9-A5AF72A9579C} - \OneDrive Standalone Update Task-S-1-5-21-2286112934-1917311576-471756123-500 -> Keine Datei <==== ACHTUNG
Task: {DA4E4F38-096D-4960-9690-019C16071CFD} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DC0333CB-8528-455D-AA72-9A062EB21963} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E16E8925-B032-4867-9F4A-9FA3D631D0FC} - System32\Tasks\Opera scheduled Autoupdate 1602254945 => C:\Users\charl\AppData\Local\Programs\Opera\launcher.exe [42731728 2021-09-28] (Opera Software AS -> Opera Software)
Task: {EA124F98-6C8F-4348-A9A5-D109C5092789} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134504 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {EFD9D2BB-F227-4221-AD9A-2133EDF79BAF} - System32\Tasks\Oem\wlanBrokerTask => C:\Program Files (x86)\Acer\ExpressVPN\wlanBroker.exe [17688 2019-11-16] (Acer Incorporated -> )

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\AcerNetworkOptimizerStart.job => C:\Program Files (x86)\Acer\Acer Network Optimizer\AcerNetworkOptimizer.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{5944ea14-8054-4bbe-a5aa-7453a15867ee}: [DhcpNameServer] 192.168.2.1

Edge: 
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge Profile: C:\Users\charl\AppData\Local\Microsoft\Edge\User Data\Default [2021-09-25]
Edge Extension: (Kaspersky Protection) - C:\Users\charl\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2021-07-11]
Edge HKU\S-1-5-21-153190474-230077284-4282690832-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]

FireFox:
========
FF DefaultProfile: dikfhd4p.default
FF ProfilePath: C:\Users\charl\AppData\Roaming\Mozilla\Firefox\Profiles\dikfhd4p.default [2021-10-02]
FF Homepage: Mozilla\Firefox\Profiles\dikfhd4p.default -> google.de
FF Session Restore: Mozilla\Firefox\Profiles\dikfhd4p.default -> ist aktiviert.
FF Extension: (Deutsch (DE) Language Pack) - C:\Users\charl\AppData\Roaming\Mozilla\Firefox\Profiles\dikfhd4p.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2021-09-28]
FF Extension: (uBlock Origin) - C:\Users\charl\AppData\Roaming\Mozilla\Firefox\Profiles\dikfhd4p.default\Extensions\uBlock0@raymondhill.net.xpi [2021-07-30]
FF Extension: (Proxy Failover) - C:\Users\charl\AppData\Roaming\Mozilla\Firefox\Profiles\dikfhd4p.default\features\{5cd6538a-6577-4afa-8a58-a2c76186cade}\proxy-failover@mozilla.com.xpi [2021-09-30]
FF Extension: (Amazon Assistant for Firefox) - C:\Program Files\Mozilla Firefox\distribution\extensions\abb-acer@amazon.com.xpi [2019-05-14] [UpdateUrl:hxxps://s3-us-west-2.amazonaws.com/ubp-ubpextension-us-prod/vendor-update/firefox/acer1/updates.json]
FF Extension: (Deutsch (DE) Language Pack) - C:\Program Files\Mozilla Firefox\distribution\extensions\langpack-de@firefox.mozilla.org.xpi [2019-05-14]
FF Extension: (Mozilla Partner Defaults) - C:\Program Files\Mozilla Firefox\distribution\extensions\partnerdefaults@mozilla.com [2021-09-30] []
FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.3\FFExt\light_plugin_firefox\addon.xpi => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.3\FFExt\light_plugin_firefox\addon.xpi => nicht gefunden
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-26] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-05-26] (Microsoft Corporation -> Microsoft Corporation)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2020-10-15] <==== ACHTUNG (Zeigt auf eine *.cfg Datei)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2020-10-15] <==== ACHTUNG

