Trojaner-Board - Windows 10 rechner wird ferngesteuert

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 27-01-2020

durchgeführt von Juergen Hamann (Administrator) auf DESKTOP-8TFKQJN (ASUSTeK COMPUTER INC. G752VY) (29-01-2020 10:14:17)

Gestartet von C:\Users\Juergen Hamann\Desktop

Geladene Profile: Juergen Hamann (Verfügbare Profile: Juergen Hamann)

Platform: Windows 10 Home Version 1903 18362.592 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: FF

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

() [Datei ist nicht signiert] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe

() [Datei ist nicht signiert] C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2Svc32.exe

() [Datei ist nicht signiert] C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2Svc64.exe

() [Datei ist nicht signiert] C:\Program Files\Syncovery\SyncoveryVSS.exe

(ACD Systems International Inc. -> ) C:\Program Files\ACD Systems\ACDSee Ultimate\11.0\ACDSeeCommanderUltimate11.exe

(Acronis International GmbH -> ) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe

(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe

(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe

(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe

(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe

(Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

(Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe

(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe

(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(Avanquest UK Ltd -> Avanquest Software) C:\Program Files (x86)\eXpert PDF 12 Manager\eXpert PDF 12\eXpert Manager.exe

(Avanquest UK Ltd -> Avanquest Software) C:\Program Files\eXpert PDF 11\creator-ws.exe

(Avanquest UK Ltd -> Avanquest Software) C:\Program Files\eXpert PDF 12\creator\common\creator-ws.exe

(A-Volute -> ) C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe

(Buhl Data Service GmbH -> Buhl Data Service GmbH) C:\Program Files (x86)\Buhl\WISO Mein Geld 365\Buhl.MeinGeld.UpdateService.exe

(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(Fieldston Software) [Datei ist nicht signiert] C:\Program Files\Fieldston Software\gSyncit\gsyncit.exe

(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe

(Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation-Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MsMpEng.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\NisSrv.exe

(Node.js Foundation -> Node.js) C:\Users\Juergen Hamann\AppData\Roaming\Steganos\OnlineShield\Proxy\node.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(Portrait Displays, Inc. -> ) C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\DP\DPHelper.exe

(Portrait Displays, Inc. -> ) C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\DP\DPHelper64.exe

(Portrait Displays, Inc. -> Portrait Displays Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\HookManager.exe

(Portrait Displays, Inc. -> Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdiSDKHelper.exe

(Portrait Displays, Inc. -> Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe

(Portrait Displays, Inc. -> Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe

(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe

(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe

(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe

(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATISDE.EXE

(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATISDE.EXE

(Steganos Software GmbH -> Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 20\Notifier.exe

(Steganos Software GmbH -> Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 20\passwordmanagercom.exe

(Steganos Software GmbH -> Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 20\SteganosBrowserMonitor.exe

(Steganos Software GmbH) [Datei ist nicht signiert] C:\Program Files (x86)\Steganos Privacy Suite 20\fredirstarter.exe

(Steganos Software GmbH) [Datei ist nicht signiert] C:\Program Files (x86)\Steganos Privacy Suite 20\SteganosHotKeyService.exe

(Super Flexible Software Ltd. & Co. KG -> ) C:\Program Files\Syncovery\SyncoveryGuardian.exe

(Super Flexible Software Ltd. & Co. KG -> Super Flexible Software) C:\Program Files\Syncovery\SyncoveryFileSystemMonitor.exe

(Synology Inc. -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe

(voidtools -> voidtools) C:\Program Files\Everything\Everything.exe

(voidtools -> voidtools) C:\Program Files\Everything\Everything.exe

(Wacom Technology Corp. -> Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe

(Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe

(Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe

(Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe

(Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe

(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\WDAppManager.exe

(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [2480520 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)

HKLM\...\Run: [SS2UILauncher] => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe [1153504 2015-12-15] (A-Volute -> )

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [752168 2019-03-25] (Acronis International GmbH -> )

HKLM\...\Run: [Eraser] => C:\Program Files\Eraser\Eraser.exe [1067024 2018-01-03] (Heidi Computers Ltd -> The Eraser Project)

HKLM\...\Run: [Everything] => C:\Program Files\Everything\Everything.exe [2240288 2019-02-04] (voidtools -> voidtools)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)

HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [4971688 2019-03-25] (Acronis International GmbH -> )

HKLM-x32\...\Run: [PivotSoftware] => C:\Program Files (x86)\Portrait Displays\Pivot Software\wpctrl.exe [694824 2009-03-03] (Portrait Displays, Inc. -> )

HKLM-x32\...\Run: [DT HPC] => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [122384 2014-06-27] (Portrait Displays, Inc. -> Portrait Displays, Inc.)

HKLM-x32\...\Run: [WDAppManager] => C:\Program Files (x86)\Western Digital\WD App Manager\AppManagerLauncher.exe [21888 2017-12-18] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)

HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5564784 2015-02-12] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)

HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3315280 2019-09-10] (Open Source Developer, Dominik Reichl -> Dominik Reichl)

HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [441448 2019-03-25] (Acronis International GmbH -> Acronis International GmbH)

HKLM-x32\...\Run: [Steganos HotKeys] => C:\Program Files (x86)\Steganos Privacy Suite 20\SteganosHotKeyService.exe [154112 2019-04-03] (Steganos Software GmbH) [Datei ist nicht signiert]

HKLM-x32\...\Run: [SSS20 Chrome Autofill Relay] => C:\Program Files (x86)\Steganos Privacy Suite 20\passwordmanagercom.exe [1457184 2019-04-12] (Steganos Software GmbH -> Steganos Software GmbH)

HKLM-x32\...\Run: [SSS20 Browser Monitor] => C:\Program Files (x86)\Steganos Privacy Suite 20\SteganosBrowserMonitor.exe [1165352 2019-04-12] (Steganos Software GmbH -> Steganos Software GmbH)

HKLM-x32\...\Run: [SSS20 Notifier] => C:\Program Files (x86)\Steganos Privacy Suite 20\Notifier.exe [4233720 2019-04-12] (Steganos Software GmbH -> Steganos Software GmbH)

HKLM-x32\...\Run: [SSS20 File Redirection Starter] => C:\Program Files (x86)\Steganos Privacy Suite 20\fredirstarter.exe [23040 2019-04-03] (Steganos Software GmbH) [Datei ist nicht signiert]

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1151872 2016-11-18] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [665568 2018-10-05] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [870368 2018-10-05] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452272 2012-08-31] (Canon Inc. -> CANON INC.)

HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [588288 2016-01-08] (Nikon Corporation) [Datei ist nicht signiert]

HKLM\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\Run: [ACDSeeCommanderUltimate11] => C:\Program Files\ACD Systems\ACDSee Ultimate\11.0\ACDSeeCommanderUltimate11.exe [6414824 2018-04-06] (ACD Systems International Inc. -> )

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe [1104288 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\Run: [gSyncit] => C:\Program Files\Fieldston Software\gSyncit\gsyncit.exe [229376 2019-12-15] (Fieldston Software) [Datei ist nicht signiert]

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISDE.EXE [418000 2016-07-14] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISDE.EXE [418000 2016-07-14] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\Run: [SSS20_Proxy] => C:\Program Files (x86)\Steganos Privacy Suite 20\Suite.exe [4682752 2019-04-12] (Steganos Software GmbH -> Steganos Software GmbH)

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\MountPoints2: {2d2c9c0f-1c1d-11ea-8a79-d017c21ff115} - "I:\HiSuiteDownLoader.exe" 

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\MountPoints2: {b5ef6897-c721-11e8-90b4-806e6f6e6963} - "C:\WINDOWS\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL B:\index.html

HKLM\...\Providers\Internet Print Provider: inetpp.dll

HKLM\...\Providers\LanMan Print Services: win32spl.dll

HKLM\Software\...\AppCompatFlags\Custom\iisexpress.exe: [{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb] -> IIS Express Application Compatibility Database for x64

HKLM\Software\...\AppCompatFlags\Custom\iisexpress.exe: [{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb] -> IIS Express Application Compatibility Database for x86

HKLM\Software\...\AppCompatFlags\InstalledSDB\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb [2012-05-29]

HKLM\Software\...\AppCompatFlags\InstalledSDB\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb [2012-05-29]

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-24] (Google LLC -> Google LLC)

HKLM\Software\...\Winlogon\GPExtensions: [{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}] -> C:\Windows\SysWOW64\wlgpclnt.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation)

HKLM\Software\...\Winlogon\GPExtensions: [{16be69fa-4209-4250-88cb-716cf41954e0}] -> auditcse.dll

HKLM\Software\...\Winlogon\GPExtensions: [{25537BA6-77A8-11D2-9B6C-0000F8080861}] -> C:\Windows\SysWOW64\fdeploy.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation)

HKLM\Software\...\Winlogon\GPExtensions: [{426031c0-0b47-4852-b0ca-ac3d37bfcb39}] -> C:\Windows\SysWOW64\gptext.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation)

HKLM\Software\...\Winlogon\GPExtensions: [{4d968b55-cac2-4ff5-983f-0a54603781a3}] -> WorkFoldersGPExt.dll

HKLM\Software\...\Winlogon\GPExtensions: [{7909AD9E-09EE-4247-BAB9-7029D5F0A278}] -> C:\Windows\SysWOW64\dmenrollengine.dll [2019-11-08] (Microsoft Windows -> Microsoft Corporation)

HKLM\Software\...\Winlogon\GPExtensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}] -> C:\Windows\SysWOW64\scecli.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation)

HKLM\Software\...\Winlogon\GPExtensions: [{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}] -> C:\Windows\SysWOW64\dot3gpclnt.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation)

HKLM\Software\...\Winlogon\GPExtensions: [{BA649533-0AAC-4E04-B9BC-4DBAE0325B12}] -> pwlauncher.dll

HKLM\Software\...\Winlogon\GPExtensions: [{C34B2751-1CF4-44F5-9262-C3FC39666591}] -> pwlauncher.dll

HKLM\Software\...\Winlogon\GPExtensions: [{cdeafc3d-948d-49dd-ab12-e578ba4af7aa}] -> C:\Windows\SysWOW64\gptext.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation)

HKLM\Software\...\Winlogon\GPExtensions: [{f3ccc681-b74c-4060-9f26-cd84525dca2a}] -> auditcse.dll

HKLM\Software\...\Winlogon\GPExtensions: [{FB2CA36D-0B40-4307-821B-A13B252DE56C}] -> C:\Windows\SysWOW64\gptext.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation)

HKLM\Software\...\Winlogon\GPExtensions: [{fbf687e6-f063-4d9f-9f4f-fd9a26acdd5f}] -> C:\Windows\SysWOW64\gptext.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CardMinder Viewer.lnk [2018-10-07]

ShortcutTarget: CardMinder Viewer.lnk -> C:\Program Files (x86)\PFU\ScanSnap\CardMinder\CardLauncher.exe (PFU LIMITED) [Datei ist nicht signiert]

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\In PDF-Datei mit ScanSnap Organizer konvertieren.lnk [2020-01-09]

ShortcutTarget: In PDF-Datei mit ScanSnap Organizer konvertieren.lnk -> C:\Program Files (x86)\PFU\ScanSnap\Organizer\PfuSsOrgOcrChk.exe (PFU LIMITED) [Datei ist nicht signiert]

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ScanSnap Manager.lnk [2020-01-06]

ShortcutTarget: ScanSnap Manager.lnk -> C:\Program Files (x86)\PFU\ScanSnap\Driver\PfuSsMon.exe (PFU LIMITED) [Datei ist nicht signiert]

GroupPolicy: Beschränkung ? <==== ACHTUNG

FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {000141A3-5FF0-43F6-83AF-03C801C8B305} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpCmdRun.exe [469648 2020-01-29] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {114CFB1E-5967-40C6-A143-F09D9579FED7} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\Thunderbolt.exe [363160 2015-11-04] (Intel(R) Client Connectivity Division SW -> Intel Corporation)

Task: {122D7738-E887-4D5A-AED0-3F00EDB359C4} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9269352 2019-08-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

Task: {1B0C0498-944F-4BAA-A51E-1D4376253762} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => C:\Windows\SysWOW64\BthUdTask.exe [37888 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

Task: {23F98C74-9D47-45BB-9B8B-CDB257B3997D} - System32\Tasks\SS2svc64Run => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2svc64.exe [275456 2015-12-15] () [Datei ist nicht signiert]

Task: {26CA2964-6237-46B0-A8BE-8159532CD488} - System32\Tasks\SS2UILauncherRun => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe [1153504 2015-12-15] (A-Volute -> )

Task: {313D8A07-F501-4DE8-929A-C51B640E614D} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506384 2019-08-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

Task: {31FA0E67-5558-4444-9424-B1187CC11495} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158552 2020-01-25] (Microsoft Corporation -> Microsoft Corporation)

Task: {448B4234-3D6B-4723-9488-DEDC9703846D} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => sc.exe start ThunderboltService

Task: {460F2CA8-F7A7-4B22-98FA-7F79536E8D2E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-11-13] (Google Inc -> Google Inc.)

Task: {46E71A32-6FFC-469A-849E-C1B61823B64D} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe

Task: {487B20FA-02DC-4674-9546-74209761967E} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)

Task: {4CF59E26-E2A4-4A5C-BCCB-851E47EB5945} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19782224 2015-05-25] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)

Task: {55B21F3C-A965-4A81-9874-2C706BB6328A} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe

Task: {5BE1E15B-F971-4168-9D11-404C6807316B} - System32\Tasks\EPSON ET-4750 Series Update {F8ADD274-58C9-4C57-90FE-387445E4B1CA} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSDE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

Task: {5C473998-E2C0-4741-8D96-6AA165D55C5F} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe

Task: {5D433C9F-6416-4521-BD1B-58CCEB80CB6C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-11-13] (Google Inc -> Google Inc.)

