Windows 10: Vermutlich Trojanerbefall durch Worddoc in Mail

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 21-10-2019
durchgeführt von Fantasie (22-10-2019 18:23:53)
Gestartet von C:\Users\Fantasie\Downloads
Windows 10 Home Version 1903 18362.418 (X64) (2019-05-29 12:25:10)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1104896356-1483158679-577133293-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1104896356-1483158679-577133293-503 - Limited - Disabled)
Gast (S-1-5-21-1104896356-1483158679-577133293-501 - Limited - Disabled)
Fantasie (S-1-5-21-1104896356-1483158679-577133293-1006 - Administrator - Enabled) => C:\Users\Fantasie
WDAGUtilityAccount (S-1-5-21-1104896356-1483158679-577133293-504 - Limited - Disabled)
_ashbackuppb_ (S-1-5-21-1104896356-1483158679-577133293-1008 - Administrator - Enabled) => C:\Users\_ashbackuppb_

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: G DATA ANTIVIRUS (Enabled - Up to date) {A9C56A9B-ECCD-57EA-78F6-92511DA1C885}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: G DATA ANTIVIRUS (Disabled - Up to date) {12A48B7F-CAF7-5864-4246-A92366268238}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
AAVUpdateManager (HKLM-x32\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 19.021.20048 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 32.0.0.125 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.270 - Adobe)
Adobe Photoshop Elements 13 (HKLM-x32\...\{609818B9-23EB-4196-B466-EFE05E92A32F}) (Version: 13.1 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.7.1 64-bit (HKLM\...\{BC86B82C-8C0E-4408-9AC1-6B0F2D636963}) (Version: 5.7.1 - Adobe Systems Incorporated)
Adobe Reader 64-bit fixes (HKLM\...\{6D80AAE7-FF65-4950-B1CA-3A7EA4995574}_is1) (Version:  - Leo Davidson / Pretentious Name)
Amazon Music (HKU\S-1-5-21-1104896356-1483158679-577133293-1006\...\Amazon Amazon Music) (Version: 7.8.3.2109 - Amazon Services LLC)
Ashampoo Backup Pro 12 (HKLM\...\{DF972766-050D-65AE-236E-5989116674FD}_is1) (Version: 12.04 - Ashampoo GmbH & Co. KG)
Audacity 2.3.1 (HKLM-x32\...\Audacity_is1) (Version: 2.3.1 - Audacity Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Boxcryptor Classic 1.7 (HKLM-x32\...\{DF47AB90-FB92-42F4-926E-1C4FF16029E7}) (Version: 1.7.409.131 - Secomba GmbH)
BrLauncher (HKLM-x32\...\{C04DCB6D-02A2-41AD-AA79-2644CEB26445}) (Version: 2.0.17.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{B556F816-FF4D-4BB6-9339-ED28639E2EF3}) (Version: 1.0.2.1 - Brother Industries Ltd.) Hidden
Brother IPPoverUSB Driver (HKLM-x32\...\{53C85801-A5E1-40E3-84EF-7A0D64FEF2ED}) (Version: 1.2.0.0 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{EE6C802A-5410-4722-B285-4333E9F5BB75}) (Version: 2.0.0.0 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{E1B7CE6D-A4F9-4C9B-8FAB-9178CF47FDED}) (Version: 1.0.27.0 - Brother Industries Ltd.) Hidden
Canon Utilities Digital Photo Professional (HKLM-x32\...\Digital Photo Professional) (Version: 3.15.0.0 - Canon Inc.)
Canon Utilities Digital Photo Professional 4 (HKLM-x32\...\Digital Photo Professional 4 (x64)) (Version: 4.5.0.0 - Canon Inc.)
