Code:
Alles auswählen Aufklappen ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:04-03-2016
durchgeführt von marion (2019-03-28 18:56:09)
Gestartet von C:\Users\marion\Desktop
Windows 10 Pro Version 1809 (X64) (2019-02-12 21:33:33)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3140415436-1100377458-3732027645-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3140415436-1100377458-3732027645-503 - Limited - Disabled)
Guest (S-1-5-21-3140415436-1100377458-3732027645-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3140415436-1100377458-3732027645-1002 - Limited - Enabled)
marion (S-1-5-21-3140415436-1100377458-3732027645-1000 - Administrator - Enabled) => C:\Users\marion
WDAGUtilityAccount (S-1-5-21-3140415436-1100377458-3732027645-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 16.04 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.142 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}) (Version: 2.3.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2F72F540-1F60-4266-9506-952B21D6640D}) (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.2.2364 - AVAST Software)
Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.4.167.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - )
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: - )
Canon MG5100 series Benutzerregistrierung (HKLM-x32\...\Canon MG5100 series Benutzerregistrierung) (Version: - )
Canon MG5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5100_series) (Version: - )
Canon MP Navigator EX 4.0 (HKLM-x32\...\MP Navigator EX 4.0) (Version: - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.46 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.7.6321 - CDBurnerXP)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
DeskUpdate (HKLM-x32\...\DeskUpdate_is1) (Version: 4.13.0116 - Fujitsu Technology Solutions)
ElsterFormular (HKLM-x32\...\{94565AFD-3A15-46E7-A2F1-86F568FDBEC1}) (Version: 20.1 - Thüringer Landesfinanzdirektion)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
FJ Camera (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.52019.0 - Sonix)
Free Music Zilla (HKLM-x32\...\Free Music Zilla_is1) (Version: - FreeMusicZilla.com)
Google Update Helper (x32 Version: 1.3.21.169 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.15) (Version: 9.15 - Artifex Software Inc.)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2372 - Intel Corporation)
iTunes (HKLM\...\{0225AD21-F3E2-4916-BFF3-65D3F9052582}) (Version: 11.0.2.26 - Apple Inc.)
Java 8 Update 201 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Lexware Datenbank plus 2012 (HKLM-x32\...\{448DA1AD-D1CA-4967-8EFA-9482F31E7BFD}) (Version: 12.00.00.0116 - Haufe-Lexware GmbH & Co.KG)
Lexware Elster (HKLM-x32\...\{9F6BFB0F-6B1F-4D1A-A9DA-42F6794C9188}) (Version: 13.00.00.0027 - Haufe-Lexware GmbH & Co.KG)
Lexware Info Service (HKLM-x32\...\{8AE7E507-BC49-4DF0-A236-26878691AB53}) (Version: 2.90.00.0009 - Haufe-Lexware GmbH & Co.KG)
Lexware reisekosten plus 2012 (HKLM-x32\...\{BE672587-331F-42F7-BC38-D59759311C75}) (Version: 12.01.00.0137 - Haufe-Lexware GmbH & Co.KG)
Lexware reisekosten plus 2012 (x32 Version: 12.01.00.0137 - ) Hidden
Malwarebytes Version 3.6.1.2711 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.6.1.2711 - Malwarebytes)
Microsoft Office Professional Plus 2019 - de-de (HKLM\...\ProPlus2019Volume - de-de) (Version: 16.0.10342.20010 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3140415436-1100377458-3732027645-1000\...\OneDriveSetup.exe) (Version: 19.012.0121.0011 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.1.177.0 - Microsoft Corporation)
Mozilla Firefox 66.0.2 (x64 de) (HKLM\...\Mozilla Firefox 66.0.2 (x64 de)) (Version: 66.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 66.0.2.7024 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
No23 Recorder (HKLM-x32\...\No23 Recorder) (Version: 2.1.0.3 - No23)
No23 Recorder (x32 Version: 2.1.0.3 - No23) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.10342.20010 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.10342.20010 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.10342.20010 - Microsoft Corporation) Hidden
PDF Blender (HKLM-x32\...\PDF Blender) (Version: - )
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.36.1224.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7571 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30120 - Realtek Semiconductor Corp.)
