Disclaimer

This fixlist has been created exclusively for Teppichputzer by rifteyy. Running this on any other device will not work effectively and may even cause removal of legitimate entries or system damage.

Farbar Recovery Scan Tool · Fixlist

FRST fixlist for Teppichputzer

Fix number 1 by rifteyy

How to use this fixlist
1. Click Download as fixlist.txt (or copy and save manually as fixlist.txt - not fixlist.txt.txt)
2. Place the file in the same folder as FRST.exe / FRST64.exe
3. Save all open work and close all applications - FRST may close running programs and unsaved work will be lost
4. Run FRST as Administrator and click Fix
5. Post the content of Fixlog.txt back in the thread
Warning: Only run a fixlist prepared specifically for your system. Running someone else's fixlist will not work effectively even if you have similiar infection symptoms and may cause removal of legitimate entries or even system damage. 
Start::
SystemRestore: On
CreateRestorePoint:
CloseProcesses:

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe <2>
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wscript.exe
HKU\S-1-5-21-4120191725-2713990712-3395116113-1001\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG
Task: {A30D752E-E754-4C99-B903-3507CE16A01E} - System32\Tasks\IEPackages => C:\WINDOWS\system32\wscript.exe [200704 2026-03-10] (Microsoft Windows -> Microsoft Corporation) -> "%PROGRAMDATA%\WinPackages\update.vbs" <==== ACHTUNG
Task: {BF184D81-FD44-4327-986A-562B1736ED34} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe  (Keine Datei)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Keine Datei)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Keine Datei)
Task: {9978444A-037A-4DEA-B948-70DA82B1CB94} - System32\Tasks\Microsoft\Windows\Setup\SnapshotCleanupTask => C:\Windows\System32\OOBE\SetupPlatform\SetupPlatform.exe  -removesnapshot (Keine Datei)
Task: {4C5B5587-EE76-450A-B51D-179445CFCAEA} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe  LogonUpdateResults (Keine Datei)
Task: {4BD3B50B-C4ED-43F3-834A-2369837AE50C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe  Display (Keine Datei)
Task: {03BC7700-C4B1-41C4-85C5-11B35A7A835F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe  ReadyToReboot (Keine Datei)
Task: {9CA495F9-07F7-4C1B-8DAC-CEB3691B21B8} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC ReadyToReboot (Keine Datei)
Task: {3920A0B3-0069-4423-B2A5-2A04AA54281D} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery ReadyToReboot (Keine Datei)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {F9B048AF-40E3-4737-86CD-5AE86B253865} - System32\Tasks\Opera scheduled Autoupdate 1557071351 => C:\Users\MarianII\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe  --scheduledtask $(Arg0) (Keine Datei)
CHR Extension: (PDF Viewer) - C:\ProgramData\Features\psmizwhldwkokywwvmrbcdcdmeuzvmx [2026-02-01] [UpdateUrl:hxxps://feraco.info/extensionInstaller/updateChromeExtension] <==== ACHTUNG
S4 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S4 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
C:\ProgramData\WinPackages
C:\ProgramData\UpdatesWin
C:\ProgramData\SdkWin
C:\ProgramData\GameSavings
C:\ProgramData\Features
C:\ProgramData\DiagnosticsNET
2023-01-18 19:03 - 2023-01-18 19:03 - 000004606 _____ () C:\Users\MarianII\AppData\Local\1223220869
2022-10-21 16:59 - 2022-11-17 10:07 - 000003950 _____ () C:\Users\MarianII\AppData\Local\1413663067
2022-09-21 18:48 - 2022-09-21 18:48 - 000006822 _____ () C:\Users\MarianII\AppData\Local\2476191251
2022-11-18 08:13 - 2022-11-23 12:40 - 000003998 _____ () C:\Users\MarianII\AppData\Local\2830118318
2023-03-23 19:52 - 2023-03-23 19:52 - 000005894 _____ () C:\Users\MarianII\AppData\Local\3963120367
2022-05-05 10:31 - 2022-07-02 12:46 - 000003406 _____ () C:\Users\MarianII\AppData\Local\444903052
2023-09-29 17:40 - 2023-09-29 17:40 - 000005534 _____ () C:\Users\MarianII\AppData\Local\9101122080
2025-05-15 19:16 - 2025-05-16 18:54 - 000005279 _____ () C:\Users\MarianII\AppData\Local\91128626013
2024-02-17 12:38 - 2024-02-17 12:38 - 000006366 _____ () C:\Users\MarianII\AppData\Local\91477623837
2023-10-26 15:46 - 2023-10-26 15:46 - 000004398 _____ () C:\Users\MarianII\AppData\Local\91503071769
2023-02-21 14:47 - 2023-02-21 14:47 - 000006598 _____ () C:\Users\MarianII\AppData\Local\92580481036
2023-05-03 18:16 - 2023-05-03 18:16 - 000005966 _____ () C:\Users\MarianII\AppData\Local\92642719525
2025-05-23 18:46 - 2025-05-23 18:46 - 000005279 _____ () C:\Users\MarianII\AppData\Local\93308978272
2025-03-29 12:09 - 2025-03-29 12:09 - 000003718 _____ () C:\Users\MarianII\AppData\Local\93768145176
2023-11-17 09:51 - 2023-11-17 09:51 - 000003998 _____ () C:\Users\MarianII\AppData\Local\9630024665
2023-04-12 18:01 - 2023-04-12 18:01 - 000005662 _____ () C:\Users\MarianII\AppData\Local\967015202


EmptyTemp:
End::

Fixlist prepared by rifteyy.org · About