Canon Utilities EOS Lens Registration Tool (HKLM-x32\...\EOS Lens Registration Tool) (Version: 1.5.0.1 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.50 - Piriform)
Citrix Online Launcher (HKLM-x32\...\{1EFF9E6C-76E1-43F9-81FB-BC8C037B0902}) (Version: 1.0.258 - Citrix)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.6.3728 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.5.4824 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.6.3702 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.6.3625 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.4.4230 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DisableMSDefender (HKLM\...\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}) (Version: 1.0.0 - Hewlett-Packard Company) Hidden
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 417.22 - NVIDIA Corporation) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 83.4.152 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.241.1 - Dropbox, Inc.) Hidden
Elements+ for PSE 13, v.10 (HKLM-x32\...\Elements+ for PSE 13_is1) (Version:  - Andrei Doubrovski)
FastPictureViewer Codec Pack 3.8.0.97 (HKLM-x32\...\{2A290174-8C6B-4CD5-9069-51A132CE7427}) (Version: 3.8.0.97 - Axel Rietschin Software Developments)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
G DATA ANTIVIRUS (HKLM-x32\...\G DATA ANTIVIRUS) (Version: 25.5.4.21 - G DATA Software AG)
Google Earth Pro (HKLM\...\{70A0F34E-564B-4F93-ADD6-3BAEC6E44075}) (Version: 7.3.2.5776 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.301 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Dropbox Plugin (HKLM-x32\...\{45B18FC7-3ECE-4F2B-99A8-370886AB8238}) (Version: 36.0.31.53050 - Hewlett-Packard Co.)
HP ENVY 4520 series - Grundlegende Software für das Gerät (HKLM\...\{634CB8C9-392E-4DDD-ADD9-4350B5117FA6}) (Version: 40.11.1122.1796 - HP Inc.)
HP ENVY 4520 series Hilfe (HKLM-x32\...\{AC3A5663-59A5-4421-9A4C-7309A4FEC06D}) (Version: 36.0.0 - Hewlett Packard)
HP Google Drive Plugin (HKLM-x32\...\{1502BB1F-7870-4DC9-9178-65CFE00D070C}) (Version: 36.0.31.53050 - Hewlett-Packard Co.)
HP Photo Creations (HKU\S-1-5-21-1104896356-1483158679-577133293-1006\...\HP Photo Creations) (Version: 1.0.0.22192 - HP)
HP Support Solutions Framework (HKLM-x32\...\{FAF973BC-4A5F-497B-80F2-96C1B4AE87DC}) (Version: 12.9.24.3 - HP Inc.)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6491.0 - IDT)
Imagenomic Noiseware 5 Plug-in (build 5031) (HKLM\...\ImagenomicNoisewarePlugin) (Version:  - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.13.1706 - Intel Corporation)
Intel(R) Programm für die Prozessorerkennung (HKLM-x32\...\{A92A4DB0-CD37-42D1-BE1D-603D53C24328}) (Version: 1.0.0.0 - Intel Corporation)
IrfanView 4.52 (64-bit) (HKLM\...\IrfanView64) (Version: 4.52 - Irfan Skiljan)
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Logitech SetPoint 6.69 (HKLM\...\sp6) (Version: 6.69.126 - Logitech)
Malwarebytes Version 3.8.3.2965 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.8.3.2965 - Malwarebytes)
MB-Ruler (HKLM-x32\...\{7363206E-C7BD-45CD-89A0-792B28409811}_is1) (Version: 5.3 - Fantasie Bader)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1104896356-1483158679-577133293-1006\...\OneDriveSetup.exe) (Version: 19.152.0927.0012 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Core Components (x64) ENU  (HKLM\...\{8CCBEC22-D2DB-4DC9-A58A-E1A1F3A38C8A}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Provider Services (x64) ENU  (HKLM\...\{03AC245F-4C64-425C-89CF-7783C1D3AB2C}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Minimal ADB and Fastboot version 1.4.3 (HKLM-x32\...\{B561660D-8B3C-491D-9E3E-293F14FCAADA}_is1) (Version: 1.4.3 - Samuel Rodberg)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 62.0.2 (x64 de) (HKLM\...\Mozilla Firefox 62.0.2 (x64 de)) (Version: 62.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 60.0 - Mozilla)
Mozilla Thunderbird 60.9.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 60.9.0 (x86 de)) (Version: 60.9.0 - Mozilla)
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
NVIDIA 3D Vision Controller-Treiber 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA Grafiktreiber 431.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 431.42 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.38.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.16 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.18.0907 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0907 - NVIDIA Corporation)
OpenOffice 4.1.6 (HKLM-x32\...\{3651624F-019F-4B39-8AE4-A2423CE1986F}) (Version: 4.16.9790 - Apache Software Foundation)
Palette Master Element Drivers Installer version 1.0.2 (HKLM-x32\...\{BB4A20D7-BB81-4B8D-9D9E-757F4E8A8597}_is1) (Version: 1.0.2 - Remote Director, LLC.)