SafeZone Stable 1.48.2066.95 (x32 Version: 1.48.2066.95 - Avast Software) Hidden
Samsung Data Migration (HKLM-x32\...\{3B304604-0BF5-488E-AB95-F2F2E31206F3}) (Version: 3.1 - Samsung)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.16.0 - Synaptics Incorporated)
TAXMAN 2013 (HKLM-x32\...\{F289D934-2224-473B-B57E-0040D2693F83}) (Version: 19.03.00.0001 - Haufe-Lexware GmbH & Co.KG)
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.0.6447 - TeamViewer)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.6900 - Broadcom Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3140415436-1100377458-3732027645-1000_Classes\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}\localserver32 -> C:\Users\marion\AppData\Local\Microsoft\OneDrive\19.012.0121.0011\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3140415436-1100377458-3732027645-1000_Classes\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}\localserver32 -> C:\Users\marion\AppData\Local\Microsoft\OneDrive\19.012.0121.0011\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3140415436-1100377458-3732027645-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\marion\AppData\Local\Microsoft\OneDrive\19.012.0121.0011\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3140415436-1100377458-3732027645-1000_Classes\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}\localserver32 -> C:\Users\marion\AppData\Local\Microsoft\OneDrive\19.012.0121.0011\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3140415436-1100377458-3732027645-1000_Classes\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}\localserver32 -> C:\Users\marion\AppData\Local\Microsoft\OneDrive\19.012.0121.0011\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3140415436-1100377458-3732027645-1000_Classes\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}\localserver32 -> C:\Users\marion\AppData\Local\Microsoft\OneDrive\19.012.0121.0011\FileCoAuth.exe (Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {02ABD6A5-7C66-4E8A-9BF7-B12354245E8F} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefreshTask
Task: {031C55BC-D055-49F4-B5EF-98F40D8F7841} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\LocateCommandUserSession
Task: {04F9AD8A-2271-43F1-9A70-956ECAA26293} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {09996B35-18E3-4A38-BA0A-331A4D6EA3CE} - System32\Tasks\Microsoft\Windows\InstallService\WakeUpAndContinueUpdates
Task: {0BEA0CCB-55B5-400D-B394-C3BB4D69FB1E} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {0CAD4002-A672-45EE-B6E3-2EDFECFE05EE} - System32\Tasks\Microsoft\Windows\EDP\EDP App Launch Task
Task: {0FBB7CB0-0D65-4679-B754-2CA0F234C7EC} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2019-03-20] (Microsoft Corporation)
Task: {10B3FA49-D0E2-4D16-8BB9-3F74ADD128FB} - System32\Tasks\Microsoft\Windows\Chkdsk\SyspartRepair => C:\Windows\system32\bcdboot.exe [2018-09-15] (Microsoft Corporation)
Task: {123AD11B-688B-4B4A-A14A-D8FC29F9B2A9} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\HandleCommand
Task: {12CC247C-1ADD-4D26-9AFA-B5C68BF19EE4} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {1D8F6EF7-985B-41F2-B5D2-B683F1EFA4F8} - System32\Tasks\Microsoft\Windows\PushToInstall\LoginCheck => Sc.exe start pushtoinstall login
Task: {22F49E68-1328-41E2-89D5-C032BCD84FD4} - System32\Tasks\Microsoft\XblGameSave\XblGameSaveTask => C:\Windows\System32\XblGameSaveTask.exe [2018-09-15] (Microsoft Corporation)
Task: {2EFBFFE2-F590-4239-9368-FA01D6A8495E} - System32\Tasks\Microsoft\Windows\Subscription\LicenseAcquisition => C:\Windows\system32\ClipRenew.exe [2018-09-15] (Microsoft Corporation)
Task: {3399BB39-6478-4901-B36F-C42C13E17BC4} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {3798B1C6-F2AF-4AE9-95B0-6A376246C766} - System32\Tasks\Microsoft\Windows\InstallService\ScanForUpdatesAsUser
Task: {37E0FFED-BBDC-473E-9D7A-E17B658830C4} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {38515CC9-0387-4267-BCE7-E1BA229DBD01} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {4030C351-CB12-4FC1-B03C-31F6D392DBA3} - System32\Tasks\Microsoft\Windows\DirectX\DXGIAdapterCache => C:\Windows\system32\dxgiadaptercache.exe [2018-09-15] (Microsoft Corporation)