Task: {64EF325B-8C2C-4282-9C2E-BE7EC67CC532} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24629104 2020-01-08] (Microsoft Corporation -> Microsoft Corporation)

Task: {667E1387-C405-4064-A0ED-C044B17AFFC0} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

Task: {6A8DCF7C-F12D-41B3-A0A1-CD714768154A} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe

Task: {6AE40091-253A-4245-8D92-B0587556B1B5} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\tbtsvc.exe [1831064 2015-11-04] (Intel(R) Client Connectivity Division SW -> Intel Corporation)

Task: {6B9B60B4-990A-4BE2-B714-B65ED9B7191A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2050456 2020-01-25] (Microsoft Corporation -> Microsoft Corporation)

Task: {70D7DD5C-496A-4856-97BD-5F843221EB7A} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => C:\Program Files (x86)\Intel\Thunderbolt Software\\Thunderbolt.exe [363160 2015-11-04] (Intel(R) Client Connectivity Division SW -> Intel Corporation)

Task: {7233AE2A-C6C8-4CEB-9A7D-1F52E3AD0CCD} - System32\Tasks\SS2svc32Run => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2svc32.exe [2578432 2015-12-15] () [Datei ist nicht signiert]

Task: {77356725-DD1A-4169-9C40-EE9B4350828C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpCmdRun.exe [469648 2020-01-29] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {7748AEDF-105E-4163-9207-13F7F57DE701} - System32\Tasks\Opera scheduled Autoupdate 1547506892 => C:\Users\Juergen Hamann\AppData\Local\Programs\Opera\launcher.exe [1493592 2019-06-14] (Opera Software AS -> Opera Software)

Task: {80C0BD34-FB9C-4E16-8D28-A01AE7F49290} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe

Task: {86A72E25-6D0A-4A2C-9537-AEAAC37ABEB0} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24629104 2020-01-08] (Microsoft Corporation -> Microsoft Corporation)

Task: {894CD5CB-63D1-4980-9547-334FB151ECD4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6128536 2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

Task: {8996582E-BFE1-4284-9A8B-804E6A931852} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1190424 2018-08-13] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

Task: {89D78CDA-EFB8-4A68-97ED-45708AE3940D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpCmdRun.exe [469648 2020-01-29] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {8C9CAC9E-AB2C-4B5F-AE88-FE3565456CAF} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe

Task: {9B28ED59-027B-4549-9553-3074A3994353} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2050456 2020-01-25] (Microsoft Corporation -> Microsoft Corporation)

Task: {A4612AEB-483C-494E-A195-BA3EA093AE76} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)

Task: {A6629262-D26E-47AC-B788-19675FF7E03B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpCmdRun.exe [469648 2020-01-29] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {BB178408-9198-4CD9-ADFF-A2C56D35A8C1} - System32\Tasks\EPSON ET-4750 Series Update {765A7FE6-EAA8-4989-811B-3F1B76A36785} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSDE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

Task: {BD979DF3-C7F7-4506-83CD-175EEF37E304} - System32\Tasks\Abelssoft\FileFusion_97 => C:\ProgramData\Abelssoft\FileFusion\Program\FileFusion.exe [3459464 2019-07-03] (Ascora GmbH -> )

Task: {C6657D6F-CAD5-4ECA-A0E2-87B8F0BDA3B7} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158552 2020-01-25] (Microsoft Corporation -> Microsoft Corporation)

Task: {D209998E-DD26-4D73-8AC6-DBA9C1A903B3} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe

Task: {D74FFBA6-01F9-48EF-A522-22578CA712E5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6128536 2020-01-13] (Microsoft Corporation -> Microsoft Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

Task: C:\WINDOWS\Tasks\EPSON ET-4750 Series Update {765A7FE6-EAA8-4989-811B-3F1B76A36785}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSDE.EXE:/EXE:{765A7FE6-EAA8-4989-811B-3F1B76A36785} /F:UpdateWORKGROUP\DESKTOP-8TFKQJN$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON ET-4750 Series Update {F8ADD274-58C9-4C57-90FE-387445E4B1CA}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSDE.EXE:/EXE:{F8ADD274-58C9-4C57-90FE-387445E4B1CA} /F:UpdateWORKGROUP\DESKTOP-8TFKQJN$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: 127.0.0.1 opencandy.com

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{3ee895fb-d21f-493e-8283-39a6e37f1039}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{e5d5cca8-8335-4c38-a1f7-485f86141402}: [DhcpNameServer] 192.168.178.1
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus15.msn.com/?pc=ASTE

SearchScopes: HKU\S-1-5-21-4253964506-1320168302-2910709501-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-4253964506-1320168302-2910709501-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: eXpert PDF 12 Helper -> {02784781-5D19-4A81-9B55-7447317FA618} -> C:\Program Files\eXpert PDF 12\creator\plugins\IEAddin\creator-ie-helper.dll [2018-09-28] (Avanquest UK Ltd -> Avanquest Software)

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

Toolbar: HKLM - eXpert PDF 12 Toolbar - {9B5080F8-91BD-420C-BF1A-6EF26F66845C} - C:\Program Files\eXpert PDF 12\creator\plugins\IEAddin\creator-ie-plugin.dll [2018-09-28] (Avanquest UK Ltd -> Avanquest Software)

Toolbar: HKLM - Steganos Password Manager Toolbar - {F8C516FE-BF12-4C4A-A70A-6BCB164875A4} - C:\Program Files (x86)\Steganos Privacy Suite 20\SPMIEToolbar64.dll [2018-09-27] (Steganos Software GmbH -> Steganos Software GmbH)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)
 

FireFox:

========

FF DefaultProfile: rwmrh5xo.default-1554803580642

FF ProfilePath: C:\Users\Juergen Hamann\AppData\Roaming\Mozilla\Firefox\Profiles\rwmrh5xo.default-1554803580642 [2020-01-29]

FF Homepage: Mozilla\Firefox\Profiles\rwmrh5xo.default-1554803580642 -> www.google.de

FF Extension: (Lesezeichenduplikate) - C:\Users\Juergen Hamann\AppData\Roaming\Mozilla\Firefox\Profiles\rwmrh5xo.default-1554803580642\Extensions\bookmarkdupes@martin-vaeth.org.xpi [2019-12-23]

FF Extension: (Bookmarks Organizer) - C:\Users\Juergen Hamann\AppData\Roaming\Mozilla\Firefox\Profiles\rwmrh5xo.default-1554803580642\Extensions\bookmarksorganizer@agenedia.com.xpi [2019-04-13]

FF Extension: (Default Bookmark Folder) - C:\Users\Juergen Hamann\AppData\Roaming\Mozilla\Firefox\Profiles\rwmrh5xo.default-1554803580642\Extensions\default-bookmark-folder@gustiaux.com.xpi [2019-12-18]

FF Extension: (Ghostery – datenschutzorientierter Werbeblocker) - C:\Users\Juergen Hamann\AppData\Roaming\Mozilla\Firefox\Profiles\rwmrh5xo.default-1554803580642\Extensions\firefox@ghostery.com.xpi [2020-01-13]

FF Extension: (Kee - Password Manager) - C:\Users\Juergen Hamann\AppData\Roaming\Mozilla\Firefox\Profiles\rwmrh5xo.default-1554803580642\Extensions\keefox@chris.tomlinson.xpi [2019-10-27]

FF Extension: (LastPass: Free Password Manager) - C:\Users\Juergen Hamann\AppData\Roaming\Mozilla\Firefox\Profiles\rwmrh5xo.default-1554803580642\Extensions\support@lastpass.com.xpi [2020-01-29]

FF Extension: (Avast Online Security) - C:\Users\Juergen Hamann\AppData\Roaming\Mozilla\Firefox\Profiles\rwmrh5xo.default-1554803580642\Extensions\wrc@avast.com.xpi [2020-01-29] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/aos/update.json]

FF Extension: (Steganos Passwort-Manager) - C:\Users\Juergen Hamann\AppData\Roaming\Mozilla\Firefox\Profiles\rwmrh5xo.default-1554803580642\Extensions\{00D0643E-B367-4779-B45D-7046EBA37A89}.xpi [2019-10-27]

FF Extension: (Video DownloadHelper) - C:\Users\Juergen Hamann\AppData\Roaming\Mozilla\Firefox\Profiles\rwmrh5xo.default-1554803580642\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2019-10-27]

FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Juergen Hamann\AppData\Roaming\Mozilla\Firefox\Profiles\rwmrh5xo.default-1554803580642\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-10-27]

FF HKLM\...\Firefox\Extensions: [expert_pdf_12_conv@expert-pdf.com] - C:\Program Files\eXpert PDF 12\creator\plugins\FirefoxAddin\expert_pdf_12_conv@expert-pdf.com.xpi

FF Extension: (eXpert PDF 12 Creator) - C:\Program Files\eXpert PDF 12\creator\plugins\FirefoxAddin\expert_pdf_12_conv@expert-pdf.com.xpi [2018-09-28]

FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 20\spmplugin3 => nicht gefunden

FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn

FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2018-11-22] [] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [expert_pdf_12_conv@expert-pdf.com] - C:\Program Files\eXpert PDF 12\creator\plugins\FirefoxAddin\expert_pdf_12_conv@expert-pdf.com.xpi

FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on

FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2019-08-03] [] [ist nicht signiert]

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_321.dll [2020-01-23] (Adobe Inc. -> )

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom) [Datei ist nicht signiert]

FF Plugin: eXpert PDF 11 -> C:\Program Files\eXpert PDF 11\np-previewer.dll [2017-03-10] (Avanquest UK Ltd -> Avanquest Software)

FF Plugin: eXpert PDF 12 -> C:\Program Files\eXpert PDF 12\np-previewer.dll [2018-09-28] (Avanquest UK Ltd -> Avanquest Software)

FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom) [Datei ist nicht signiert]

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_321.dll [2020-01-23] (Adobe Inc. -> )

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Keine Datei]

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Keine Datei]

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-12-08] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-13] (Google LLC -> Google LLC)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-13] (Google LLC -> Google LLC)

FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom) [Datei ist nicht signiert]

FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom) [Datei ist nicht signiert]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [4383760 2019-03-25] (Acronis International GmbH -> Acronis International GmbH)

R2 AsHidService; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [122520 2015-12-17] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11164232 2020-01-07] (Microsoft Corporation -> Microsoft Corporation)

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138768 2014-06-27] (Portrait Displays, Inc. -> Portrait Displays, Inc.)

R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2018-04-09] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

R2 esifsvc; C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe [1883104 2019-01-05] (Intel Corporation -> Intel Corporation)

S3 eXpert PDF 11; C:\Program Files\eXpert PDF 11\ws.exe [1879904 2017-03-10] (Avanquest UK Ltd -> Avanquest Software)

S3 eXpert PDF 11 CrashHandler; C:\Program Files\eXpert PDF 11\crash-handler-ws.exe [931680 2017-03-10] (Avanquest UK Ltd -> Avanquest Software)

R2 eXpert PDF 11 Creator; C:\Program Files\eXpert PDF 11\creator-ws.exe [739680 2017-03-10] (Avanquest UK Ltd -> Avanquest Software)

S3 eXpert PDF 12; C:\Program Files\eXpert PDF 12\ws.exe [2006264 2018-09-28] (Avanquest UK Ltd -> Avanquest Software)

R2 eXpert PDF 12 Creator; C:\Program Files\eXpert PDF 12\creator\common\creator-ws.exe [756984 2018-09-28] (Avanquest UK Ltd -> Avanquest Software)

R2 eXpert PDF 12 Manager; C:\Program Files (x86)\eXpert PDF 12 Manager\eXpert PDF 12\eXpert Manager.exe [1253736 2018-06-27] (Avanquest UK Ltd -> Avanquest Software)

R2 GuardianService; C:\Program Files\Syncovery\SyncoveryGuardian.exe [2342184 2016-09-02] (Super Flexible Software Ltd. & Co. KG -> )

R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [530208 2019-12-09] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)

S4 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel® Trusted Connect Service -> Intel(R) Corporation)

S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert]

R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert]

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-09-18] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)

R3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2020-01-14] (Malwarebytes Inc -> Malwarebytes)

R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2018-06-18] (Acronis International GmbH -> Acronis International GmbH)

S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2018-11-23] (Acronis International GmbH -> Acronis International GmbH)

S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1774784 2019-03-25] (Acronis International GmbH -> )

R2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [80472 2012-09-06] (Microsoft Corporation -> Microsoft Corporation)

R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-12-02] (Intel Corporation-Wireless Connectivity Solutions -> )

R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)

R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)

S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234824 2018-11-22] (soft Xpansion GmbH & Co.KG -> soft Xpansion)

R2 SyncoveryFileSystemMonitorService; C:\Program Files\Syncovery\SyncoveryFileSystemMonitor.exe [1479976 2018-08-12] (Super Flexible Software Ltd. & Co. KG -> Super Flexible Software)

R2 SyncoveryVSSService; C:\Program Files\Syncovery\SyncoveryVSS.exe [2793472 2018-05-14] () [Datei ist nicht signiert]

S3 ThunderboltService; C:\Program Files (x86)\Intel\Thunderbolt Software\tbtsvc.exe [1831064 2015-11-04] (Intel(R) Client Connectivity Division SW -> Intel Corporation)

S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [7099408 2019-03-25] (Acronis International GmbH -> Acronis International GmbH)

R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248856 2018-05-11] (Synology Inc. -> ) [Datei ist nicht signiert]

R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [302968 2015-02-12] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2020-01-29] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2020-01-29] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WISOMeinGeld365ProfessionalUpdatedienst; C:\Program Files (x86)\Buhl\WISO Mein Geld 365\Buhl.MeinGeld.UpdateService.exe [121848 2019-09-30] (Buhl Data Service GmbH -> Buhl Data Service GmbH)

R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [656664 2014-08-19] (Wacom Technology Corp. -> Wacom Technology, Corp.)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3832224 2015-12-02] (Intel Corporation-Wireless Connectivity Solutions -> Intel® Corporation)

R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [88984 2017-04-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStor.SYS [118088 2019-08-07] (Alcorlink Corp. -> )

R2 ASMMAP64; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [18048 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUS)

R3 AsusSGDrv; C:\WINDOWS\System32\drivers\AsusSGDrv.sys [139208 2018-03-06] (ASUSTeK Computer Inc. -> ASUS Corporation)

R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)

R3 busenum; C:\WINDOWS\System32\drivers\busenum.sys [57824 2012-08-03] (Synology Inc. -> Windows (R) Win 7 DDK provider)

R1 cbfsfilter2017; C:\WINDOWS\system32\drivers\cbfsfilter2017.sys [347736 2018-01-30] (Microsoft Windows Hardware Compatibility Publisher ->  Callback Technologies, Inc.)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [78832 2018-12-14] (Intel Corporation -> Intel Corporation)

S3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [75248 2018-12-14] (Intel Corporation -> Intel Corporation)

S3 esif_lf; C:\WINDOWS\System32\drivers\esif_lf.sys [403440 2018-12-14] (Intel Corporation -> Intel Corporation)

S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2017-07-26] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)

R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [667144 2019-04-05] (Acronis International GmbH -> Acronis International GmbH)

R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [390592 2019-04-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

S3 GigasetGenericUSB_x64; C:\WINDOWS\System32\drivers\GigasetGenericUSB_x64.sys [54272 2017-03-07] (Siemens AG -> Siemens Home and Office Communication Devices GmbH & Co. KG)

S3 hidkmdf; C:\WINDOWS\System32\drivers\hidkmdf.sys [14016 2019-08-07] (Wacom Technology Corp. -> Windows (R) Win 7 DDK provider)

R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32680 2019-08-07] (ASUSTek Computer Inc. -> ASUS)

R0 hswultpep; C:\WINDOWS\System32\drivers\hswultpep.sys [62968 2013-02-08] (Intel Corporation - Software and Firmware Products -> Intel Corporation)

S3 HWHandSet; C:\WINDOWS\System32\drivers\hw_quusbmdm.sys [226560 2017-07-26] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)

S3 hwusb_cdcacm; C:\WINDOWS\System32\drivers\hw_cdcacm.sys [127360 2017-07-26] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)

S3 hw_usbdev; C:\WINDOWS\System32\drivers\hw_usbdev.sys [116864 2017-07-26] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)

R3 iaLPSS2_GPIO2; C:\WINDOWS\System32\drivers\iaLPSS2_GPIO2.sys [95632 2020-01-06] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)

R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [734496 2019-12-09] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [218288 2020-01-29] (Malwarebytes Inc -> Malwarebytes)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-01-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-01-29] (Malwarebytes Inc -> Malwarebytes)

R3 MEIx64; C:\WINDOWS\System32\DriverStore\FileRepository\heci.inf_amd64_85021432489d6a1c\x64\TeeDriverW8x64.sys [266128 2019-08-07] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)

R3 necbatt; C:\WINDOWS\System32\drivers\necbatt.sys [34880 2018-05-09] (NEC Personal Computers, Ltd. -> NEC Personal Computers, Ltd.)