Palette Master Element version 1.3.5 (HKLM-x32\...\{DC84B7F6-8018-432D-B219-4C06F2C79E9A}_is1) (Version: 1.3.5 - Remote Director, LLC.)
Passbild-Generator v4.0b (HKLM-x32\...\Passbild-Generator_is1) (Version:  - Passbild-Generator)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Pixum Fotowelt (HKLM-x32\...\Pixum Fotowelt) (Version: 6.4.1 - CEWE Stiftung u Co. KGaA)
PTLens (HKLM\...\{C2684BBD-7E78-41F8-BC80-4372E2EFDCEB}) (Version: 3.0.748 - ePaperPress)
Qualcomm Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10125.31214 - Realtek Semiconductor Corp.)
Recovery Manager (HKLM-x32\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.0.7316 - CyberLink Corp.) Hidden
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Samsung Data Migration (HKLM-x32\...\{3B304604-0BF5-488E-AB95-F2F2E31206F3}) (Version: 3.1 - Samsung)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18091.6 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18091.6 - Samsung Electronics Co., Ltd.)
Start Menu (HKU\S-1-5-19\...\Pokki) (Version: 0.269.2.322 - Pokki)
Start Menu (HKU\S-1-5-20\...\Pokki) (Version: 0.269.2.322 - Pokki)
Start Menu (HKU\S-1-5-21-1104896356-1483158679-577133293-1008\...\Pokki) (Version: 0.269.2.322 - Pokki)
SyncToy 2.1 (x64) (HKLM\...\{88DAAF05-5A72-46D2-A7C5-C3759697E943}) (Version: 2.1.0 - Microsoft)
System Requirements Lab for Intel (HKLM-x32\...\{04C4B49D-45D9-4A28-9ED1-B45CBD99B8C7}) (Version: 4.5.24.0 - Husdawg, LLC)
tiptoi® Manager 4.1.2 (HKLM\...\{833392BB-E8C0-4066-9408-3A30FA43972F}_is1) (Version: 4.1.2 - Ravensburger AG)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{9CBA860F-7437-4A75-941C-8EF559F2D145}) (Version: 2.52.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM\...\{52C1DD03-104E-4AC6-9DC6-21D585721ED1}) (Version: 1.19.0.0 - Microsoft Corporation) Hidden
VdhCoApp 1.2.4 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version:  - DownloadHelper)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version:  - )
WMBackup - Windows Live Mail Backup (HKLM-x32\...\WMBackup-BackupfürWindowsLiveMail) (Version: 4.16 - Heiko Schröder)
XMind 6 (v3.5.1) (HKLM-x32\...\XMind_is1) (Version: 3.5.1.201411201906 - XMind Ltd.)

Packages:
=========
HP Connected Music -> C:\Program Files\WindowsApps\AD2F1837.HPConnectedMusic_1.5.0.253_x86__v10z8vjag6ke6 [2018-10-26] (Hewlett-Packard Company)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_105.1.618.0_x64__v10z8vjag6ke6 [2019-10-17] (HP Inc.)