Task: {40FFB949-9B71-4E84-A434-8A8293B4AEBD} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {4388348A-9475-46A9-A899-1D561AF31C03} - System32\Tasks\{172F5275-0A6D-4340-B38E-F8B00A067C28} => pcalua.exe -a C:\Users\marion\Downloads\BingDesktopSetup.exe -d C:\Users\marion\Downloads
Task: {43E5E91E-19C1-4D5C-A3B7-3E3D76886BB2} - System32\Tasks\Microsoft\Windows\Printing\EduPrintProv => C:\Windows\system32\eduprintprov.exe [2018-09-15] (Microsoft Corporation)
Task: {48DACFE5-D036-4EE0-8249-EA62540C227F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5017D78C-A5C7-423D-85A4-B53DDD23D123} - System32\Tasks\Microsoft\Windows\InstallService\ScanForUpdates
Task: {51A64932-31FC-4513-A825-BA96C9539DC5} - System32\Tasks\Microsoft\Windows\SMB\UninstallSMB1ClientTask => powershell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden "& %windir%\system32\WindowsPowerShell\v1.0\Modules\SmbShare\DisableUnusedSmb1.ps1 -Scenario Client"
Task: {52E67AED-1AF7-4218-A9C9-A17C7EE98F70} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {5324331A-EAA2-4AE3-92AB-266870404E80} - System32\Tasks\{AAE204BC-D2F3-4C48-AC55-214579FB8B25} => pcalua.exe -a C:\Users\marion\Downloads\SYS-EXTENSION-DRVR_V1.20_WIN7-64_FPC46-1642-01(1).EXE -d C:\Users\marion\Downloads
Task: {568664FE-54B0-44EB-9A09-8422D026F967} - System32\Tasks\Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh
Task: {573F21CE-E43D-4404-A8BF-2080F315850D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-12-16] (Adobe Systems Incorporated)
Task: {57BB778E-9D15-4CE9-AA16-E3DCB9BCC554} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {5879C804-91DD-4F6B-8B41-CD3B5FE4F5E8} - System32\Tasks\microsoft\windows\applicationdata\appuriverifierdaily => C:\Windows\system32\AppHostRegistrationVerifier.exe [2018-09-15] (Microsoft Corporation)
Task: {5C3FA92B-D543-47B2-8ED6-485B27030D41} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceLocationRightsChange
Task: {5CFA5107-5848-407E-95C9-B2037C66175C} - System32\Tasks\Microsoft\Windows\SharedPC\Account Cleanup => Rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
Task: {5EB3BF55-16F2-43A9-B290-A1C3A7DFD7BB} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceProtectionStateChanged
Task: {62BD4A0F-0069-49FE-8C6C-115486C0D6FC} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {63326183-3B28-4CE7-A7CB-4C3AE514A594} - System32\Tasks\Microsoft\Windows\EDP\StorageCardEncryption Task
Task: {640CD30E-8F60-43CD-904D-A10E0B54CF11} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {641EF3D6-4D3D-4B79-91B0-90AB709ED98D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2019-03-01] (Microsoft Corporation)
Task: {6462C646-DD43-41FB-B5CC-43C72C793710} - System32\Tasks\Microsoft\Windows\PushToInstall\Registration => Sc.exe start pushtoinstall registration
Task: {66E8F095-D15A-41D3-92DF-FA1A8F6B043B} - System32\Tasks\Microsoft\Windows\Device Information\Device => C:\Windows\system32\devicecensus.exe [2019-03-10] (Microsoft Corporation)
Task: {67D30543-D967-4C83-9C38-9CD0218B22F9} - System32\Tasks\{0634C9A9-1474-41F9-BAE2-6F118990528B} => pcalua.exe -a C:\Users\marion\Downloads\SYS-EXTENSION-DRVR_V1.20_WIN7-64_FPC46-1642-01(2).EXE -d C:\Users\marion\Downloads
Task: {6C906182-B49C-4AD5-833C-E4A943D1205A} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {6E8B8A39-D529-4874-85BF-4DA4182F06D2} - System32\Tasks\Microsoft\Windows\USB\Usb-Notifications
Task: {764B5AB5-2291-4561-B529-3F8FB88F13E2} - System32\Tasks\{E79E06DD-1871-46C2-81FB-A6A5CD6D255C} => pcalua.exe -a C:\Users\marion\Downloads\SYS-EXTENSION-DRVR_V1.20_WIN7-64_FPC46-1642-01.EXE -d C:\Users\marion\Downloads
Task: {786E9D1E-5E72-4B28-8D2B-19629A08D7B8} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {7A35A2E3-3CB4-4E28-B98D-832C02003592} - System32\Tasks\Microsoft\Windows\Flighting\OneSettings\RefreshCache
Task: {7B7C83F3-1978-4285-9C99-61FBBA3F3146} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\ReconcileLanguageResources
Task: {7F07A86C-2ACB-483B-930B-F5A17891CAC7} - System32\Tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition => C:\Windows\system32\ClipRenew.exe [2018-09-15] (Microsoft Corporation)