R3 Netwtw06; C:\WINDOWS\System32\drivers\Netwtw06.sys [8832288 2019-12-09] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)

S3 nhi; C:\WINDOWS\System32\drivers\tbt81x.sys [126464 2015-11-13] (Intel(R) Client Connectivity Division SW -> Intel Corporation)

R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_bcc48657f0b659f1\nvlddmkm.sys [22744688 2020-01-06] (NVIDIA Corporation -> NVIDIA Corporation)

S3 NvStreamKms; kein ImagePath

S3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69840 2019-08-07] (NVIDIA Corporation -> NVIDIA Corporation)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1156392 2020-01-06] (Realtek Semiconductor Corp. -> Realtek )

S3 Ser2pl; C:\WINDOWS\System32\drivers\ser2pl64.sys [210752 2017-03-15] (WDKTestCert charles-yeh,131069736795923936 -> Prolific Technology Inc.)

S3 slabbus; C:\WINDOWS\System32\drivers\slabbus.sys [79872 2008-05-27] (Microsoft Windows Hardware Compatibility Publisher -> MCCI Corporation)

S3 slabser; C:\WINDOWS\System32\drivers\slabser.sys [103936 2008-05-27] (Microsoft Windows Hardware Compatibility Publisher -> MCCI Corporation)

R1 SLEE_19_DRIVER; C:\WINDOWS\Sleen1964.sys [117848 2018-02-16] (Softwareentwicklung Patric Remus - ArchiCrypt - (Patric W.Remus) -> Softwareentwicklung Remus - ArchiCrypt - )

S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [56336 2018-08-07] (Synaptics Incorporated -> Synaptics Incorporated)

R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [56840 2018-08-07] (Synaptics Incorporated -> Synaptics Incorporated)

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2019-08-07] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64640 2016-09-05] (Samsung Electronics CO., LTD. -> QUALCOMM Incorporated)

S3 tib; C:\WINDOWS\system32\DRIVERS\tib.sys [885880 2019-04-05] (Acronis International GmbH -> Acronis International GmbH)

R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [171976 2019-04-05] (Acronis International GmbH -> Acronis International GmbH)

S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [693768 2019-04-05] (Acronis International GmbH -> Acronis International GmbH)

R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [828776 2018-10-29] (IDRIX -> IDRIX)

R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [331976 2019-04-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [243472 2019-04-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45664 2020-01-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)

R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [355760 2020-01-29] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2020-01-29] (Microsoft Windows -> Microsoft Corporation)

R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [54512 2018-10-09] (Intel Corporation -> Intel Corporation)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2020-01-29 10:14 - 2020-01-29 10:15 - 000058855 _____ C:\Users\Juergen Hamann\Desktop\FRST.txt

2020-01-29 10:13 - 2020-01-29 10:13 - 000000000 ____D C:\Users\Juergen Hamann\Desktop\FRST-OlderVersion

2020-01-29 10:05 - 2020-01-29 10:05 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2020-01-29 10:05 - 2020-01-29 10:05 - 000218288 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys

2020-01-29 00:29 - 2020-01-29 00:29 - 008237744 _____ (Malwarebytes) C:\Users\Juergen Hamann\Desktop\adwcleaner_8.0.1.exe

2020-01-29 00:18 - 2020-01-29 00:35 - 000000000 ____D C:\AdwCleaner

2020-01-28 09:10 - 2020-01-28 09:11 - 003935684 _____ C:\WINDOWS\Minidump\012820-35500-01.dmp

2020-01-27 19:17 - 2020-01-27 19:18 - 000078222 _____ C:\Users\Juergen Hamann\Desktop\Addition_01.txt

2020-01-27 19:14 - 2020-01-27 19:18 - 000099680 _____ C:\Users\Juergen Hamann\Desktop\FRST_01.txt

2020-01-27 19:13 - 2020-01-27 19:13 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Local\OneDrive

2020-01-27 18:22 - 2020-01-27 18:22 - 002007844 _____ C:\Users\Juergen Hamann\Downloads\processexplorer.zip

2020-01-27 18:22 - 2020-01-27 18:22 - 000000000 ____D C:\Users\Juergen Hamann\Downloads\processexplorer

2020-01-27 18:03 - 2020-01-27 18:03 - 000000000 ____D C:\Users\Juergen Hamann\Downloads\autoruns

2020-01-27 18:02 - 2020-01-27 18:02 - 001728127 _____ C:\Users\Juergen Hamann\Downloads\autoruns.zip

2020-01-27 15:17 - 2020-01-27 15:22 - 000000942 _____ C:\Users\Juergen Hamann\Desktop\Start Tor Browser.lnk

2020-01-27 15:13 - 2020-01-27 15:13 - 000000000 ____D C:\Users\Juergen Hamann\Desktop\Tor Browser

2020-01-25 22:02 - 2020-01-25 22:02 - 000036192 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS

2020-01-24 14:01 - 2020-01-24 14:01 - 000002297 _____ C:\Users\Public\Desktop\tax 2019.lnk

2020-01-24 14:01 - 2020-01-24 14:01 - 000002297 _____ C:\ProgramData\Desktop\tax 2019.lnk

2020-01-24 14:01 - 2020-01-24 14:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\tax 2019 Professional

2020-01-24 13:59 - 2020-01-24 13:59 - 000002297 _____ C:\Users\Public\Desktop\tax 2017.lnk

2020-01-24 13:59 - 2020-01-24 13:59 - 000002297 _____ C:\ProgramData\Desktop\tax 2017.lnk

2020-01-24 13:59 - 2020-01-24 13:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\tax 2017 Professional

2020-01-22 19:57 - 2020-01-23 13:58 - 000079108 _____ C:\Users\Juergen Hamann\Desktop\Addition_00.txt

2020-01-22 19:55 - 2020-01-23 13:58 - 000099761 _____ C:\Users\Juergen Hamann\Desktop\FRST_00.txt

2020-01-22 19:54 - 2020-01-29 10:14 - 000000000 ____D C:\FRST

2020-01-22 19:53 - 2020-01-26 20:01 - 000000000 ____D C:\Users\Juergen Hamann\Downloads\Trojanerboard-de

2020-01-22 19:48 - 2020-01-29 10:13 - 002581504 _____ (Farbar) C:\Users\Juergen Hamann\Desktop\FRST64.exe

2020-01-21 19:44 - 2020-01-21 19:44 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Local\Marcin_Szeniak

2020-01-19 20:09 - 2020-01-24 14:07 - 000000000 ____D C:\Users\Juergen Hamann\Documents\tax

2020-01-19 11:44 - 2020-01-19 11:44 - 001468868 ____N C:\WINDOWS\Minidump\011920-38984-01.dmp

2020-01-16 20:42 - 2020-01-16 20:42 - 000000000 ____D C:\Acronis Active Protection Storage

2020-01-16 20:31 - 2020-01-16 20:31 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinuxLive USB Creator

2020-01-16 20:31 - 2020-01-16 20:31 - 000000000 ____D C:\Program Files (x86)\LinuxLive USB Creator

2020-01-16 20:20 - 2020-01-16 20:22 - 000000306 __RSH C:\ProgramData\ntuser.pol

2020-01-16 09:40 - 2020-01-16 09:40 - 000026222 _____ C:\Users\Juergen Hamann\Documents\Eset_onlinescanner_Ergebnis.txt

2020-01-15 21:46 - 2020-01-15 21:46 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll

2020-01-15 21:46 - 2020-01-15 21:46 - 018020352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2020-01-15 21:46 - 2020-01-15 21:46 - 007016448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2020-01-15 21:46 - 2020-01-15 21:46 - 005913600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2020-01-15 21:46 - 2020-01-15 21:46 - 002494464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2020-01-15 21:46 - 2020-01-15 21:46 - 001610752 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll

2020-01-15 21:46 - 2020-01-15 21:46 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2020-01-15 21:46 - 2020-01-15 21:46 - 001106944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll

2020-01-15 21:46 - 2020-01-15 21:46 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll

2020-01-15 21:46 - 2020-01-15 21:46 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll

2020-01-15 21:46 - 2020-01-15 21:46 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll

2020-01-15 21:46 - 2020-01-15 21:46 - 000363840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll

2020-01-15 21:46 - 2020-01-15 21:46 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll

2020-01-15 21:45 - 2020-01-15 21:46 - 019849216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 022627840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 009928208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2020-01-15 21:45 - 2020-01-15 21:45 - 008012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 007754752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 006520480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 003729408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2020-01-15 21:45 - 2020-01-15 21:45 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 002870784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 002801152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2020-01-15 21:45 - 2020-01-15 21:45 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2020-01-15 21:45 - 2020-01-15 21:45 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 002473976 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 001985928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 001697280 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 001399096 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2020-01-15 21:45 - 2020-01-15 21:45 - 001330952 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 001072952 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2020-01-15 21:45 - 2020-01-15 21:45 - 001051664 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 001020032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe

2020-01-15 21:45 - 2020-01-15 21:45 - 000842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000689664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000678712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe

2020-01-15 21:45 - 2020-01-15 21:45 - 000646144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000571392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2020-01-15 21:45 - 2020-01-15 21:45 - 000542496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000432256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe

2020-01-15 21:45 - 2020-01-15 21:45 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys

2020-01-15 21:45 - 2020-01-15 21:45 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe

2020-01-15 21:45 - 2020-01-15 21:45 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys

2020-01-15 21:45 - 2020-01-15 21:45 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV1.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe

2020-01-15 21:45 - 2020-01-15 21:45 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe

2020-01-15 21:45 - 2020-01-15 21:45 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti_ci.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000162696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe

2020-01-15 21:45 - 2020-01-15 21:45 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadss.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000127520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadss.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000089536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiarpc.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe

2020-01-15 21:45 - 2020-01-15 21:45 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enterpriseresourcemanager.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbscan.sys

2020-01-15 21:45 - 2020-01-15 21:45 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDScan.sys

2020-01-15 21:45 - 2020-01-15 21:45 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiatrace.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiatrace.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll

2020-01-15 21:45 - 2020-01-15 21:45 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll

2020-01-15 21:39 - 2020-01-15 21:39 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe

2020-01-15 21:39 - 2020-01-15 21:39 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe

2020-01-15 09:22 - 2020-01-28 09:10 - 000000000 ____D C:\WINDOWS\Minidump

2020-01-14 20:51 - 2020-01-14 20:51 - 000000000 ____D C:\Program Files (x86)\ESET

2020-01-14 19:58 - 2020-01-14 19:58 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

2020-01-14 19:58 - 2020-01-14 19:58 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys

2020-01-14 19:58 - 2020-01-14 19:58 - 000002027 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2020-01-14 19:58 - 2020-01-14 19:58 - 000002027 _____ C:\ProgramData\Desktop\Malwarebytes.lnk

2020-01-14 19:58 - 2020-01-14 19:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

2020-01-14 19:58 - 2020-01-14 19:58 - 000000000 ____D C:\ProgramData\Malwarebytes

2020-01-14 19:58 - 2020-01-14 19:58 - 000000000 ____D C:\Program Files\Malwarebytes

2020-01-14 19:25 - 2020-01-14 19:25 - 000000000 ___HD C:\Users\Juergen Hamann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled

2020-01-14 10:38 - 2020-01-14 10:38 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\JAM Software

2020-01-11 21:11 - 2020-01-11 21:11 - 000000000 ____D C:\WINDOWS\Panther

2020-01-11 13:18 - 2020-01-11 13:18 - 000000000 ____D C:\Sicherungen

2020-01-09 15:03 - 2020-01-09 15:03 - 000002228 _____ C:\Users\Public\Desktop\ScanSnap Organizer.lnk

2020-01-09 15:03 - 2020-01-09 15:03 - 000002228 _____ C:\ProgramData\Desktop\ScanSnap Organizer.lnk

2020-01-09 15:03 - 2020-01-09 15:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSnap Organizer

2020-01-08 13:35 - 2020-01-08 13:35 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Local\Buhl_Data_Service_GmbH

2020-01-06 19:48 - 2020-01-06 19:48 - 040511064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 035380336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 017458840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 015027776 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 011843184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 010167432 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 005380736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 004716176 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 002074712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 001733264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6444141.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 001567688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 001491568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6444141.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 001482376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 001370256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 001144920 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 001073872 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 001073872 _____ C:\WINDOWS\system32\vulkan-1.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 001064408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 000931536 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 000931536 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 000848592 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe

2020-01-06 19:48 - 2020-01-06 19:48 - 000848592 _____ C:\WINDOWS\system32\vulkaninfo.exe

2020-01-06 19:48 - 2020-01-06 19:48 - 000825928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 000813656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 000706256 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe

2020-01-06 19:48 - 2020-01-06 19:48 - 000706256 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe

2020-01-06 19:48 - 2020-01-06 19:48 - 000685800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 000676824 _____ C:\WINDOWS\system32\nvofapi64.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 000659088 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 000556672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 000544728 _____ C:\WINDOWS\SysWOW64\nvofapi.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 000450976 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2020-01-06 19:48 - 2020-01-06 19:48 - 000352512 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll

2020-01-06 12:48 - 2020-01-06 12:48 - 000000000 ____D C:\WINDOWS\SSDriver

2020-01-06 12:48 - 2020-01-06 12:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSnap Manager

2020-01-06 12:48 - 2004-06-18 10:14 - 000000161 _____ C:\WINDOWS\DISPARAM.INI
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2020-01-29 10:12 - 2019-06-10 15:18 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\gSyncit

2020-01-29 10:12 - 2018-10-05 09:29 - 000000000 ____D C:\Users\Juergen Hamann\AppData\LocalLow\Mozilla

2020-01-29 10:08 - 2019-11-08 22:42 - 000003214 _____ C:\WINDOWS\system32\Tasks\SS2UILauncherRun

2020-01-29 10:08 - 2019-11-08 22:42 - 000003202 _____ C:\WINDOWS\system32\Tasks\SS2svc64Run

2020-01-29 10:08 - 2019-11-08 22:42 - 000003194 _____ C:\WINDOWS\system32\Tasks\SS2svc32Run

2020-01-29 10:07 - 2019-11-08 22:43 - 001723292 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2020-01-29 10:07 - 2019-03-19 13:16 - 000745142 _____ C:\WINDOWS\system32\perfh007.dat

2020-01-29 10:07 - 2019-03-19 13:16 - 000150430 _____ C:\WINDOWS\system32\perfc007.dat

2020-01-29 10:07 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF

2020-01-29 10:06 - 2019-02-11 21:05 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Local\CrashDumps

2020-01-29 00:49 - 2018-10-05 23:00 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Local\Everything

2020-01-29 00:49 - 2018-10-05 09:56 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\Everything