Mail und Kalender -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12026.20218.0_x64__8wekyb3d8bbwe [2019-09-28] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-22] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-22] (Microsoft Corporation) [MS Ad]
Microsoft News – Nachrichten -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.32.12463.0_x64__8wekyb3d8bbwe [2019-09-13] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.10022.0_x64__8wekyb3d8bbwe [2019-10-10] (Microsoft Studios) [MS Ad]
MSN Finanzen -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-19] (Microsoft Corporation) [MS Ad]
MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-19] (Microsoft Corporation) [MS Ad]
MSN Wetter -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.32.12463.0_x64__8wekyb3d8bbwe [2019-09-13] (Microsoft Corporation) [MS Ad]
uBlock Origin -> C:\Program Files\WindowsApps\37833NikRolls.uBlockOrigin_1.15.24.0_neutral__f8jsg5mm64m62 [2019-09-26] (Nik Rolls)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1104896356-1483158679-577133293-1006_Classes\CLSID\{AFD6BFDC-F329-41BB-9C53-764B965DD483}\InprocServer32 -> C:/Program Files (x86)/Duden/Duden Korrektor/Integration.DLL => Keine Datei
CustomCLSID: HKU\S-1-5-21-1104896356-1483158679-577133293-1006_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Fantasie\Dropbox [2018-09-22 16:55]
SSODL: EldosMountNotificator-cbfs4 - {0C4C4100-3E85-46D2-85EF-8BA25FD65BA5} - C:\Windows\system32\cbfsMntNtf4.dll (EldoS Corporation -> EldoS Corporation)
SSODL-x32: EldosMountNotificator-cbfs4 - {0C4C4100-3E85-46D2-85EF-8BA25FD65BA5} - C:\Windows\SysWOW64\cbfsMntNtf4.dll (EldoS Corporation -> EldoS Corporation)
ShellServiceObjects: Virtual Storage Mount Notification -> {0C4C4100-3E85-46D2-85EF-8BA25FD65BA5} => C:\Windows\system32\cbfsMntNtf4.dll [2013-11-15] (EldoS Corporation -> EldoS Corporation)
ShellServiceObjects: Virtual Storage Mount Notification -> {3141EB70-BAC6-4ACE-A6B8-61D7C4752169} => C:\windows\system32\cbfsMntNtf4.dll [2013-11-15] (EldoS Corporation -> EldoS Corporation)
ShellServiceObjects-x32: Virtual Storage Mount Notification -> {0C4C4100-3E85-46D2-85EF-8BA25FD65BA5} => C:\Windows\SysWOW64\cbfsMntNtf4.dll [2013-11-15] (EldoS Corporation -> EldoS Corporation)
ShellServiceObjects-x32: Virtual Storage Mount Notification -> {3141EB70-BAC6-4ACE-A6B8-61D7C4752169} => C:\windows\SysWOW64\cbfsMntNtf4.dll [2013-11-15] (EldoS Corporation -> EldoS Corporation)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [6671064 2013-12-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs4] -> {81BAC59E-8248-4600-8CD4-70433A35B5FD} => C:\Windows\system32\cbfsMntNtf4.dll [2013-11-15] (EldoS Corporation -> EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs4] -> {81BAC59E-8248-4600-8CD4-70433A35B5FD} => C:\Windows\system32\cbfsMntNtf4.dll [2013-11-15] (EldoS Corporation -> EldoS Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [AVK9CM] -> {CAF4C320-32F5-11D3-A222-004095200FF2} => C:\Program Files (x86)\G DATA\AntiVirus\AVK\ShellExt64.dll [2019-08-29] (G DATA Software AG -> G DATA Software AG)
ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2014-01-08] (CyberLink Corp. -> Cyberlink)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2014-01-08] (CyberLink Corp. -> Cyberlink)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2019-07-04] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [AVK9CM] -> {CAF4C320-32F5-11D3-A222-004095200FF2} => C:\Program Files (x86)\G DATA\AntiVirus\AVK\ShellExt64.dll [2019-08-29] (G DATA Software AG -> G DATA Software AG)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)

==================== Codecs (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2018-11-01 15:00 - 2018-01-31 16:58 - 000256512 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\jsoncpp.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 000052224 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\lzma.dll
2018-11-01 15:00 - 2018-01-31 16:59 - 000111616 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\minizip.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 000250880 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\party.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 000581632 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\sqlite.dll