Task: {7FED2659-3104-4EEE-83F2-480B7A607082} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {821783DA-438D-4A7F-8CD2-919AF89DE517} - System32\Tasks\Microsoft\Windows\EDP\EDP Auth Task
Task: {84144F69-21AC-42AA-B03D-780AFE3E2FB4} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe [2014-10-09] ()
Task: {8653663C-92F9-430B-8453-1546EFD3DE84} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {8CF64D1C-E29A-4356-96C8-DB68645A4732} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {8E6D4183-F486-4D4D-9CA0-99FB900890A2} - System32\Tasks\Microsoft\Windows\EDP\EDP Inaccessible Credentials Task
Task: {9134B28A-4AAF-4996-BAAD-8DABAA88B4B9} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)
Task: {9508BCD7-9DD1-4AF7-B077-39A62F2BD807} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2019-03-01] (Microsoft Corporation)
Task: {968FB3F1-9DB9-4D9E-99DA-B71D4E6C980D} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2019-03-20] (Microsoft Corporation)
Task: {96B70B3E-B783-453E-9003-7624BE03F49B} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_Plugin.exe [2019-02-12] (Adobe Systems Incorporated)
Task: {9E959007-0518-45B1-8ACB-C602AA46AAEF} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {9FD96F4A-1A13-44B9-B042-D4AE4BFBD1CF} - System32\Tasks\Microsoft\Windows\SMB\UninstallSMB1ServerTask => powershell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden "& %windir%\system32\WindowsPowerShell\v1.0\Modules\SmbShare\DisableUnusedSmb1.ps1 -Scenario Server"
Task: {A2A5C3AB-6D58-496E-A920-93C8937C4BD3} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {A7397E3E-2F19-4C3F-A311-365507773DC2} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {A75BC188-F12A-40C8-BCD4-DAFF7972B967} - System32\Tasks\Microsoft\Windows\BitLocker\BitLocker MDM policy Refresh
Task: {AD4E8AFB-A48C-4E13-BE83-B8D87600CFB4} - System32\Tasks\Microsoft\Windows\WlanSvc\CDSSync
Task: {AF5CDFDF-D668-4791-A0A0-511CA3178DCA} - System32\Tasks\{E47A4FE7-042D-49BA-9926-F613D9563F3A} => pcalua.exe -a C:\Users\marion\Downloads\jre-8u65-windows-i586-iftw.exe -d C:\Users\marion\Downloads
Task: {B02786EC-1D5F-4018-AAB3-37D27E7D6C9D} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2019-03-01] (AVAST Software)
Task: {B0EA6622-29DF-464A-AE99-E8786E3DDACD} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {B36F9319-17C8-48B7-BD93-BF76BD5FBF07} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {B7086EC4-7807-436C-86D7-ECDAA88F1438} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask => C:\Windows\system32\MDMAgent.exe [2018-09-15] (Microsoft Corporation)
Task: {B8173805-BB75-4619-A1B1-DDB0C03EA977} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2019-02-08] (AVAST Software)
Task: {BC4EE581-4607-479C-859F-4CBC824465D7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-09-14] (Piriform Ltd)
Task: {BD21C377-5B30-4E5A-B6F2-37D2086885E5} - System32\Tasks\Microsoft\Windows\BitLocker\BitLocker Encrypt All Drives
Task: {BE2617E4-3DB7-4387-9167-0614EDEB0171} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3140415436-1100377458-3732027645-1000 => C:\Users\marion\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe [2019-03-06] (Microsoft Corporation)
Task: {C15E5539-FDD7-43F0-99E0-91B019A6B966} - System32\Tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask => C:\Windows\system32\speech_onecore\common\SpeechModelDownload.exe [2018-09-15] (Microsoft Corporation)
Task: {C17E3484-5F3B-4AB5-B4CC-6A7E332AD0B3} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {C39F1F04-0C42-4B88-AAB0-83019179081D} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePolicyChange
Task: {C6BAE98B-A717-4047-B3B1-07EEC2BC8444} - System32\Tasks\Microsoft\Windows\WaaSMedic\PerformRemediation
Task: {C8A5839E-322A-4FA9-BACC-DFF4F1EE7F88} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {CBF05E8B-6F7B-4638-BD81-7213C2A8D388} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => C:\Windows\System32\UNP\UpdateNotificationMgr.exe [2018-09-15] (Microsoft Corporation)