Chrome: 
=======
CHR Profile: C:\Users\charl\AppData\Local\Google\Chrome\User Data\Default [2021-10-02]
CHR Session Restore: Default -> ist aktiviert.
CHR Extension: (Präsentationen) - C:\Users\charl\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-10-09]
CHR Extension: (Kaspersky Protection) - C:\Users\charl\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2021-09-19]
CHR Extension: (Docs) - C:\Users\charl\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-10-09]
CHR Extension: (Google Drive) - C:\Users\charl\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-24]
CHR Extension: (YouTube) - C:\Users\charl\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-10-09]
CHR Extension: (uBlock Origin) - C:\Users\charl\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2021-10-02]
CHR Extension: (Tabellen) - C:\Users\charl\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-10-09]
CHR Extension: (Google Docs Offline) - C:\Users\charl\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-02]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\charl\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-30]
CHR Extension: (Google Mail) - C:\Users\charl\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR HKLM\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM-x32\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm

Opera: 
=======
OPR Profile: C:\Users\charl\AppData\Roaming\Opera Software\Opera Stable [2021-10-02]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\charl\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2021-09-29]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\charl\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-08-13]
OPR Extension: (uBlock Origin) - C:\Users\charl\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2021-10-01]
StartMenuInternet: (HKU\S-1-5-21-153190474-230077284-4282690832-1001) OperaStable - "C:\Users\charl\AppData\Local\Programs\Opera\Launcher.exe"