2020-01-29 00:49 - 2018-10-03 19:04 - 000000000 ____D C:\ProgramData\NVIDIA

2020-01-29 00:37 - 2019-11-08 22:42 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2020-01-29 00:37 - 2019-11-08 22:32 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2020-01-29 00:35 - 2019-03-19 05:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI

2020-01-29 00:34 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps

2020-01-29 00:34 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness

2020-01-29 00:28 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2020-01-29 00:27 - 2019-02-02 09:28 - 000000000 ____D C:\Program Files\BCUninstaller

2020-01-29 00:26 - 2018-10-03 19:11 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2020-01-29 00:11 - 2019-11-08 22:32 - 000544400 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2020-01-29 00:06 - 2019-08-07 08:29 - 000000000 ____D C:\ProgramData\ProductData

2020-01-29 00:06 - 2019-08-07 08:29 - 000000000 ____D C:\Program Files (x86)\IObit

2020-01-29 00:06 - 2019-08-07 08:28 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\IObit

2020-01-29 00:06 - 2019-08-07 08:28 - 000000000 ____D C:\ProgramData\IObit

2020-01-29 00:04 - 2018-10-03 23:48 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\Adobe

2020-01-29 00:02 - 2019-08-09 18:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo

2020-01-29 00:02 - 2019-08-09 18:08 - 000000000 ____D C:\Program Files\Ashampoo

2020-01-29 00:00 - 2018-10-08 09:49 - 000000000 ____D C:\ProgramData\Syncovery

2020-01-28 23:57 - 2018-10-19 11:32 - 000000000 ____D C:\ProgramData\GlarySoft

2020-01-28 23:57 - 2018-10-19 11:28 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\GlarySoft

2020-01-28 23:33 - 2019-03-19 05:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM

2020-01-28 23:31 - 2019-12-09 20:53 - 000000000 ____D C:\Program Files\Mozilla Firefox

2020-01-28 23:31 - 2018-10-07 22:52 - 000000000 ____D C:\Program Files\Common Files\AV

2020-01-28 23:24 - 2019-10-30 12:19 - 000012288 _____ C:\WINDOWS\SysWOW64\antimalware.unwanted_products.product_registry.kvdb

2020-01-28 23:24 - 2019-10-30 12:19 - 000012288 _____ C:\WINDOWS\SysWOW64\antimalware.patch_management.product_registry.kvdb

2020-01-27 15:17 - 2019-08-28 17:46 - 000000990 _____ C:\Users\Juergen Hamann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk

2020-01-25 21:56 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2020-01-25 21:55 - 2016-05-05 21:23 - 000000000 ____D C:\Program Files\Microsoft Office

2020-01-25 21:40 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\NDF

2020-01-24 14:27 - 2018-10-07 12:10 - 000000000 ____D C:\ProgramData\Buhl Data Service GmbH

2020-01-24 14:01 - 2018-10-07 12:16 - 000000000 ____D C:\Program Files (x86)\Buhl finance

2020-01-24 14:01 - 2016-05-05 21:09 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2020-01-24 13:35 - 2019-01-14 20:08 - 000013030 _____ C:\Users\Public\PDOXUSRS.NET

2020-01-24 13:16 - 2018-10-04 00:14 - 000000000 ____D C:\Program Files (x86)\Google

2020-01-23 13:52 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2020-01-23 13:52 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Macromed

2020-01-22 18:52 - 2018-10-08 14:59 - 000000000 ____D C:\ProgramData\firebird

2020-01-22 18:51 - 2018-10-07 18:05 - 000000000 ____D C:\Users\Juergen Hamann\Documents\ScanSnap

2020-01-22 10:35 - 2019-02-04 17:10 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\KeePass

2020-01-21 20:25 - 2018-10-07 17:48 - 000000000 ____D C:\Program Files (x86)\Adobe

2020-01-21 20:23 - 2018-10-21 19:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe

2020-01-21 19:44 - 2019-11-08 22:35 - 000000000 ____D C:\Users\Juergen Hamann

2020-01-20 19:46 - 2019-10-12 23:47 - 000000000 ____D C:\ProgramData\tmp

2020-01-19 19:47 - 2018-10-07 15:48 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\vlc

2020-01-19 19:11 - 2018-10-11 10:42 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Local\ACD Systems

2020-01-19 17:06 - 2019-11-08 22:42 - 000003398 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4253964506-1320168302-2910709501-1001

2020-01-19 17:06 - 2019-11-08 22:35 - 000002463 _____ C:\Users\Juergen Hamann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2020-01-19 17:06 - 2018-10-03 16:20 - 000000000 ___RD C:\Users\Juergen Hamann\OneDrive

2020-01-17 00:22 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2020-01-16 20:20 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy

2020-01-16 20:20 - 2018-10-03 19:54 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy

2020-01-16 18:06 - 2019-11-08 10:56 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job

2020-01-16 13:48 - 2018-10-12 20:21 - 000000000 ____D C:\Program Files\7-Zip

2020-01-16 11:11 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\UNP

2020-01-16 11:11 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources

2020-01-16 11:11 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences

2020-01-16 11:11 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr

2020-01-15 21:54 - 2018-10-05 09:27 - 000000000 ____D C:\WINDOWS\system32\MRT

2020-01-15 21:48 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp

2020-01-15 21:48 - 2018-10-05 09:27 - 120202352 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2020-01-14 19:59 - 2019-03-28 13:46 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Local\cache

2020-01-14 19:58 - 2019-03-19 05:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2020-01-14 10:30 - 2019-11-09 18:58 - 000000000 ____D C:\Users\Juergen Hamann\Documents\Registry

2020-01-13 13:04 - 2019-03-30 21:13 - 000000053 ____H C:\Users\Public\netkonli.dat

2020-01-13 10:40 - 2018-10-03 23:48 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Local\Packages

2020-01-12 20:15 - 2018-10-04 00:14 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Local\Google

2020-01-12 15:53 - 2019-04-07 19:44 - 000007638 _____ C:\Users\Juergen Hamann\AppData\Local\Resmon.ResmonCfg

2020-01-12 15:37 - 2018-10-07 19:10 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Local\D3DSCache

2020-01-11 13:19 - 2018-10-03 23:48 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Local\VirtualStore

2020-01-10 13:30 - 2018-10-05 09:29 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2020-01-10 10:25 - 2018-10-05 09:29 - 000001011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2020-01-09 17:42 - 2018-12-20 17:50 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\MyPhoneExplorer

2020-01-09 15:03 - 2018-10-07 18:01 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\PFU

2020-01-09 14:40 - 2018-10-07 15:24 - 000000000 ____D C:\Users\Juergen Hamann\Documents\Benutzerdefinierte Office-Vorlagen

2020-01-09 12:44 - 2016-05-05 21:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2020-01-08 19:31 - 2018-10-07 16:41 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\Steganos

2020-01-08 19:20 - 2019-01-03 15:40 - 000000000 ____D C:\ProgramData\Steganos

2020-01-08 17:07 - 2019-01-17 20:44 - 000000000 ____D C:\rsahnen.win

2020-01-08 12:40 - 2019-05-15 09:22 - 000000000 ____D C:\Users\Juergen Hamann\Documents\Office

2020-01-08 12:37 - 2019-01-14 20:24 - 000000000 ____D C:\Users\Juergen Hamann\Documents\exportfürspeedadress

2020-01-06 20:32 - 2019-08-03 16:48 - 000000000 ____D C:\Users\Juergen Hamann\Documents\Epson Scanner

2020-01-06 20:30 - 2018-12-06 13:37 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\Notepad++

2020-01-06 19:48 - 2019-11-09 17:43 - 004937584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll

2020-01-06 19:48 - 2019-11-09 17:43 - 004205568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll

2020-01-06 19:48 - 2019-08-12 13:57 - 000056258 _____ C:\WINDOWS\system32\nvinfo.pb

2020-01-06 19:47 - 2019-08-07 14:50 - 000185232 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2_I2C.sys

2020-01-06 19:47 - 2019-08-07 14:50 - 000095632 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2_GPIO2.sys

2020-01-06 19:47 - 2019-08-07 08:55 - 001156392 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys

2020-01-06 19:22 - 2019-12-19 19:35 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\SuperSpamKiller Pro

2020-01-06 00:19 - 2019-01-03 13:32 - 000000000 ____D C:\Program Files (x86)\Steganos Privacy Suite 20

2020-01-06 00:19 - 2018-10-18 13:29 - 000000000 ____D C:\Program Files\eXpert PDF 11

2020-01-06 00:19 - 2018-10-07 17:59 - 000000000 ____D C:\Program Files (x86)\ABBYY FineReader for ScanSnap

2020-01-06 00:18 - 2019-05-20 17:40 - 000000000 ____D C:\Program Files\Tablet

2020-01-06 00:18 - 2018-11-05 19:25 - 000000000 ____D C:\Program Files\AutoHotkey

2020-01-06 00:18 - 2018-10-08 09:49 - 000000000 ____D C:\Program Files\Syncovery

2020-01-06 00:17 - 2019-08-23 01:19 - 000000000 ____D C:\Program Files (x86)\Microsoft WebMatrix

2020-01-06 00:17 - 2018-11-24 23:58 - 000000000 ____D C:\Program Files\eXpert PDF 12

2020-01-06 00:17 - 2018-10-24 18:51 - 000000000 ____D C:\Program Files (x86)\ThumbsPlus 7x deutsch

2020-01-06 00:17 - 2018-10-15 22:40 - 000000000 ____D C:\Program Files (x86)\FreeCommander XE

2020-01-06 00:15 - 2019-11-09 19:10 - 000000000 ____D C:\Program Files\NVIDIA Corporation

2020-01-06 00:15 - 2019-08-23 01:19 - 000000000 ____D C:\Program Files (x86)\IIS Express

2020-01-06 00:15 - 2019-01-14 20:07 - 000000000 ____D C:\Users\Juergen Hamann\AppData\Roaming\Konso

2020-01-06 00:14 - 2018-10-08 10:39 - 000000000 ____D C:\Program Files (x86)\ELOoffice

2020-01-06 00:13 - 2018-12-06 13:37 - 000000000 ____D C:\Program Files\Notepad++
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2019-03-30 21:13 - 2020-01-13 13:04 - 000000053 ____H () C:\Users\Public\netkonli.dat

2019-01-14 20:21 - 2019-05-23 16:36 - 000038518 _____ () C:\Users\Juergen Hamann\AppData\Roaming\Durch Trennzeichen getrennte Werte.ADR

2019-05-23 23:02 - 2019-05-23 23:02 - 000001027 _____ () C:\Users\Juergen Hamann\AppData\Roaming\kontakte_speedadresspro.db.lnk

2019-10-14 15:31 - 2019-10-14 15:31 - 000000268 ___RH () C:\Users\Juergen Hamann\AppData\Roaming\Mail

2019-10-14 15:31 - 2019-10-14 15:31 - 000000268 ___RH () C:\Users\Juergen Hamann\AppData\Roaming\MIDI Patch Names

2019-02-11 19:41 - 2019-08-23 00:21 - 000000600 _____ () C:\Users\Juergen Hamann\AppData\Local\PUTTY.RND

2019-10-14 16:45 - 2019-10-14 16:45 - 000004286 _____ () C:\Users\Juergen Hamann\AppData\Local\recently-used.xbel

2019-04-07 19:44 - 2020-01-12 15:53 - 000007638 _____ () C:\Users\Juergen Hamann\AppData\Local\Resmon.ResmonCfg
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 27-01-2020

durchgeführt von Juergen Hamann (29-01-2020 10:16:29)

Gestartet von C:\Users\Juergen Hamann\Desktop

Windows 10 Home Version 1903 18362.592 (X64) (2019-11-08 21:42:31)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-4253964506-1320168302-2910709501-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-4253964506-1320168302-2910709501-503 - Limited - Disabled)

Gast (S-1-5-21-4253964506-1320168302-2910709501-501 - Limited - Enabled)

Juergen Hamann (S-1-5-21-4253964506-1320168302-2910709501-1001 - Administrator - Enabled) => C:\Users\Juergen Hamann

WDAGUtilityAccount (S-1-5-21-4253964506-1320168302-2910709501-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}

AS: Kaspersky Total Security (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)

ABBYY FineReader for ScanSnap (TM) 4.1 (HKLM-x32\...\{FB410000-0002-0000-0000-074957833700}) (Version: 8.02.650.72520 - ABBYY)

ACDSee Photo Studio Ultimate 2018 (HKLM\...\{35035ABF-4733-478B-88AC-CB25FF451926}) (Version: 11.2.0.1315 - ACD Systems International Inc.)

Acronis True Image (HKLM-x32\...\{4FC35DD9-82DB-496D-AE43-43B7DE0A2CF8}) (Version: 23.5.17750 - Acronis) Hidden

Acronis True Image (HKLM-x32\...\{4FC35DD9-82DB-496D-AE43-43B7DE0A2CF8}Visible) (Version: 23.5.17750 - Acronis)

Acronis Universal Restore Bootable Media Builder (HKLM-x32\...\{8C7086EC-DD84-4F9F-9671-6B899545EA32}) (Version: 11.5.40067 - Acronis)

Acronis*Disk*Director*12 (HKLM-x32\...\{FE6AA38C-8A06-41FB-B94C-5431743BB0BF}) (Version: 12.0.3297 - Acronis)

Adobe Acrobat X Standard - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-BA7E-000000000005}) (Version: 10.1.16 - Adobe Systems)

Adobe Photoshop Lightroom 4.4 64-bit (HKLM\...\{63E66D61-AE73-4C3A-AF04-36236F7A6581}) (Version: 4.4.2 - Adobe)

Advanced Renamer (HKLM-x32\...\Advanced Renamer_is1) (Version: 3.80 - Hulubulu Software)

Ahnenforschung mit RS-AHNEN (HKLM-x32\...\Ahnenforschung mit RS-AHNEN) (Version:  - )

AllDup 4.1.8 (HKLM-x32\...\AllDup_is1) (Version: 4.1.8 - Michael Thummerer Software Design)

Alle meine Passworte 4.60 (HKLM\...\AllemeinePassworte) (Version:  - Mirko Böer)

Ant Renamer (HKLM-x32\...\Ant Renamer 2_is1) (Version: 2.12.0 - Ant Software)

Ashampoo Burning Studio 20 (HKLM-x32\...\{91B33C97-155F-C10C-D4D6-CABA03805EE4}_is1) (Version: 20.0.4 - Ashampoo GmbH & Co. KG)

Ashampoo Home Design 5 (HKLM\...\{6FE137BD-F8A3-4995-B812-04928FFD3D73}_is1) (Version: 5.0.0 - Ashampoo GmbH & Co. KG)

Asus Sonic Suite Plugins (HKLM-x32\...\{53861e11-b38e-4500-b46e-03181c9eec47}) (Version: 2.0.14 - ASUSTeKcomputer.Inc)

ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.6 - ASUS)

ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0042 - ASUS)

AutoHotkey 1.1.30.00 (HKLM\...\AutoHotkey) (Version: 1.1.30.00 - Lexikos)

BCUninstaller (HKLM\...\{f4fef76c-1aa9-441c-af7e-d27f58d898d1}_is1) (Version: 4.15.0.42702 - Marcin Szeniak)

BenVista PhotoZoom Pro Corel Plug-In 4.6.2 (HKLM\...\PhotoZoom Pro Corel Plug-In 4) (Version: 4.6.2 - BenVista Ltd.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - Canon Inc.)

Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.2.0 - Canon Inc.)

Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version:  - Canon Inc.)

Canon MX920 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX920_series) (Version: 1.01 - Canon Inc.)

Capture NX-D (HKLM\...\{2D088846-B670-47AF-91C3-76E0B3E887C3}) (Version: 1.5.3 - Nikon Corporation)

CardMinder (HKLM-x32\...\{D4F2AFD3-0167-4464-B92F-78AB6DA8A0AA}) (Version: V4.1L40 - PFU)

CardMinder V4.1 (HKLM-x32\...\{BB586E51-4876-4BB2-91EC-5CB3D0C38145}) (Version: 4.1.40.1 - PFU) Hidden

CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7035 - CDBurnerXP)

CDBurnerXP (HKLM-x32\...\{FFB01B4D-5A04-490B-9592-4D32A66A45B6}) (Version: 4.5.8.7041 - Canneverbe Limited)

cewe-fotoservice.de (HKLM-x32\...\cewe-fotoservice.de) (Version: 7.0.0 - CEWE Stiftung u Co. KGaA)

CheckDevicesConfigurator (HKLM\...\{46F3A58C-7606-4BAC-8F1D-BAB4862A8D67}) (Version: 2.0.1401 - ASUSTeKcomputer.Inc) Hidden

CheckDrive 2019 (HKLM-x32\...\{B83513EC-2E4D-4621-816D-4CCF397BE702}_is1) (Version: 1.33 - Abelssoft)

Corel AfterShot 3 - HDR x64 (HKLM\...\{304BEFF1-0645-4E24-BBBE-71F86AF55169}) (Version: 3.0 - Corel Corporation) Hidden

Corel AfterShot 3 - ICA x64 (HKLM\...\{FE875B02-11A1-4D1E-B57A-8DE2C00C0B51}) (Version: 3.5 - Corel Corporation) Hidden

Corel AfterShot 3 - IPM Content x64 (HKLM\...\{3E064BED-C9D8-4BEF-A2EE-8D67E99C3932}) (Version: 3.4 - Corel Corporation) Hidden

Corel AfterShot 3 - IPM x64 (HKLM\...\{5059B47C-4D7B-46E9-9D7A-1E2FCF5DDBED}) (Version: 3.5.0.365 - Corel Corporation) Hidden

Corel AfterShot 3 HDR x64 (HKLM\...\{B8274025-D1B4-4FE7-A60A-1EC27A4C7D81}) (Version: 3.5 - Corel Corporation) Hidden

Corel AfterShot 3(64-bit) (HKLM\...\_{FE875B02-11A1-4D1E-B57A-8DE2C00C0B51}) (Version: 3.5.0.365 - Corel Corporation)

Corel AfterShot Pro 3 - HDR x64 (HKLM\...\{2B482BD8-191A-4D79-8E8B-10AB97176A34}) (Version: 3.0 - Corel Corporation) Hidden

Corel AfterShot Pro 3 - ICA x64 (HKLM\...\{B75B59C9-4E9F-4632-B70E-80A62BD91EA2}) (Version: 3.5 - Corel Corporation) Hidden

Corel AfterShot Pro 3 - IPM Content x64 (HKLM\...\{85082869-BCD7-40ED-A119-DBA8A78C460F}) (Version: 3.4 - Corel Corporation) Hidden

Corel AfterShot Pro 3 - IPM x64 (HKLM\...\{135781FB-026A-4164-838C-0C447783C32B}) (Version: 3.5.0.350 - Corel Corporation) Hidden

Corel AfterShot Pro 3 x64 (HKLM\...\{64B83559-0A40-4A73-A313-E9047BD838C0}) (Version: 3.5 - Corel Corporation) Hidden

Corel AfterShot Pro 3(64-bit) (HKLM\...\_{B75B59C9-4E9F-4632-B70E-80A62BD91EA2}) (Version: 3.5.0.350 - Corel Corporation)

Corel Graphics - Windows Shell Extension (HKLM\...\{39AB9389-ABC5-4603-AFB6-071BB35225E4}) (Version: 21.0.581 - Corel Corporation) Hidden

Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{95555783-E5F3-40B2-99C7-7345C39EFF76}) (Version: 21.0.581 - Corel Corporation) Hidden

Corel Update Manager (HKLM\...\{2945B729-98C9-4A18-A24E-AD5D84BB9A8E}) (Version: 2.10.442 - Corel corporation) Hidden

Corel Update Manager (HKLM\...\{95841B8F-1C5A-45A7-BACF-0D5DA1D2090D}) (Version: 2.10.442 - Corel corporation) Hidden

Corel Update Manager (HKLM\...\{B6C0FB43-0C9B-46E6-93E4-DF171ED80C53}) (Version: 2.10.442 - Corel corporation) Hidden

CorelDRAW Graphics Suite 2019 - BR (x64) (HKLM\...\{2FE926AD-01D6-4A84-BFB0-BE6ACF5CF6C6}) (Version: 21.2 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - Capture (x64) (HKLM\...\{3834C5F6-5079-4C23-B8B1-F0884A02690F}) (Version: 21.3 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - Common (x64) (HKLM\...\{E26C03B7-3DCF-46FD-9432-B8DAB1C34AEF}) (Version: 21.3 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - Connect (x64) (HKLM\...\{B850B42F-249D-4C94-8536-B08205EB5C77}) (Version: 21.3 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - Custom Data (x64) (HKLM\...\{FD08312C-7147-4417-9C0A-DE3C45DB56B5}) (Version: 21.0 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - DE (x64) (HKLM\...\{1675BBEB-CD1D-443E-A8E1-DFCDF2C5B401}) (Version: 21.2 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - Draw (x64) (HKLM\...\{0A15F4D7-3B53-45C1-BB67-23F27FF8B75B}) (Version: 21.3 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - EN (x64) (HKLM\...\{43EBAA78-1F47-4627-8F0D-5DA8630B4056}) (Version: 21.2 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - ES (x64) (HKLM\...\{504E61BD-1A7A-4629-89FB-960E2D15F072}) (Version: 21.2 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - Filters (x64) (HKLM\...\{DB0939C5-03D1-474D-8F60-2EFEE40EA114}) (Version: 21.3 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - Font Manager (x64) (HKLM\...\{CEE73B7E-2900-4C8B-BEF8-8E6B05C7703C}) (Version: 21.3 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - FR (x64) (HKLM\...\{959BF271-7FEC-4C97-B20B-1E54B8EC807B}) (Version: 21.2 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - IPM (x64) (HKLM\...\{A3BA4B57-A263-476E-B787-B5267F35201F}) (Version: 21.3 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - IPM Content BR (x64) (HKLM\...\{F3F8F532-0F11-49C7-8D49-967F4581C30A}) (Version: 21.0 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - IPM Content DE (x64) (HKLM\...\{DD666FC6-8807-45EA-B769-56475447DF80}) (Version: 21.0 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - IPM Content EN (x64) (HKLM\...\{E5A6F812-B03B-4054-BDC9-E92B1BC6B052}) (Version: 21.0 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - IPM Content ES (x64) (HKLM\...\{1F8D0F23-5574-4A2A-B580-CCCBD2F5FCDA}) (Version: 21.0 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - IPM Content FR (x64) (HKLM\...\{E1CB786C-4E64-48C0-8EC3-A7E7265FD42E}) (Version: 21.0 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - IPM Content IT (x64) (HKLM\...\{935C5EA6-B78E-4AE0-A72B-3FB5C0DA9487}) (Version: 21.0 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - IPM Content NL (x64) (HKLM\...\{9AD4C3CA-5968-44E0-B0B0-443A378FA67D}) (Version: 21.0 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - IT (x64) (HKLM\...\{23AAF608-B935-43F6-A1DE-876FDCD433DF}) (Version: 21.2 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - NL (x64) (HKLM\...\{9800FB54-97EF-4444-B636-184891F7CF45}) (Version: 21.2 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - PHOTO-PAINT (x64) (HKLM\...\{E1DB8CE4-D01D-48AF-B0C3-189B9000756C}) (Version: 21.3 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - Setup Files (x64) (HKLM\...\{E82C45F0-2C79-47A5-B90B-C514724B1C48}) (Version: 21.3 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - VBA (x64) (HKLM\...\{E633140C-B07F-4EF6-8316-BEA221E359EF}) (Version: 21.2 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - Workspaces (x64) (HKLM\...\{CBF86165-DBBB-4DA7-9070-3AFC86EA4745}) (Version: 21.2 - Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 - Writing Tools (x64) (HKLM\...\{F37A71D2-9B69-45E5-B6B1-DE9D98C197FC}) (Version: 21.2 -  Corel Corporation) Hidden

CorelDRAW Graphics Suite 2019 (64-Bit) (HKLM\...\_{E82C45F0-2C79-47A5-B90B-C514724B1C48}) (Version: 21.3.0.755 - Corel Corporation)

CorelDRAW Graphics Suite 2019 (HKLM\...\{DC01BBC9-8212-45F7-A89B-FBDD4BC2B6B7}) (Version: 21.3 - Corel Corporation) Hidden

Cryptographic Provider for Windows OS (HKLM-x32\...\{DAB78977-B639-47AF-87BC-F3FF3DC62998}) (Version: 1.3.1 - Intel Corporation) Hidden

Cryptographic Provider for Windows OS (HKLM-x32\...\{eda5f31b-27b4-4644-80b1-e7d0c03f935f}) (Version: 1.3.1 - Intel Corpration)

darktable (HKLM\...\darktable) (Version: 2.6.1 - the darktable project)

Data Lifeguard Diagnostic for Windows 1.31 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version:  - Western Digital Corporation)

der Ahnen-Manager 3.8.0.227 (HKLM-x32\...\dAM_is1) (Version: 3.8.0.227 - Dipl. Inform. Holger Osterbuhr)

DesignPro 5 (HKLM-x32\...\{F82C6574-AD88-4B40-A432-970BC77F1BD2}) (Version: 5.5.708 - Avery) Hidden

DesignPro 5 (HKLM-x32\...\InstallShield_{F82C6574-AD88-4B40-A432-970BC77F1BD2}) (Version: 5.5.708 - Avery)

DesktopOK (HKLM\...\DesktopOK) (Version:  - hxxp://www.softwareok.de/)

DesktopOK (HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\DesktopOK) (Version:  - hxxp://www.softwareok.de/)

DirPrintOK (HKLM-x32\...\DirPrintOK) (Version:  - )

eDocPrintPro (HKLM\...\{DCA08F0E-6BC1-4915-A017-0B46AC727BDD}) (Version: 3.27.0 - MAY Computer)

ELO Macros (HKLM-x32\...\{50C7DA39-C0BC-4C57-8CBE-0D728D719A9C}) (Version: 4.00.140 - ELO Digital Office GmbH)

ELO PDF Printer Dropzone (GS) (HKLM-x32\...\{ECFF683D-C4F6-4345-8F98-68D1945E0184}) (Version: 2.0.0.28 - ELO Digital Office GmbH)

ELO PDF Printer PrintArchive (GS) (HKLM-x32\...\{1F7D6391-A14A-4C4D-B061-6B48BBFDEA5A}) (Version: 2.0.0.28 - ELO Digital Office GmbH)

ELO PS Converter (HKLM-x32\...\{8B6CFBA0-F0A1-42E9-A333-4D92CC45C5CE}) (Version: 1.00.0016 - ELO Digital Office GmbH)

ELO Tiff Printer (HKLM-x32\...\{035523A6-FAF0-40EB-890B-0D4F3061FD14}) (Version: 5.00.016 - ELO Digital Office GmbH)

ELOoffice (HKLM-x32\...\{C08EF2EB-27C6-4E99-B5C3-15AE8210B614}) (Version: 11.00.008.029 - ELO Digital Office GmbH)

Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.2 - Seiko Epson Corporation)

Epson Easy Photo Print 2 (HKLM-x32\...\{7E0261C4-8495-4365-BE48-647701D8B9BD}) (Version: 2.8.3.0 - Seiko Epson Corporation)

EPSON ET-4750 Series Printer Uninstall (HKLM\...\EPSON ET-4750 Series) (Version:  - Seiko Epson Corporation)

Epson Event Manager (HKLM-x32\...\{AB8BE3EA-01D3-44B7-8E77-A9601CBDEBDE}) (Version: 3.10.0085 - Seiko Epson Corporation)

Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)

Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 2.54.00 - Seiko Epson Corporation)

Epson Printer Connection Checker (HKLM-x32\...\{9ABD2971-9B8B-4958-9100-4EAFCC32A86D}) (Version: 3.0.0.0 - Seiko Epson Corporation)

Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version:  - Seiko Epson Corporation)

EPSON Scan OCR Component (HKLM-x32\...\{563B99D8-8895-4E3E-AE8D-15BE8C05F1C1}) (Version: 3.00.04 - SEIKO EPSON Corp.)

EPSON Scan PDF EXtensions (HKLM-x32\...\{F9956472-6E16-4F83-BF9A-F887EF4A45B7}) (Version: 1.03.02 - SEIKO EPSON Corp.)