Task: {D0598B56-8181-445C-BA00-707FD20E2AD9} - System32\Tasks\Microsoft\Windows\Management\Provisioning\Cellular => C:\Windows\system32\ProvTool.exe [2019-01-08] (Microsoft Corporation)
Task: {D2F2DA30-315B-4C98-B20D-03168F7F23BF} - System32\Tasks\Microsoft\Windows\InstallService\WakeUpAndScanForUpdates
Task: {D4F949A4-CD9D-4367-AB3D-6A4EEC0C38FE} - System32\Tasks\microsoft\windows\applicationdata\appuriverifierinstall => C:\Windows\system32\AppHostRegistrationVerifier.exe [2018-09-15] (Microsoft Corporation)
Task: {D6CF4858-B91A-4CA0-90AD-92D2FF66D1D7} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {D91C2011-3729-4BA1-9CAC-2F1BBC90F77D} - System32\Tasks\SafeZone scheduled Autoupdate 1458661089 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {D9B6FF7D-1BC2-48EE-99C8-E79AB2C2E8B3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2019-03-20] (Microsoft Corporation)
Task: {DC541E3D-B910-4A6E-A4A6-DDAE607D540C} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {DD8BA954-CA9C-416F-9673-3DC49E21D651} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2019-02-04] (Piriform Software Ltd)
Task: {E13652ED-F383-432D-9539-A79AC6412811} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\HandleWnsCommand
Task: {E39F8E32-F4B6-44B2-B8AF-D84A6CFEB7B8} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\Windows\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-09-15] ()
Task: {E451DDBC-B625-4F6B-9FED-12CE5FC2B2B6} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2019-03-20] (Microsoft Corporation)
Task: {E9549B46-B4ED-491A-BD01-0044CE382349} - System32\Tasks\Microsoft\Windows\DiskFootprint\StorageSense
Task: {F05EEAB4-60BC-4A6A-AB2B-635C1C84A0F5} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {F08B695C-1B6E-4FE0-9E7C-B1D7AC3B6984} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {F5AF6E4F-A26E-493C-A71B-3E620142B809} - System32\Tasks\Microsoft\Windows\Speech\HeadsetButtonPress => C:\Windows\system32\speech_onecore\common\SpeechRuntime.exe [2018-09-15] (Microsoft Corporation)
Task: {F8DCA0E0-0057-412C-9308-EF9B677E8F5C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2019-02-12] (Adobe Systems Incorporated)
Task: {F9860EFB-3733-4058-AC90-53645D6C3211} - System32\Tasks\Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask
Task: {FAFD4D4D-9F3D-49F8-B0E0-6BD805EEC22A} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {FB4755B2-BFE9-43B6-AEB6-91463FA454FF} - System32\Tasks\Microsoft\Windows\InstallService\SmartRetry
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2017-09-26 18:16 - 2010-04-05 20:55 - 00116104 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2018-10-02 20:28 - 2019-02-09 19:11 - 02712432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2013-05-03 18:49 - 2017-05-01 21:51 - 00133752 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2019-03-10 20:58 - 2019-03-10 20:58 - 00833064 _____ () C:\Windows\System32\InputHost.dll
2019-03-13 19:39 - 2019-03-13 22:40 - 08999504 _____ () C:\Program Files\Microsoft Office\root\Office16\1031\GrooveIntlResource.dll
2018-09-15 08:28 - 2018-09-15 08:28 - 00474624 _____ () C:\Windows\ShellExperiences\TileControl.dll
2019-02-12 21:14 - 2019-02-12 21:14 - 02801152 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2010-07-15 05:44 - 2010-07-15 05:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2019-03-10 20:58 - 2019-03-10 20:58 - 00833064 _____ () C:\Windows\SYSTEM32\inputhost.dll
2019-03-10 20:58 - 2019-03-10 20:58 - 00833064 _____ () C:\Windows\SYSTEM32\InputHost.dll
2019-03-10 20:58 - 2019-03-10 20:58 - 01740288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2019-03-12 17:10 - 2019-03-12 17:10 - 07296512 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20594.0_x64__8wekyb3d8bbwe\YourPhone.exe
2019-03-12 17:10 - 2019-03-12 17:10 - 02776576 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20594.0_x64__8wekyb3d8bbwe\YourPhone.AppCore.dll
2019-03-12 17:10 - 2019-03-12 17:10 - 00256512 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20594.0_x64__8wekyb3d8bbwe\AppConfig.dll