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 ACCSvc; C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe [300584 2020-07-27] (Acer Incorporated -> Acer Incorporated)
R2 AVP21.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.3\avp.exe [184768 2021-06-10] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9250696 2021-09-24] (Microsoft Corporation -> Microsoft Corporation)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2021-09-08] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 klvssbridge64_21.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.3\x64\vssbridge64.exe [479280 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 KSDE5.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksde.exe [447104 2021-06-10] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2557144 2021-09-16] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3475672 2021-09-16] (Electronic Arts, Inc. -> Electronic Arts)
R3 PSSvc; C:\Program Files\Acer\NitroSense Service\PSSvc.exe [820016 2019-07-19] (Acer Incorporated -> Acer Incorporated)
S3 QALSvc; C:\Program Files\Acer\Quick Access Service\QALSvc.exe [465960 2020-09-10] (Acer Incorporated -> Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Quick Access Service\QASvc.exe [526888 2020-09-10] (Acer Incorporated -> Acer Incorporated)
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UBTService.exe [305984 2019-01-10] (Acer Incorporated -> Acer Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\NisSrv.exe [2467088 2020-11-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MsMpEng.exe [128376 2020-11-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvaci.inf_amd64_06d1dc0974d420af\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvaci.inf_amd64_06d1dc0974d420af\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AcerAirplaneModeController; C:\WINDOWS\System32\drivers\AcerAirplaneModeController.sys [30168 2020-05-12] (Acer Incorporated -> Acer Incorporated)
R2 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv_bgp.sys [315976 2020-10-05] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2020-09-11] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [250032 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klbackupdisk; C:\WINDOWS\system32\DRIVERS\klbackupdisk.sys [110336 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [211704 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [126216 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [41656 2021-02-19] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)
R1 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [514840 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klgse; C:\WINDOWS\System32\DRIVERS\klgse.sys [674104 2021-09-09] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\system32\DRIVERS\klhk.sys [1469240 2021-09-09] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP21.3\Bases\klids.sys [273176 2021-08-11] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1042712 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [98040 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [112392 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [112904 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [85256 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [96008 2021-06-10] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [55592 2020-06-29] (AnchorFree Inc -> The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [265176 2021-09-24] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
U3 klupd_klif_arkmon_7C26E231; C:\ProgramData\Kaspersky Lab\AVP21.3\Temp\7C26E231D8467114CDDF023653AFB7CB\klupd_klif_arkmon.sys [265176 2021-09-24] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [309104 2021-09-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
U3 klupd_klif_klark_3B39DDC8; C:\ProgramData\Kaspersky Lab\AVP21.3\Temp\3B39DDC8923390F580DFA6A90FD4E7BB\klupd_klif_klark.sys [315032 2021-09-23] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [113952 2021-09-23] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [224888 2021-09-17] (Kaspersky Lab JSC -> AO Kaspersky Lab)
U3 klupd_klif_mark_63D22BD8; C:\ProgramData\Kaspersky Lab\AVP21.3\Temp\63D22BD8CE65CE9D83E1803201C3F026\klupd_klif_mark.sys [225648 2021-09-24] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [155912 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [327936 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [300808 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S4 mhyprot2; kein ImagePath
R1 rtf64; C:\WINDOWS\system32\DRIVERS\rtf64x64.sys [70560 2018-09-03] (Realtek Semiconductor Corp. -> Realtek)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64872 2019-09-26] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48536 2020-11-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [429288 2020-11-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [71912 2020-11-10] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-10-02 20:38 - 2021-10-02 20:40 - 000000000 ____D C:\FRST
2021-10-02 13:17 - 2021-10-02 13:17 - 000000000 ____D C:\Program Files\Malwarebytes
2021-10-01 09:00 - 2021-10-01 09:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-09-30 17:12 - 2021-10-01 09:00 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-09-28 22:21 - 2021-09-28 22:30 - 000000000 ____D C:\Users\charl\Documents\Syberia Saves
2021-09-24 16:02 - 2021-09-24 16:02 - 000265176 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys
2021-09-23 14:44 - 2021-09-23 14:44 - 000113952 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys
2021-09-17 13:38 - 2021-09-17 13:38 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-09-17 13:38 - 2021-09-17 13:38 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-09-17 13:38 - 2021-09-17 13:38 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-09-17 13:38 - 2021-09-17 13:38 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2021-09-17 13:38 - 2021-09-17 13:38 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2021-09-17 13:38 - 2021-09-17 13:38 - 000011355 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-09-17 13:35 - 2021-09-17 13:35 - 000000000 ___HD C:\$WinREAgent
2021-09-15 19:06 - 2021-09-15 19:06 - 000309104 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys
2021-09-15 19:05 - 2021-09-17 17:14 - 000224888 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys
2021-09-09 15:08 - 2021-09-09 15:08 - 000000000 ____D C:\Users\charl\AppData\Roaming\EasyAntiCheat
2021-09-09 15:08 - 2021-09-09 15:08 - 000000000 ____D C:\Users\charl\AppData\Local\UnrealEngine
2021-09-09 15:08 - 2021-09-09 15:08 - 000000000 ____D C:\Users\charl\AppData\Local\DeadByDaylight
2021-09-09 15:08 - 2021-09-09 15:08 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat
2021-09-08 22:50 - 2021-09-08 22:50 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-09-08 22:50 - 2021-09-08 22:50 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-09-08 22:50 - 2021-09-08 22:50 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-09-08 22:50 - 2021-09-08 22:50 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-09-08 22:50 - 2021-09-08 22:50 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-09-08 22:50 - 2021-09-08 22:50 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-09-08 22:50 - 2021-09-08 22:50 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-09-08 22:50 - 2021-09-08 22:50 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-09-08 22:50 - 2021-09-08 22:50 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-09-08 22:49 - 2021-09-08 22:49 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-09-08 22:49 - 2021-09-08 22:49 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-09-08 22:49 - 2021-09-08 22:49 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-09-08 22:49 - 2021-09-08 22:49 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-09-08 22:49 - 2021-09-08 22:49 - 000098816 _____ C:\WINDOWS\system32\Drivers\cimfs.sys