Epson Software Updater (HKLM-x32\...\{FD036A57-F81D-4865-AAF0-811558EA76AE}) (Version: 4.5.1 - Seiko Epson Corporation)

EPSON-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.56.1.0 - Seiko Epson Corporation)

EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)

Eraser 6.2.0.2982 (HKLM\...\{DFCF78CC-3DAD-4C1E-8BC6-94DC5B73461E}) (Version: 6.2.2982 - The Eraser Project)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

Everything 1.4.1.935 (x64) (HKLM\...\Everything) (Version: 1.4.1.935 - David Carpenter)

eXpert PDF 11 Asian Fonts Pack (HKLM\...\{D398C050-83CF-446A-8E72-D754347085FF}) (Version: 11.0.7.32663 - Avanquest Software) Hidden

eXpert PDF 11 Convert Module (HKLM\...\{97B5C6C3-A83B-4C28-A708-E617FA581793}) (Version: 11.0.7.32663 - Avanquest Software) Hidden

eXpert PDF 11 Create Module (HKLM\...\{D4ADEFC3-E464-4D45-B9C1-7359BEF5C887}) (Version: 11.0.7.32663 - Avanquest Software) Hidden

eXpert PDF 11 Edit Module (HKLM\...\{B841823D-9247-492B-9317-D991914B0371}) (Version: 11.0.7.32663 - Avanquest Software) Hidden

eXpert PDF 11 Forms Module (HKLM\...\{DD1F6F1F-E629-4FC9-AA0C-94DF1039CA8A}) (Version: 11.0.7.32663 - Avanquest Software) Hidden

eXpert PDF 11 Insert Module (HKLM\...\{772F5214-B313-4B11-93CF-4C4A61922841}) (Version: 11.0.7.32663 - Avanquest Software) Hidden

eXpert PDF 11 OCR Module (HKLM\...\{DE21B554-0F19-483E-A5FE-28D0AB5972B4}) (Version: 11.0.7.32663 - Avanquest Software) Hidden

eXpert PDF 11 Review Module (HKLM\...\{8BDCA64B-686E-4451-A4AF-9F0D007C58A2}) (Version: 11.0.7.32663 - Avanquest Software) Hidden

eXpert PDF 11 Secure Module (HKLM\...\{1C992272-EC80-4CC8-AF72-E16383F55407}) (Version: 11.0.7.32663 - Avanquest Software) Hidden

eXpert PDF 11 View Module (HKLM\...\{6693785C-1A17-4FE3-9CA6-EC466CD94469}) (Version: 11.0.7.32663 - Avanquest Software) Hidden

eXpert PDF 12 (HKLM-x32\...\eXpert PDF 12) (Version: 12.0.22.819 - Avanquest UK Ltd)

eXpert PDF 12 Asian Fonts Pack (HKLM\...\{B1E9BFE4-6009-469D-94DD-8D535514926A}) (Version: 12.0.24.38721 - Avanquest Software) Hidden

eXpert PDF 12 Convert Module (HKLM\...\{68994203-BC25-457E-97C5-B91EEBD40143}) (Version: 12.0.24.38721 - Avanquest Software) Hidden

eXpert PDF 12 Create Module (HKLM\...\{8479C2F3-845F-4279-B389-68EC90D38B2E}) (Version: 12.0.24.38721 - Avanquest Software) Hidden

eXpert PDF 12 Edit Module (HKLM\...\{12FC55D0-7048-4B39-A4EF-652DFE1172B5}) (Version: 12.0.24.38721 - Avanquest Software) Hidden

eXpert PDF 12 Forms Module (HKLM\...\{7654596E-5B4C-4C09-AF69-230D82B10E09}) (Version: 12.0.24.38721 - Avanquest Software) Hidden

eXpert PDF 12 Insert Module (HKLM\...\{DA9AA77D-170A-49FB-9E1C-711F62A58393}) (Version: 12.0.24.38721 - Avanquest Software) Hidden

eXpert PDF 12 OCR TESS Module (HKLM\...\{C837589E-EA7D-4641-9484-27A52354C516}) (Version: 12.0.24.38721 - Avanquest Software) Hidden

eXpert PDF 12 Review Module (HKLM\...\{367A7124-F931-48E2-BE7D-01B31CCFEB7A}) (Version: 12.0.24.38721 - Avanquest Software) Hidden

eXpert PDF 12 Secure Module (HKLM\...\{DDEC1CED-B410-4197-B466-60B4468F0650}) (Version: 12.0.24.38721 - Avanquest Software) Hidden

eXpert PDF 12 View Module (HKLM\...\{33375642-6135-47D9-9F40-99295C077A80}) (Version: 12.0.24.38721 - Avanquest Software) Hidden

FileFusion 2019 (HKLM-x32\...\8FFF2B94-7E68-4C49-8CF8-46C7AC3033B9_is1) (Version: 2.3 - Abelssoft)

FileZilla Client 3.44.2 (HKLM-x32\...\FileZilla Client) (Version: 3.44.2 - Tim Kosse)

FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version:  - Marek Jasinski)

FreeFileSync 10.13 (HKLM-x32\...\FreeFileSync_is1) (Version: 10.13 - FreeFileSync.org)

GFAhnen (HKLM-x32\...\{1F1B8C09-B0B5-4372-88FD-382C2BF4B9FC}) (Version: 17.0.0030 - Gesellschaft für Familienforschung in Franken e.V., Vordere Cramergasse 13, 90478 Nürnberg, Tel.: 0911 - 35 89 39)

Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)

Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden

GIMP 2.10.12 (HKLM\...\GIMP-2_is1) (Version: 2.10.12 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.130 - Google LLC)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden

Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden

GrampsAIO64 (HKLM\...\GrampsAIO64 5.0.0) (Version: 5.0.0 - The Gramps project)

gSyncit (HKLM\...\{4F43F16D-D73B-488B-922D-0FC422CBDB6C}) (Version: 5.4.76 - Fieldston Software)

HP My Display (HKLM-x32\...\{15733AD1-1CEF-459A-9245-0924FC63BDD5}) (Version: 2.10.009 - Portrait Displays, Inc.)

IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)

IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version:  - )

IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - )

Intel(R) Chipset Device Software (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden

Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10603.192 - Intel Corporation)

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1169 - Intel Corporation)

Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1519.7 - Intel Corporation)

Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{588DA478-D4FF-48E3-8290-49F8C4B21283}) (Version: 18.1.1527.1551 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{03635e3e-3e57-4d80-9c7d-80c9f62bfc80}) (Version: 18.32.0 - Intel Corporation)

Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)

Java(TM) SE Development Kit 12.0.2 (64-bit) (HKLM\...\{3FA68A00-9C88-5E69-870A-B40CB89DC2EF}) (Version: 12.0.2.0 - Oracle Corporation)

KeePass Password Safe 2.43 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.43 - Dominik Reichl)

LauncherSetup (HKLM\...\{98E4BFD4-9F4B-4A32-A5CF-63CA8B957F71}) (Version: 2.0.1401 - ASUSTeKcomputer.Inc) Hidden

Leawo Blu-ray Player Version  1.10.0.2 (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.10.0.2 - Leawo Software)

LinuxLive USB Creator (HKLM-x32\...\LinuxLive USB Creator) (Version: 2.9 - Thibaut Lauziere)

MailStore Home 11.2.0.13732 (HKLM-x32\...\MailStore Home_universal1) (Version: 11.2.0.13732 - MailStore Software GmbH)

Malwarebytes version 4.0.4.49 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)

Manager (HKLM-x32\...\{58878881-FF57-470A-BB40-F9D2F505F83C}) (Version: 12.0.4.583 - Avanquest Software) Hidden

Microsoft Access database engine 2010 (German) (HKLM-x32\...\{90140000-00D1-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft ASP.NET MVC 2 (HKLM-x32\...\{DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244}) (Version: 2.0.60926.0 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Expression Web 4 (HKLM-x32\...\Web_4.0.1460.0) (Version: 4.0.1460.0 - Microsoft Corporation)

Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.12325.20344 - Microsoft Corporation)

Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.12325.20344 - Microsoft Corporation)

Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.12325.20344 - Microsoft Corporation)

Microsoft Office 365 ProPlus - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 16.0.12325.20344 - Microsoft Corporation)

Microsoft Office Access Runtime (German) 2007 (HKLM-x32\...\{90120000-001C-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\OneDriveSetup.exe) (Version: 19.222.1110.0006 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{13C9CD03-A5FE-4F50-AC8A-17B77C38CC52}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft Teams (HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\Teams) (Version: 1.2.00.3961 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{4fd02573-5f12-4ae4-8027-c63f8e1115af}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)

Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation)

Microsoft Visual Studio Code (User) (HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.38.1 - Microsoft Corporation)

Microsoft Visual Studio Tools for Applications 2017 (HKLM-x32\...\{5a7dc0ad-cdb2-43b5-8b82-f81065fe6092}) (Version: 15.0.26717 - Microsoft Corporation)

Microsoft Web Deploy 3.0 (HKLM\...\{AA72C306-30BE-4BB1-9E42-59552BAD2CDF}) (Version: 3.1236.1631 - Microsoft Corporation)

Microsoft Web Platform Installer 5.0 (HKLM\...\{4D84C195-86F0-4B34-8FDE-4A17EB41306A}) (Version: 5.0.50430.0 - Microsoft Corporation)

Microsoft WebMatrix 3 (HKLM-x32\...\{D970FD2C-25C0-4ED5-9F35-C7E7A6CF1B21}) (Version: 2.0.1934 - Microsoft Corporation)

Mozilla Firefox 72.0.1 (x64 de) (HKLM\...\Mozilla Firefox 72.0.1 (x64 de)) (Version: 72.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 64.0.2 - Mozilla)

MyEpson Portal (HKLM-x32\...\{3361D415-BA35-4143-B301-661991BA6219}) (Version: 1.1.2.2 - SEIKO EPSON CORPORATION) Hidden

MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version:  - SEIKO EPSON Corporation)

MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.12 - F.J. Wechselberger)

NahimicSettingsConfigurator (HKLM\...\{18046C4B-49BE-466A-8668-B952FA0BC38A}) (Version: 2.0.1401 - ASUSTeKcomputer.Inc) Hidden

Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.3.0 - Nikon Corporation)

Nikon Transfer 2 (HKLM-x32\...\{4D5EE11A-0D0A-4214-ABAC-72419F7BE24D}) (Version: 2.13.2 - Nikon Corporation)

Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.8.1 - Notepad++ Team)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.12325.20344 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.12325.20344 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.12325.20344 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.12325.20344 - Microsoft Corporation) Hidden

Opera Stable 60.0.3255.170 (HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\Opera 60.0.3255.170) (Version: 60.0.3255.170 - Opera Software)

Paragon Partition Manager™ 14 Professional (HKLM\...\{A35001F0-F1E4-11DD-A38B-005056C00008}) (Version: 90.00.0003 - Paragon Software)

PC-Adreßzz! 8.x deinstalieren (HKLM-x32\...\PCA25-u) (Version:  - )

Personal Backup 5.9.4.16 (64-bit) (HKLM\...\Personal Backup 5_is1) (Version: 5.9.4.16 - Dr. J. Rathlev)

Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)

Picture Control Utility 2 (HKLM\...\{46BEAB85-B86A-4AAB-B085-136ECA032CF4}) (Version: 2.4.2 - Nikon Corporation)

Pivot Software (HKLM-x32\...\{0217E1D1-BCEF-4A61-AF6D-F7740F65A066}) (Version: 9.03.004 - Portrait Displays, Inc.) Hidden

ProductDaemonSetup (HKLM\...\{713962C7-DB28-4F17-A4E2-656EBC09CF16}) (Version: 2.0.1401 - ASUSTeKcomputer.Inc) Hidden

RawTherapee Version 5.4 (HKLM\...\RawTherapee5.4_is1) (Version: 5.4 - rawtherapee.com)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.2.703.2015 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8581 - Realtek Semiconductor Corp.)

ScanSnap (HKLM-x32\...\{734605D9-CE17-4A99-8859-C53F06CBBAB4}) (Version: 5.5.10.2 - PFU Limited) Hidden

ScanSnap (HKLM-x32\...\{74E30ECD-0F61-4A70-B131-3BE2217A2816}) (Version: 5.1.41.1 - PFU Limited) Hidden

ScanSnap Manager (HKLM-x32\...\{DBCDB997-EEEB-4BE9-BAFF-26B4094DBDE6}) (Version: V5.5L10 - PFU)

ScanSnap Organizer (HKLM-x32\...\{0AC5BC61-9019-4FA3-849A-CE21EA5B809D}) (Version: 5.5.32.1 - PFU LIMITED) Hidden

ScanSnap Organizer (HKLM-x32\...\{E58F3B88-3B3E-4F85-9323-04789D979C15}) (Version: V5.5L32 - PFU)

ScanSnap Organizer (HKLM-x32\...\{F8639538-90F4-4E24-B5A4-4EBC20171E4F}) (Version: 4.1.41.1 - PFU LIMITED) Hidden

SDK (HKLM-x32\...\{0DEA342C-15CB-4F52-97B6-06A9C4B9C06F}) (Version: 2.40.012 - Portrait Displays, Inc.) Hidden

SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.8.1.21 - ) Hidden

soft Xpansion Perfect PDF 10 Premium (HKLM-x32\...\{18F210FE-7463-4fa5-BB89-2BC0AACE968D}) (Version: 10.0.0.1 - soft Xpansion)

soft Xpansion Perfect PDF 9 Premium (HKLM-x32\...\{18F210FE-2765-4fa5-BB89-2BC0AACE968D}) (Version: 9.0.0.7 - soft Xpansion)

SonicRadarSetup (HKLM\...\{7CF2235B-E72F-4F54-AC22-8313D78A3459}) (Version: 1.0.0.0 - ASUSTeKcomputer.Inc) Hidden

SonicStudioSetup (HKLM\...\{87A16850-75BB-40AD-83BE-4E9CAC76D2EA}) (Version: 2.0.1401 - ASUSTeKcomputer.Inc) Hidden

SpeedAddress Version 2017.08.27 (HKLM-x32\...\{8D05AA43-8A24-4373-AA7E-68FAE44C8910}    //Original_is1) (Version: 2017.08.27 - Konso - Konstruktion & Softwareentwicklung - Matthias Schleicher)

Steganos Privacy Suite 20 (HKLM-x32\...\{AFAC1089-E5B3-483C-B633-6F8BB1BADD07}) (Version: 20.0.9 - Steganos Software GmbH)

Syncovery 8.01a (HKLM\...\Syncovery x64_is1) (Version: 8.01a - Super Flexible Software)

Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: 6.2-23733 - Synology)

tax 2015 Professional (HKLM-x32\...\{4CF96070-DEE5-43B5-B6A7-23AC07BC0C77}) (Version: 22.09.9087 - Buhl Data Service GmbH)

tax 2016 Professional (HKLM-x32\...\{30E85B0C-57D8-4ECE-814B-264550A92FAB}) (Version: 23.09.1597 - Buhl Data Service GmbH)

tax 2017 Professional (HKLM-x32\...\{B0AB97B4-F1E7-4CD6-A93B-1ADC1A4E19E8}) (Version: 24.11.2033 - Buhl Data Service GmbH)

tax 2018 Professional (HKLM-x32\...\{A3833924-D59B-418A-AFED-FDE50F727C50}) (Version: 25.00.1359 - Buhl Data Service GmbH)

tax 2019 Professional (HKLM-x32\...\{49346689-D8B3-49F4-A48F-273D2D6F5090}) (Version: 26.09.1982 - Buhl Data Service GmbH)

tax 2020 Professional (HKLM-x32\...\{911206AE-A132-4258-8DE2-E2A76971EFE6}) (Version: 27.00.1484 - Buhl Data Service GmbH)

ThumbsPlus 7x (deutsch) (HKLM-x32\...\ThumbsPlus7x) (Version:  - Atlantic Software Exchange, Inc.)

Thunderbolt(TM) Software (HKLM-x32\...\{B0E8A8CA-5A40-49C3-BE5E-9076664DB9AA}) (Version: 15.3.39.250 - Intel Corporation)

Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.21a - Ghisler Software GmbH)

Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden

VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.23 - IDRIX)

ViewNX-i (HKLM\...\{C67A5551-26C1-4C7B-A9DF-AD148549D482}) (Version: 1.1.0 - Nikon Corporation)

VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)

VS2010MergeModule (HKLM-x32\...\{16B1B5E5-78F7-4F6F-BF4B-3AD51E4AEA92}) (Version: 1.00.0000 - Your Company Name) Hidden

Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)

WD Access (HKLM-x32\...\{3c95f2d8-fe6e-47b5-b482-9dda5d205a15}) (Version: 1.5.6561.35670 - Western Digital Technologies, Inc.)

WD Access (HKLM-x32\...\{C0624809-D60D-4AFF-8AF3-9452125AF4C1}) (Version: 1.5.6561.35670 - Western Digital Technologies, Inc) Hidden

WD Quick View (HKLM-x32\...\{BE1B25F9-5A51-4DB8-81FA-CE0CABC14D07}) (Version: 2.4.10.17 - Western Digital Technologies, Inc.)

WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

Western Digital SSD Dashboard (HKLM-x32\...\Western Digital SSD Dashboard) (Version: 2.3.3.0 - Western Digital Corporation or its affiliates)

Windows 10-Update-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22899 - Microsoft Corporation)

Windows Driver Package - ASUS (AsusSGDrv) Mouse  (11/11/2015 8.0.0.23) (HKLM\...\FF0137EA2940E916D51DA702B6425126CC7C89BF) (Version: 11/11/2015 8.0.0.23 - ASUS)

WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.1.0 - ASUS)

WinX YouTube Downloader (HKLM-x32\...\WinX YouTube Downloader) (Version: 5.2 - Digiarty, Inc.)

WISO Mein Geld 365 Professional (HKLM-x32\...\{36C0BA39-2207-4146-BD4E-3146DF7B9147}) (Version: 22.0.0.0 - Buhl Data Service GmbH) Hidden

WISO Mein Geld 365 Professional (HKLM-x32\...\WISO Mein Geld 365 Professional) (Version:  - Buhl Data Service GmbH)

WISO Vermieter (HKLM-x32\...\{12049F09-FEB2-43B7-83E0-F80CF3A41139}) (Version: 4.00.0000 - Buhl Data Service GmbH) Hidden

WISO Vermieter (HKLM-x32\...\WISO Vermieter) (Version:  - Buhl Data Service GmbH)
 

Packages:

=========

Barcode Software -> C:\Program Files\WindowsApps\ConnectCodePteLtd.BarcodeSoftware_2.2.0.28_neutral__jwshd0y3czvhw [2019-06-06] (ConnectCode)

Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_2.8.0.1_neutral__6e5tt8cgb93ep [2019-06-06] (Canon Inc.)

Mail und Kalender -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12026.20368.0_x64__8wekyb3d8bbwe [2019-11-05] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-06-06] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-06-06] (Microsoft Corporation) [MS Ad]

Microsoft News – Nachrichten -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.32.12463.0_x64__8wekyb3d8bbwe [2019-09-11] (Microsoft Corporation) [MS Ad]

MSN Wetter -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.32.12463.0_x64__8wekyb3d8bbwe [2019-09-11] (Microsoft Corporation) [MS Ad]
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-4253964506-1320168302-2910709501-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Juergen Hamann\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19029.3\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4253964506-1320168302-2910709501-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\Juergen Hamann\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19029.3\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [     AcronisDrive] -> {5D74FD4B-4EFB-4586-8022-8637BBE40970} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2019-03-25] (Acronis International GmbH -> )

ShellIconOverlayIdentifiers: [     AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2019-03-25] (Acronis International GmbH -> )

ShellIconOverlayIdentifiers: [     AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2019-03-25] (Acronis International GmbH -> )

ShellIconOverlayIdentifiers: [     AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2019-03-25] (Acronis International GmbH -> )

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat Elements\ContextMenu64.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2019-10-27] (Notepad++ -> )

ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Keine Datei

ContextMenuHandlers1: [ELO Archive Transfer] -> {68CD4C17-E66B-4F1E-A0D8-A8F810134B1B} => C:\Program Files (x86)\ELOoffice\ELOShlx64.dll [2017-06-08] (ELO Digital Office GmbH -> ELO Digital Office GmbH)

ContextMenuHandlers1: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2018-01-03] (Heidi Computers Ltd -> The Eraser Project)

ContextMenuHandlers1: [eXpertPDF11_ManagerExt] -> {BA21C288-AE79-4D38-A471-8A04AD2FC006} => C:\Program Files\eXpert PDF 11\creator-context-menu.dll [2017-03-10] (Avanquest UK Ltd -> Avanquest Software)

ContextMenuHandlers1: [eXpertPDF12_ManagerExt] -> {B64D0E17-366D-458B-BE6F-26DD9DE31087} => C:\Program Files\eXpert PDF 12\context-menu.dll [2018-09-28] (Avanquest UK Ltd -> Avanquest Software)

ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll -> Keine Datei

ContextMenuHandlers1-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => C:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll [2010-03-30] (F.J. Wechselberger) [Datei ist nicht signiert]

ContextMenuHandlers1: [PicaViewCtxMenuShlExt] -> {F3CBBA61-EE3F-4D6D-B1C6-B3474E579936} => C:\Program Files\Common Files\ACD Systems\PicaView\ACDSeePV.dll [2015-10-08] (ACD Systems International -> ACD Systems International Inc.)

ContextMenuHandlers1: [SX_PDF10_PREM] -> {413FB14F-B230-4ABE-B1A5-5F4E185608D4} => C:\Program Files (x86)\soft Xpansion\Perfect PDF 10 Premium\weagent64.dll [2018-11-24] (soft Xpansion GmbH & Co.KG -> soft Xpansion)

ContextMenuHandlers1: [SX_PDF9_STUDIO] -> {B1B49373-0A05-4160-96FE-AF71F235B445} => C:\Program Files (x86)\soft Xpansion\Perfect PDF 9 Premium\weagent64.dll [2018-11-22] (soft Xpansion GmbH & Co.KG -> soft Xpansion)

ContextMenuHandlers2: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2018-01-03] (Heidi Computers Ltd -> The Eraser Project)

ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll -> Keine Datei

ContextMenuHandlers2: [SteganosShellExtension] -> {FAE0A3E0-3010-41BA-9DDC-A631394F047F} => C:\Program Files (x86)\Steganos Privacy Suite 20\ShellExtension.dll [2018-03-19] (Steganos Software GmbH -> )

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-01-14] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers3: [SteganosShellExtension] -> {FAE0A3E0-3010-41BA-9DDC-A631394F047F} => C:\Program Files (x86)\Steganos Privacy Suite 20\ShellExtension.dll [2018-03-19] (Steganos Software GmbH -> )

ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} =>  -> Keine Datei

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers4: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2018-01-03] (Heidi Computers Ltd -> The Eraser Project)

ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> Keine Datei

ContextMenuHandlers5: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2018-01-03] (Heidi Computers Ltd -> The Eraser Project)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2019-11-20] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat Elements\ContextMenu64.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Keine Datei

ContextMenuHandlers6: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2018-01-03] (Heidi Computers Ltd -> The Eraser Project)

ContextMenuHandlers6: [Fast Explorer] -> {693BE9C0-BEC3-11D2-B4C1-C33BBD3AD64B} => C:\ProgramData\AllDup\FEShlExt.dll [2008-08-20] (Alex Yakovlev) [Datei ist nicht signiert]

ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll -> Keine Datei

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-01-14] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> Keine Datei
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

==================== Verknüpfungen & WMI ========================
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2018-06-18 18:31 - 2018-06-18 18:31 - 000277538 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\LIBMAGIC.dll

2015-12-15 13:57 - 2015-12-15 13:57 - 000098816 _____ () [Datei ist nicht signiert] C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\sradarlauncher.dll

2012-05-03 09:47 - 2012-05-03 09:47 - 001681408 _____ (/n software inc. - www.nsoftware.com) [Datei ist nicht signiert] C:\Program Files\ACD Systems\ACDSee Ultimate\11.0\ipworksssl8.dll

2015-09-24 16:41 - 2015-09-24 16:41 - 000336384 _____ (Adobe Systems Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Locale\de_DE\Acrobat Elements\ContextMenu64.deu

2018-10-23 09:41 - 2008-08-20 23:08 - 001107520 _____ (Alex Yakovlev) [Datei ist nicht signiert] C:\ProgramData\AllDup\FEShlExt.dll

2019-08-22 08:59 - 2012-08-31 09:29 - 000313344 _____ (CANON INC.) [Datei ist nicht signiert] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNSS_DEU.DLL

2018-10-22 09:22 - 2012-07-31 07:48 - 000359936 _____ (CANON INC.) [Datei ist nicht signiert] C:\WINDOWS\System32\CNMN6PPM.DLL

2020-01-16 13:41 - 2019-02-21 17:00 - 000078336 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll

2019-11-08 22:15 - 2019-11-08 22:15 - 000113664 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\WinSxS\amd64_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.4053_none_8a1a02152edb659b\ATL80.DLL

2016-05-05 21:23 - 2016-05-05 21:23 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\AppvIsvSubsystems64.dll

2016-05-05 21:23 - 2016-05-05 21:23 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\c2r64.dll

2020-01-06 12:48 - 2012-02-01 11:39 - 000344576 _____ (PFU LIMITED) [Datei ist nicht signiert] C:\Program Files (x86)\PFU\ScanSnap\SSFolder\x64\SSFolder.DLL

2017-07-18 22:37 - 2017-07-18 22:37 - 001799168 _____ (Robert Simpson, et al.) [Datei ist nicht signiert] C:\Program Files\Fieldston Software\gSyncit\System.Data.SQLite.dll

2017-02-13 13:54 - 2017-02-13 13:54 - 000132096 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\Event Manager\epnsm.dll

2009-10-21 16:39 - 2009-10-21 16:39 - 000291328 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\Event Manager\LcMgr.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000096768 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\EbpD4Fax.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000212992 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\FUADRFIL.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000282624 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXCFG.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000446464 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXCSR.DLL

2019-08-03 18:18 - 2018-10-05 00:00 - 000389120 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXLDB.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000536576 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXTIF.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000421888 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\FUIMGCDC.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000278528 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\FULEPP.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000077824 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\FUSTMMSG.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000339968 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\FUSVCCLT.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000065536 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\FUUSBHLP.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000258048 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\FUVERDLG.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000069632 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Library\FUDEVCOM.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000135168 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Library\FUDRVUTL.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000339968 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Library\FUPRBDEV.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000286720 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Library\FUSNMPUT.dll

2019-08-03 18:18 - 2018-10-04 17:00 - 000086016 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUCMNMSG.dll

2019-08-03 18:18 - 2018-10-04 17:00 - 000090112 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUFAXCFGRes.dll

2019-08-03 18:18 - 2018-10-04 17:00 - 000245760 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUFAXRCV.dll

2019-08-03 18:18 - 2018-10-04 17:00 - 000110592 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUFAXSTM.dll

2019-08-03 18:18 - 2018-10-04 17:00 - 000022016 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FULEPPRes.dll

2019-08-03 18:18 - 2018-10-04 17:00 - 000077824 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUPRBDEVRes.dll

2019-02-22 16:01 - 2019-02-22 16:01 - 000704512 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON\MyEpson Portal\Configration_00000171\MepCfg.dll

2019-02-22 14:09 - 2019-02-22 14:09 - 000475136 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON\MyEpson Portal\Online Manual_00000013\MepFAQ.dll

2016-09-14 13:31 - 2016-09-14 13:31 - 000500736 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\WINDOWS\System32\enppmon.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000786432 _____ (SEIKO EPSON) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Library\ENCM.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000278528 _____ (SEIKO EPSON) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Library\ENNW.dll

2019-08-03 18:18 - 2018-10-05 00:00 - 000299008 _____ (SEIKO EPSON) [Datei ist nicht signiert] C:\Program Files (x86)\Epson Software\FAX Utility\Library\ENUTIL.dll

2018-06-18 18:31 - 2018-06-18 18:31 - 025338368 _____ (The ICU Project) [Datei ist nicht signiert] C:\Program Files (x86)\Acronis\TrueImageHome\icudt54.dll

2018-06-18 18:31 - 2018-06-18 18:31 - 002056704 _____ (The ICU Project) [Datei ist nicht signiert] C:\Program Files (x86)\Acronis\TrueImageHome\icuin54.dll

2018-06-18 18:31 - 2018-06-18 18:31 - 001425408 _____ (The ICU Project) [Datei ist nicht signiert] C:\Program Files (x86)\Acronis\TrueImageHome\icuuc54.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ==========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\sharepoint.com -> hxxps://hkaa028-files.sharepoint.com
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2015-10-30 08:24 - 2020-01-15 19:38 - 000000847 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 opencandy.com
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> 

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\asus\wallpapers\asus.jpg

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

 ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKLM\...\StartupApproved\StartupFolder: => "CardMinder Viewer.lnk"

HKLM\...\StartupApproved\StartupFolder: => "In PDF-Datei mit ScanSnap Organizer konvertieren.lnk"

HKLM\...\StartupApproved\StartupFolder: => "ScanSnap Manager.lnk"

HKLM\...\StartupApproved\Run: => "ShadowPlay"

HKLM\...\StartupApproved\Run32: => "Persistence"

HKLM\...\StartupApproved\Run32: => "PivotSoftware"

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-4253964506-1320168302-2910709501-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{46BFBE0F-ED20-4BDB-BED3-6639FA564E8D}] => (Allow) C:\Windows\SysWOW64\ftp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{AB6729BE-7526-436D-82CB-9B9CA36A94F0}] => (Allow) C:\Windows\SysWOW64\ftp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{46C8CCE6-3BCE-48E1-8A31-8BE37389E75F}] => (Allow) C:\Windows\system32\ftp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{00098EC2-8272-4C0C-BD45-A4D79CB51E8A}] => (Allow) C:\Windows\system32\ftp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{131F2EB3-F54F-4077-A08E-03AC32B47B4D}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation-Wireless Connectivity Solutions -> )

FirewallRules: [{465E62A0-1359-4264-9290-D39862F77520}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{75E73237-6E56-4FF3-8F54-57253B4CEAE2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{7914C31E-F300-4B18-BF0B-DC014148946B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{A2AA8849-01B4-4032-AEB8-1AEE9C127DE2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{971B69BC-0C18-4AEA-BA47-5B26280BDE93}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{EA7A1885-8495-497E-9C4A-AF2D01C20FEE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [TCP Query User{B049949E-979C-4F24-A6F1-4C52FC817801}C:\users\juergen hamann\appdata\roaming\steganos\onlineshield\proxy\node.exe] => (Allow) C:\users\juergen hamann\appdata\roaming\steganos\onlineshield\proxy\node.exe (Node.js Foundation -> Node.js)

FirewallRules: [UDP Query User{D59AE533-363D-4AC0-9B88-4A1BF5BA3420}C:\users\juergen hamann\appdata\roaming\steganos\onlineshield\proxy\node.exe] => (Allow) C:\users\juergen hamann\appdata\roaming\steganos\onlineshield\proxy\node.exe (Node.js Foundation -> Node.js)

FirewallRules: [{9C86A7DB-EC18-4643-B289-C189FA0494A9}] => (Allow) C:\ProgramData\ELO Digital Office\VollText\bin\EloOcr_Fr.exe (ELO Digital Office GmbH) [Datei ist nicht signiert]

FirewallRules: [{73D8CF97-2D8E-4735-BE8E-990E5DCE8930}] => (Allow) C:\Program Files (x86)\ELOoffice\Dropzone\jre\bin\ELO QuickScan.exe (Oracle America, Inc. -> Oracle Corporation)

FirewallRules: [{78E8F6BF-63CB-43B7-9FD1-DE8259AB0C8E}] => (Allow) C:\Program Files (x86)\ELOoffice\Dropzone\jre\bin\eloofficebackup.exe (Oracle America, Inc. -> Oracle Corporation)

FirewallRules: [{BD920D61-64C2-4A02-8ADA-E06A7372D506}] => (Allow) C:\Program Files (x86)\ELOoffice\Dropzone\jre\bin\eloofficerestore.exe (Oracle America, Inc. -> Oracle Corporation)