2019-02-12 23:20 - 2019-02-12 23:25 - 01004032 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20594.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2019-03-12 17:10 - 2019-03-12 17:10 - 00468480 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20594.0_x64__8wekyb3d8bbwe\YourPhone.DataStore.dll
2019-03-12 17:10 - 2019-03-12 17:10 - 03145728 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20594.0_x64__8wekyb3d8bbwe\PhoneCommunicationAppService.dll
2019-02-13 18:46 - 2019-02-13 18:46 - 04380232 _____ () C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.0_2.1810.18004.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2019-03-14 20:39 - 2019-03-14 20:43 - 00182272 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.41.54.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
2019-01-26 19:57 - 2019-01-26 19:57 - 93695912 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2019-02-08 18:36 - 2019-02-08 18:36 - 00321928 _____ () C:\Program Files\AVAST Software\Avast\serialization.dll
2019-02-08 18:36 - 2019-02-08 18:36 - 00654216 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2017-03-09 01:16 - 2017-03-09 01:16 - 00112264 _____ () C:\Windows\System32\IccLibDll_x64.dll
2019-02-13 19:18 - 2019-02-13 19:19 - 00282624 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.18.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll
2019-02-13 19:17 - 2019-02-13 19:18 - 02538056 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.18.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2019-02-13 19:17 - 2019-02-13 19:18 - 01757696 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.18.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.dll
2019-02-13 19:58 - 2019-02-13 19:58 - 00017408 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe
2019-02-13 19:58 - 2019-02-13 19:58 - 16974848 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.dll
2019-02-13 19:01 - 2019-02-13 19:01 - 05391752 _____ () C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe\Microsoft.Advertising.dll
2018-09-15 18:41 - 2018-09-15 18:41 - 00291328 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2018-09-15 18:40 - 2018-09-15 18:40 - 00009216 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.41.54.0_x64__kzf8qxf38zg5c\ImagePipelineNative.dll
2019-03-14 20:39 - 2019-03-14 20:39 - 00060416 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.41.54.0_x64__kzf8qxf38zg5c\ChakraBridge.dll
2012-11-28 14:13 - 2012-11-28 14:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 14:13 - 2012-11-28 14:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318} => ""="Media"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318} => "SafeBootDrivers"="1"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AudioEndpointBuilder => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AudioSrv => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HdAudAddService.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HdAudBus.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetSetupSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SerCx2.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\usbaudio.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96C-E325-11CE-BFC1-08002BE10318} => ""="Media"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96C-E325-11CE-BFC1-08002BE10318} => "SafeBootDrivers"="1"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-3140415436-1100377458-3732027645-1000\...\localhost -> localhost
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2019-01-04 20:53 - 00000856 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3140415436-1100377458-3732027645-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\marion\AppData\Local\Microsoft\BingDesktop\themes\2019-03-28.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\startupfolder: C:^Users^marion^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Free Music Zilla.lnk => C:\Windows\pss\Free Music Zilla.lnk.Startup
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
MSCONFIG\startupreg: CanonSolutionMenuEx => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LexwareInfoService => C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe /autostart