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-10-02 20:40 - 2020-10-09 17:10 - 000000000 ____D C:\Users\charl\AppData\Roaming\discord
2021-10-02 20:39 - 2020-10-09 16:45 - 000000000 ____D C:\Users\charl\Desktop\Program
2021-10-02 20:37 - 2020-10-09 20:08 - 000000000 ____D C:\Program Files (x86)\Steam
2021-10-02 20:35 - 2020-12-26 22:36 - 000000000 ____D C:\ProgramData\Origin
2021-10-02 20:28 - 2020-10-09 16:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-02 20:23 - 2020-10-09 17:10 - 000000000 ____D C:\Users\charl\AppData\Local\Discord
2021-10-02 19:19 - 2020-10-09 16:36 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-10-02 19:10 - 2020-10-09 19:42 - 000000000 ____D C:\Program Files (x86)\Google
2021-10-02 15:31 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-10-02 12:25 - 2020-10-15 13:34 - 000000000 ____D C:\Users\charl\AppData\LocalLow\Mozilla
2021-10-02 12:25 - 2019-10-17 21:49 - 000000000 ____D C:\ProgramData\NVIDIA
2021-10-02 12:24 - 2020-10-11 12:56 - 000000000 ____D C:\Program Files\Genshin Impact
2021-10-02 12:23 - 2020-12-26 22:36 - 000000000 ____D C:\Users\charl\AppData\Local\Origin
2021-10-02 00:08 - 2020-10-09 16:36 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-01 21:39 - 2019-10-17 22:14 - 000000000 ____D C:\Program Files\Microsoft Office
2021-10-01 17:53 - 2020-10-09 16:06 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-10-01 14:03 - 2020-10-09 19:42 - 000003632 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-10-01 14:03 - 2020-10-09 19:42 - 000003508 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-10-01 12:58 - 2020-10-15 21:42 - 000000000 ____D C:\Users\charl\AppData\Local\CrashDumps
2021-10-01 12:58 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-10-01 09:01 - 2019-10-17 22:13 - 000000000 ____D C:\ProgramData\Mozilla
2021-10-01 09:00 - 2019-10-17 22:13 - 000001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-10-01 09:00 - 2019-10-17 22:13 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-09-30 22:16 - 2020-10-09 19:45 - 000002243 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-09-30 18:29 - 2020-10-15 15:58 - 000000000 ____D C:\IdentityV
2021-09-30 17:05 - 2020-10-09 16:49 - 000004210 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1602254945
2021-09-30 17:05 - 2020-10-09 16:49 - 000001409 _____ C:\Users\charl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2021-09-28 15:33 - 2020-10-09 16:49 - 000004442 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1602254951
2021-09-26 13:15 - 2020-10-15 18:40 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-09-25 15:19 - 2020-10-09 16:32 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-09-24 18:35 - 2020-10-10 16:25 - 000000000 ____D C:\Users\charl\AppData\Local\D3DSCache
2021-09-18 18:16 - 2020-10-17 21:03 - 000000000 ____D C:\Users\charl\Desktop\5.2021
2021-09-18 10:06 - 2020-10-09 16:37 - 000744968 _____ C:\WINDOWS\system32\perfh007.dat
2021-09-18 10:06 - 2020-10-09 16:37 - 000150354 _____ C:\WINDOWS\system32\perfc007.dat
2021-09-18 10:06 - 2020-10-09 16:35 - 000000000 ____D C:\WINDOWS\INF
2021-09-18 10:06 - 2020-10-09 16:17 - 001724608 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-09-18 10:00 - 2020-10-09 16:06 - 000008192 ___SH C:\DumpStack.log.tmp
2021-09-18 10:00 - 2020-10-09 16:06 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-09-17 17:54 - 2020-10-09 16:32 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-09-17 17:53 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\SystemResources
2021-09-17 17:53 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-09-17 17:53 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-09-17 17:53 - 2020-10-09 16:06 - 000438152 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-09-17 16:19 - 2020-12-11 19:10 - 000000000 ____D C:\Users\charl\Desktop\Stepmother's Märchen
2021-09-17 13:40 - 2020-10-09 16:33 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-09-17 13:34 - 2020-10-10 14:55 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-09-17 13:33 - 2020-10-10 14:55 - 135637312 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-09-16 04:28 - 2020-12-26 22:40 - 000000000 ____D C:\Program Files (x86)\Origin
2021-09-15 05:29 - 2020-10-09 16:19 - 000000000 ____D C:\Users\charl
2021-09-09 17:15 - 2021-02-22 22:15 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-09-09 11:22 - 2020-06-29 20:14 - 001469240 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys
2021-09-09 11:22 - 2020-06-29 20:14 - 000674104 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klgse.sys
2021-09-09 06:17 - 2020-10-09 16:36 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-09-09 06:17 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-09-09 06:17 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-09-09 06:17 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-09-09 06:17 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-09-09 06:17 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-09-09 06:17 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-09-09 06:17 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-09-09 06:17 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\system32\DDFs
2021-09-09 06:17 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\system32\appraiser
2021-09-09 06:17 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-09-09 06:17 - 2020-10-09 16:36 - 000000000 ____D C:\WINDOWS\Provisioning
2021-09-09 06:17 - 2020-10-09 16:32 - 000000000 ____D C:\WINDOWS\servicing
2021-09-07 19:17 - 2020-10-09 16:24 - 000000000 ____D C:\Users\charl\AppData\Local\PlaceholderTileLogoFolder
2021-09-04 16:12 - 2021-04-17 14:26 - 000000000 ____D C:\Users\charl\Desktop\Honey Select Unlimited - Trial Demo