FirewallRules: [{53AFC5D9-9116-4865-BFF0-4E30F9633075}] => (Allow) C:\ProgramData\ELO Digital Office\VollText\bin\EloOcr_Fr.exe (ELO Digital Office GmbH) [Datei ist nicht signiert]

FirewallRules: [{D305B376-F934-4E4A-8038-7DD0EA9E791B}] => (Allow) C:\Program Files (x86)\ELOoffice\Dropzone\jre\bin\ELO QuickScan.exe (Oracle America, Inc. -> Oracle Corporation)

FirewallRules: [{F980AFE2-0D5E-4E66-AC69-270A857C6E79}] => (Allow) C:\Program Files (x86)\ELOoffice\Dropzone\jre\bin\eloofficebackup.exe (Oracle America, Inc. -> Oracle Corporation)

FirewallRules: [{1E8B6707-C806-4EC3-8BC5-AFC90639E915}] => (Allow) C:\Program Files (x86)\ELOoffice\Dropzone\jre\bin\eloofficerestore.exe (Oracle America, Inc. -> Oracle Corporation)

FirewallRules: [TCP - Installer for ACDSee Commander Ultimate 2018] => (Allow) C:\Program Files\ACD Systems\ACDSee Ultimate\11.0\ACDSeeCommanderUltimate11.exe (ACD Systems International Inc. -> )

FirewallRules: [UDP - Installer for ACDSee Commander Ultimate 2018] => (Allow) C:\Program Files\ACD Systems\ACDSee Ultimate\11.0\ACDSeeCommanderUltimate11.exe (ACD Systems International Inc. -> )

FirewallRules: [{67DACEB8-621A-466E-A0D1-A4891F8848F4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{C330B747-639A-4719-80F9-765EFE82DE55}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User{0A374A88-701B-482D-B6F5-A712F354A187}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe (Synology Inc. -> ) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{5BE3E85E-3BA1-488A-9F1F-DAF2D62A0249}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe (Synology Inc. -> ) [Datei ist nicht signiert]

FirewallRules: [{D2357CDE-D444-46F2-87F9-E763AF0939AA}] => (Allow) LPort=17001

FirewallRules: [{71068F19-9E7B-4210-81C9-2DA8B776464B}] => (Allow) C:\Users\Juergen Hamann\AppData\Local\Programs\Opera\58.0.3135.127\opera.exe (Opera Software AS -> Opera Software)

FirewallRules: [{34AD9303-8828-4534-8CDE-6874129F5421}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis International GmbH -> )

FirewallRules: [{D3E07459-2D9B-4667-84E8-B43A2A801E15}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe (Acronis International GmbH -> Acronis International GmbH)

FirewallRules: [{C951585B-69D5-4F4F-B833-A865D4B2642A}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImage.exe (Acronis International GmbH -> )

FirewallRules: [{93A8E5BD-8BBD-4459-9E07-D075F711D7BA}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis International GmbH -> )

FirewallRules: [{A6908B9D-01FD-4396-8A0C-2BBC7B1E246E}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis International GmbH -> )

FirewallRules: [{FE78856D-C8EB-4E98-8A93-85B37A9F0357}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\TrueImageHome\TrueImageHomeService.exe (Acronis International GmbH -> )

FirewallRules: [{BA7C392F-E517-4B4A-98B2-064C1096E914}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\MediaBuilder.exe (Acronis International GmbH -> )

FirewallRules: [{01FD3815-403E-41B6-8B1F-8D9CCAAA3E9E}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\SystemReport.exe (Acronis International GmbH -> )

FirewallRules: [{7A6FD8CC-A485-4EBC-A640-8DE12593CC5C}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\acronis_drive.exe (Acronis International GmbH -> )

FirewallRules: [{E14B8009-63DD-467A-82CF-6846E29EC0D5}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe (Acronis International GmbH -> Acronis International GmbH)

FirewallRules: [{1FD19B37-7F8C-475C-8271-B6D1FC310D3D}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe (Acronis International GmbH -> )

FirewallRules: [{ED621729-95FF-4081-A1AF-7B9FCAB46E53}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\ga_service.exe (Acronis International GmbH -> )

FirewallRules: [{3B85F0D2-5144-472E-8A80-D6A13C08AE83}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\LicenseActivator.exe (Acronis International GmbH -> )

FirewallRules: [{E0F1BD23-57F0-4B53-90FE-EC2D82D89368}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Home\report_sender.exe (Acronis International GmbH -> )

FirewallRules: [{009D777F-FA5D-4754-A5E8-08D8353E31CD}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe (Acronis International GmbH -> Acronis International GmbH)

FirewallRules: [{48F0B6A3-21EB-4761-94FF-C6030E534D7C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{702C2E4D-5DDB-4F7C-95FA-201D3F2B7950}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{3A7DABCA-AA40-48E8-A65E-7399C6120FB1}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite 2019\Programs64\CorelDrw.exe (Corel Corporation -> Corel Corporation)

FirewallRules: [{DD24290A-5F65-4CB6-9C42-7818835D72A0}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite 2019\Programs64\CorelPP.exe (Corel Corporation -> Corel Corporation)

FirewallRules: [{A07DA6C3-E2A4-498A-9B20-EE9EE97CB436}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)

FirewallRules: [{DF81CF11-9804-4B62-BC63-79344C6CA91B}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)

FirewallRules: [{AFC1F67B-415A-40D6-ACD9-934AE3F4BFE9}] => (Allow) C:\Program Files (x86)\Epson Software\ECPrinterSetup\ENPApp.exe (Seiko Epson Corporation) [Datei ist nicht signiert]

FirewallRules: [{2C227301-FF3E-4995-B3F3-2016815FC8A1}] => (Allow) C:\Program Files (x86)\Epson Software\ECPrinterSetup\ENPApp.exe (Seiko Epson Corporation) [Datei ist nicht signiert]

FirewallRules: [{B8260E0E-B8ED-4347-8C6D-8C0BA4090F48}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User{95A0C1C7-6EC5-4841-A37A-821D45D397E0}C:\program files (x86)\western digital\wd app manager\wdappmanager.exe] => (Allow) C:\program files (x86)\western digital\wd app manager\wdappmanager.exe (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)

FirewallRules: [UDP Query User{0B38B685-B78C-43F7-A1A0-D398B989F564}C:\program files (x86)\western digital\wd app manager\wdappmanager.exe] => (Allow) C:\program files (x86)\western digital\wd app manager\wdappmanager.exe (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)

FirewallRules: [{27B0DBA6-08D3-4C35-8037-B656E1B9E8A9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [TCP Query User{3D9A45E0-2727-4B55-AA6A-4F0403156F07}C:\users\juergen hamann\appdata\roaming\steganos\onlineshield\proxy\node.exe] => (Block) C:\users\juergen hamann\appdata\roaming\steganos\onlineshield\proxy\node.exe (Node.js Foundation -> Node.js)

FirewallRules: [UDP Query User{C7025C3A-914E-445A-A3C0-1CEFEBDC39BB}C:\users\juergen hamann\appdata\roaming\steganos\onlineshield\proxy\node.exe] => (Block) C:\users\juergen hamann\appdata\roaming\steganos\onlineshield\proxy\node.exe (Node.js Foundation -> Node.js)

FirewallRules: [TCP Query User{42D53717-65DD-49DA-983E-962D249F59FB}C:\program files (x86)\western digital\wd app manager\wdappmanager.exe] => (Allow) C:\program files (x86)\western digital\wd app manager\wdappmanager.exe (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)

FirewallRules: [UDP Query User{D5067F8D-41DB-48EC-B9F3-30A551BB2646}C:\program files (x86)\western digital\wd app manager\wdappmanager.exe] => (Allow) C:\program files (x86)\western digital\wd app manager\wdappmanager.exe (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
 

==================== Wiederherstellungspunkte =========================
 

13-01-2020 12:37:01 Installed gSyncit

16-01-2020 23:11:07 Windows Update

22-01-2020 21:36:17 Windows Update

24-01-2020 13:46:52 Entfernt tax 2019 Professional

27-01-2020 16:39:35 Windows Update

28-01-2020 23:27:09 Removed Kaspersky Password Manager
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

Name: USB2.0 HD UVC WebCam

Description: USB-Videogerät

Class Guid: {ca3e7ab9-b4c3-4ae6-8251-579ef933890f}

Manufacturer: Microsoft

Service: usbvideo

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (01/29/2020 10:14:11 AM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (14724,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (01/29/2020 10:06:54 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: DTHtml.exe, Version: 1.2.10.9, Zeitstempel: 0x53ae0879

Name des fehlerhaften Moduls: MSVCR80.dll, Version: 8.0.50727.9659, Zeitstempel: 0x5c7d6589

Ausnahmecode: 0xc000000d

Fehleroffset: 0x00014584

ID des fehlerhaften Prozesses: 0x3cbc

Startzeit der fehlerhaften Anwendung: 0x01d5d6835afb19a9

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Hewlett-Packard\HP My Display\DTHtml.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9659_none_d08cfd96442b25cc\MSVCR80.dll

Berichtskennung: 2552bbbc-336e-4ebb-8728-dc20307ecafe

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/29/2020 12:43:14 AM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (7120,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (01/29/2020 12:39:14 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: DTHtml.exe, Version: 1.2.10.9, Zeitstempel: 0x53ae0879

Name des fehlerhaften Moduls: MSVCR80.dll, Version: 8.0.50727.9659, Zeitstempel: 0x5c7d6589

Ausnahmecode: 0xc000000d

Fehleroffset: 0x00014584

ID des fehlerhaften Prozesses: 0x3110

Startzeit der fehlerhaften Anwendung: 0x01d5d6340c6aea29

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Hewlett-Packard\HP My Display\DTHtml.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9659_none_d08cfd96442b25cc\MSVCR80.dll

Berichtskennung: 091e67a8-d936-438f-9f8f-1d2ee62fd457

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/29/2020 12:25:14 AM) (Source: MsiInstaller) (EventID: 1024) (User: NT-AUTORITÄT)

Description: Produkt: Microsoft Access database engine 2010 (German) - Update "Microsoft Access Database Engine 2010 Service Pack 1 (SP1)" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
 

Error: (01/29/2020 12:25:14 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT-AUTORITÄT)

Description: Produkt: Microsoft Access database engine 2010 (German) -- Fehler 1706. Die erforderlichen Dateien können von Setup nicht gefunden werden. Überprüfen Sie die Verbindung mit dem Netzwerk oder dem CD-ROM-Laufwerk.    Weitere mögliche Lösungen für dieses Problem erhalten Sie unter SETUP.CHM.
 

Error: (01/29/2020 12:21:24 AM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (8516,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (01/29/2020 12:17:13 AM) (Source: SecurityCenter) (EventID: 17) (User: )

Description: Das Sicherheitscenter konnte den Aufrufer nicht überprüfen. Der Fehler %1 ist aufgetreten.
 
 

Systemfehler:

=============

Error: (01/29/2020 12:49:21 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-8TFKQJN)

Description: Der Server "windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (01/29/2020 12:35:26 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)

Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
 

Modulpfad: C:\WINDOWS\system32\IntelIHVRouter06.dll
 

Error: (01/29/2020 12:35:26 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)

Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
 

Modulpfad: C:\WINDOWS\system32\IntelIHVRouter06.dll
 

Error: (01/29/2020 12:35:25 AM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Fehler "1115" in DCOM, als der Dienst "wuauserv" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:

{E60687F7-01A1-40AA-86AC-DB1CBF673334}
 

Error: (01/29/2020 12:35:25 AM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Fehler "1115" in DCOM, als der Dienst "wuauserv" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:

{E60687F7-01A1-40AA-86AC-DB1CBF673334}
 

Error: (01/29/2020 12:35:25 AM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Fehler "1115" in DCOM, als der Dienst "wuauserv" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:

{E60687F7-01A1-40AA-86AC-DB1CBF673334}
 

Error: (01/29/2020 12:35:22 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)

Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
 

Modulpfad: C:\WINDOWS\system32\IntelIHVRouter06.dll
 

Error: (01/29/2020 12:35:17 AM) (Source: disk) (EventID: 11) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk8\DR8 gefunden.
 
 

==================== Speicherinformationen =========================== 
 

BIOS: American Megatrends Inc. G752VY.304 06/29/2017

Hauptplatine: ASUSTeK COMPUTER INC. G752VY

Prozessor: Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz

Prozentuale Nutzung des RAM: 25%

Installierter physikalischer RAM: 16322.54 MB

Verfügbarer physikalischer RAM: 12141.32 MB

Summe virtueller Speicher: 32706.54 MB

Verfügbarer virtueller Speicher: 28205.54 MB
 

==================== Laufwerke ================================
 

Drive c: (System) (Fixed) (Total:235.37 GB) (Free:26.66 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive d: (Archiv) (Fixed) (Total:931.51 GB) (Free:592.02 GB) NTFS

Drive e: (Recovery) (Fixed) (Total:0.94 GB) (Free:0.34 GB) NTFS

Drive g: (LogiLink LW-09) (Fixed) (Total:931.51 GB) (Free:569.92 GB) NTFS

Drive h: (USB Iomega 07) (Fixed) (Total:931.51 GB) (Free:643.09 GB) NTFS

Drive i: (My Passport Blau Festplatte 04) (Fixed) (Total:931.48 GB) (Free:677.85 GB) NTFS

Drive j: (Conrad_LW-08) (Fixed) (Total:1863.01 GB) (Free:1121.08 GB) NTFS

Drive k: (Fantec_LW-05) (Fixed) (Total:596.17 GB) (Free:122.04 GB) NTFS

Drive l: (Fantec_LW-06) (Fixed) (Total:1863.01 GB) (Free:247.25 GB) NTFS

Drive m: (My Passport Weiß Festplatte 03) (Fixed) (Total:1862.98 GB) (Free:869.92 GB) NTFS
 

\\?\Volume{d103c00e-e036-4ef0-8a24-7b614da1a7bb}\ () (Fixed) (Total:0.94 GB) (Free:0.42 GB) NTFS

\\?\Volume{a10e1344-7bad-42b2-ecff-fd0c50ee793d}\ () (Fixed) (Total:0.94 GB) (Free:0.34 GB) NTFS

\\?\Volume{f6ce0cf7-8587-49d6-ae92-b126a0b0685e}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 2D21C51E)
 

Partition: GPT.
 

==========================================================

Disk: 1 (Size: 238.5 GB) (Disk ID: 33147528)
 

Partition: GPT.
 

==========================================================

Disk: 2 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: 98D32C86)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

==========================================================

Disk: 3 (Size: 596.2 GB) (Disk ID: 3CB6E8D9)

Partition 1: (Not Active) - (Size=596.2 GB) - (Type=07 NTFS)
 

==========================================================

Disk: 4 (Size: 931.5 GB) (Disk ID: 00002FCB)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

==========================================================

Disk: 5 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: BF0FE2A1)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

==========================================================

Disk: 6 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: F882767E)

Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
 

==========================================================

Disk: 7 (Size: 1863 GB) (Disk ID: D5CA6AE5)

Partition 2: (Not Active) - (Size=1863 GB) - (Type=0F Extended)
 

==========================================================

Disk: 8 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 9E582F92)

Partition 3: (Not Active) - (Size=1863 GB) - (Type=05)
 

==================== Ende von Addition.txt =======================