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [WirelessDisplay-Infra-In-TCP] => (Allow) %systemroot%\system32\CastSrv.exe
FirewallRules: [Microsoft-Windows-DeviceManagement-CertificateInstall-TCP-Out] => (Allow) %SystemRoot%\system32\dmcertinst.exe
FirewallRules: [Microsoft-Windows-DeviceManagement-OmaDmClient-TCP-Out] => (Allow) %SystemRoot%\system32\omadmclient.exe
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) %systemroot%\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
FirewallRules: [{4BD4608F-449F-46A8-9408-DBF5A730F3D3}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{0B1BAAEB-C836-4FE8-9E9B-ABB182A0B278}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{ACC34B9A-68CA-4C15-9DD3-217FAC24E055}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{B067F68D-034B-4BE4-8431-143264449C6C}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{15C3CAB6-5C03-4643-AAC1-50F9DDE4FBDF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9D766162-558B-4863-8ECF-DEC5A64D5776}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{084D0EA8-04DC-4F16-B408-5CF4EDCDEF34}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{31FDE8C6-F725-4BA6-9941-405B6A1E32D3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [UDP Query User{C2634F3D-78B6-47BD-8E2B-9D703AAF59A1}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{DC9C13F1-16B6-4011-A65E-A87575B892A0}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{36D67045-7125-4ECE-B411-1FDCFCD5A9DF}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{579F5A06-3E30-4E79-8C65-5C417A401D3C}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{D3D6FE07-1669-453E-AD77-B4A715729316}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{6F2D9D7D-D65E-435F-B72B-11381EEEA731}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{C5D4D23B-BF57-4835-83BD-AD66EC77BD7A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CC3D4D2D-034C-4777-8032-9B0B43D66B41}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{726EDF64-C163-42AE-82B4-91E30935EB62}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{9AC3B49D-BE8D-4448-BB31-D5B64CAE3EE2}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{D23A733A-1284-441C-8478-3B368ACE8998}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{EBC4879F-FCE5-471D-A6B4-4412821901E7}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{378CEFF3-DC45-4E0A-A069-0F2E59693CFB}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Free Music Zilla\FMZilla.exe] => Enabled:FMZilla
==================== Wiederherstellungspunkte =========================
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (03/27/2019 09:25:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SystemLook_x64.exe, Version: 0.0.0.0, Zeitstempel: 0x4e33b6ee
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.17763.348, Zeitstempel: 0xd620e319
Ausnahmecode: 0xc0000409
Fehleroffset: 0x0000000000020a63
ID des fehlerhaften Prozesses: 0xe78
Startzeit der fehlerhaften Anwendung: 0xSystemLook_x64.exe0
Pfad der fehlerhaften Anwendung: SystemLook_x64.exe1
Pfad des fehlerhaften Moduls: SystemLook_x64.exe2
Berichtskennung: SystemLook_x64.exe3
Vollständiger Name des fehlerhaften Pakets: SystemLook_x64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SystemLook_x64.exe5
Error: (03/27/2019 05:17:30 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\srtasks.exe ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80070422).
Error: (03/27/2019 05:09:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: MicrosoftEdgeCP.exe, Version: 11.0.17763.1, Zeitstempel: 0x90f701bc
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000409
Fehleroffset: 0x0000000000000203
ID des fehlerhaften Prozesses: 0x1a44
Startzeit der fehlerhaften Anwendung: 0xMicrosoftEdgeCP.exe0
Pfad der fehlerhaften Anwendung: MicrosoftEdgeCP.exe1
Pfad des fehlerhaften Moduls: MicrosoftEdgeCP.exe2
Berichtskennung: MicrosoftEdgeCP.exe3
Vollständiger Name des fehlerhaften Pakets: MicrosoftEdgeCP.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdgeCP.exe5
Error: (03/24/2019 09:10:57 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "mapi15://{S-1-5-21-3140415436-1100377458-3732027645-1000}/">.