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

 

Ehm yea. Everything seems to be in german.

Addition.txt

[nasdaq]

Hi,

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

The .link was deleted by Malwarebytes
Deleted       C:\Windows\SysWOW64\Tasks\PC Optimizer.lnk

Read abut it.

https://forums.malwarebytes.com/topic/230843-removal-instructions-for-pc-optimizer-pro/
<<<>>>

You should delete all the AdWCleaner.txt file n the folder in Bold. Not the folders.
C:\AdwCleaner\Logs\AdwCleaner[C39].txt

If you want you can keep the last 2 logs. But I do not see any need for them.

The fixlog.txt attached will do some cleaning of empty registry entries.

Will delete also the C:\Windows\SysWOW64\Tasks\PC Optimizer.lnk.
I suspect that it will not be found.

If that is the case run this scan.

Run the Farbar program .exe as an Administrator.

In the Search text area, copy and paste the following:
PC Optimizer.lnk
Once done, click on the Search File search button and wait for FRST to finish the search
On completion, a log will open in Notepad. Copy and paste its content in your next reply
===

Please post the Fixlog.txt and let me know what problem persists.

fixlist.txt

[Skyp]

10 minutes ago, nasdaq said:

Hi,

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

The .link was deleted by Malwarebytes
Deleted       C:\Windows\SysWOW64\Tasks\PC Optimizer.lnk

Read abut it.

https://forums.malwarebytes.com/topic/230843-removal-instructions-for-pc-optimizer-pro/
<<<>>>

You should delete all the AdWCleaner.txt file n the folder in Bold. Not the folders.
C:\AdwCleaner\Logs\AdwCleaner[C39].txt

If you want you can keep the last 2 logs. But I do not see any need for them.

The fixlog.txt attached will do some cleaning of empty registry entries.

Will delete also the C:\Windows\SysWOW64\Tasks\PC Optimizer.lnk.
I suspect that it will not be found.

If that is the case run this scan.

Run the Farbar program .exe as an Administrator.

In the Search text area, copy and paste the following:
PC Optimizer.lnk
Once done, click on the Search File search button and wait for FRST to finish the search
On completion, a log will open in Notepad. Copy and paste its content in your next reply
===

Please post the Fixlog.txt and let me know what problem persists.

fixlist.txt 2.69 kB · 0 downloads

Thanks, i decided to deep clean the laptop, so everything is reset. I also changed the passwords, so it should be fine. 

[nasdaq]

Thanks for the feedback.

Stay safe.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you