Error: (03/24/2019 09:10:39 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (03/24/2019 09:10:39 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (03/24/2019 09:10:39 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (03/24/2019 09:10:39 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (03/24/2019 09:10:37 PM) (Source: Windows Search Service) (EventID: 3057) (User: )
Description: Der Plug-In-Manager <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
(HRESULT : 0x8e5e0713) (0x8e5e0713)
Error: (03/24/2019 09:10:37 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. 0xc0041801 (0xc0041801)
Systemfehler:
=============
Error: (03/28/2019 06:23:08 PM) (Source: DCOM) (EventID: 10016) (User: laptop-marion)
Description: AnwendungsspezifischLokalAktivierung{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}{15C20B67-12E7-4BB6-92BB-7AFF07997402}laptop-marionmarionS-1-5-21-3140415436-1100377458-3732027645-1000LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (03/28/2019 06:23:08 PM) (Source: DCOM) (EventID: 10016) (User: laptop-marion)
Description: AnwendungsspezifischLokalAktivierung{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}{15C20B67-12E7-4BB6-92BB-7AFF07997402}laptop-marionmarionS-1-5-21-3140415436-1100377458-3732027645-1000LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (03/28/2019 06:22:21 PM) (Source: DCOM) (EventID: 10016) (User: laptop-marion)
Description: AnwendungsspezifischLokalAktivierung{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}{15C20B67-12E7-4BB6-92BB-7AFF07997402}laptop-marionmarionS-1-5-21-3140415436-1100377458-3732027645-1000LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (03/28/2019 06:22:21 PM) (Source: DCOM) (EventID: 10016) (User: laptop-marion)
Description: AnwendungsspezifischLokalAktivierung{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}{15C20B67-12E7-4BB6-92BB-7AFF07997402}laptop-marionmarionS-1-5-21-3140415436-1100377458-3732027645-1000LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (03/27/2019 07:51:49 PM) (Source: DCOM) (EventID: 10016) (User: laptop-marion)
Description: AnwendungsspezifischLokalAktivierung{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}{15C20B67-12E7-4BB6-92BB-7AFF07997402}laptop-marionmarionS-1-5-21-3140415436-1100377458-3732027645-1000LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (03/27/2019 07:51:49 PM) (Source: DCOM) (EventID: 10016) (User: laptop-marion)
Description: AnwendungsspezifischLokalAktivierung{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}{15C20B67-12E7-4BB6-92BB-7AFF07997402}laptop-marionmarionS-1-5-21-3140415436-1100377458-3732027645-1000LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (03/27/2019 07:50:09 PM) (Source: DCOM) (EventID: 10016) (User: laptop-marion)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}laptop-marionmarionS-1-5-21-3140415436-1100377458-3732027645-1000LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (03/27/2019 07:50:08 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst BingDesktopUpdate erreicht.
Error: (03/27/2019 07:31:14 PM) (Source: DCOM) (EventID: 10016) (User: laptop-marion)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}laptop-marionmarionS-1-5-21-3140415436-1100377458-3732027645-1000LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (03/27/2019 07:31:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst BingDesktopUpdate erreicht.
CodeIntegrity:
===================================
Date: 2019-03-27 19:50:12.599
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-03-27 19:50:12.393
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-03-27 19:31:18.281
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-03-27 17:23:12.078
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-03-27 17:23:12.043
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-03-27 17:23:11.971
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-03-27 17:23:11.959
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-03-27 17:09:44.343
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\ashShell.dll that did not meet the Microsoft signing level requirements.
Date: 2019-03-24 21:10:39.564
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-03-24 21:10:39.550
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i3-2310M CPU @ 2.10GHz
Prozentuale Nutzung des RAM: 63%
Installierter physikalischer RAM: 3944.67 MB
Verfügbarer physikalischer RAM: 1449.03 MB
Summe virtueller Speicher: 7912.67 MB
Verfügbarer virtueller Speicher: 5247.08 MB
==================== Laufwerke ================================
Drive c: (Internal) (Fixed) (Total:232.88 GB) (Free:178.44 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: E9266275)
Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
28.03.2019, 19:00
Hybrid-Darstellung