2018-11-01 15:00 - 2018-01-31 16:59 - 000083456 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\zdll.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 000080896 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\ziputil.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 000026112 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\zlibutil.dll
2014-07-31 12:20 - 2014-07-31 12:20 - 000257024 _____ (BoxCryptor) [Datei ist nicht signiert] C:\Program Files (x86)\Boxcryptor Classic\ShellExt\x64\BoxcryptorClassic.Ext.dll
2014-07-31 16:11 - 2010-04-24 05:00 - 000336896 _____ (CANON INC.) [Datei ist nicht signiert] C:\WINDOWS\System32\CNMLMA1.DLL
2017-03-15 18:41 - 2013-09-12 06:00 - 000391168 _____ (CANON INC.) [Datei ist nicht signiert] C:\WINDOWS\System32\CNMLMC1.DLL
2014-07-31 12:20 - 2014-07-31 12:20 - 000208896 _____ (EldoS Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Boxcryptor Classic\CBFS4Net.dll
2017-03-17 18:25 - 2016-10-04 16:51 - 000076800 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll
2018-11-01 15:00 - 2018-06-27 11:58 - 002135040 _____ (The curl library, hxxps://curl.haxx.se/) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\ash_libcurl.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 000353792 _____ (The curl library, hxxps://curl.haxx.se/) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\libcurl.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 001966080 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\LIBEAY32.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 000354816 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\SSLEAY32.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 000172544 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\wxbase310u_net_vc_ox.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 002276352 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\wxbase310u_vc_ox.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 000173056 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\wxbase310u_xml_vc_ox.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 001538048 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\wxmsw310u_adv_vc_ox.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 005491200 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\wxmsw310u_core_vc_ox.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 000707584 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\wxmsw310u_html_vc_ox.dll
2018-11-01 15:00 - 2018-01-31 16:58 - 000865792 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 12\bin\wxmsw310u_xrc_vc_ox.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Fantasie\Desktop\Grobplanung 2019 2020.docx:com.dropbox.attrs [54]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> c:\Program Files (x86)\Intel\iCLS Client\;c:\Program Files\Intel\iCLS Client\;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1104896356-1483158679-577133293-1006\Control Panel\Desktop\\Wallpaper -> C:\Users\Fantasie\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
HKU\S-1-5-21-1104896356-1483158679-577133293-1008\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

MSCONFIG\Services: ashbackuppb => 2
MSCONFIG\Services: HPSupportSolutionsFrameworkService => 2
HKLM\...\StartupApproved\Run: => "SysTrayApp"
HKLM\...\StartupApproved\Run: => "BeatsOSDApp"
HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run: => "Ashampoo Backup PB"
HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor"
HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe"
HKLM\...\StartupApproved\Run32: => "SDTray"
HKLM\...\StartupApproved\Run32: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run32: => "SysTrayApp"
HKU\S-1-5-21-1104896356-1483158679-577133293-1006\...\StartupApproved\Run: => "Amazon Music Helper"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{A5E2E729-D552-4C24-B261-12D448E5DA7A}] => (Allow) C:\Program Files\HP\HP ENVY 4520 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{8D5E9F91-738E-4E59-A672-A7660A542E0C}] => (Allow) LPort=5357
FirewallRules: [{422068C0-1D4E-4295-94B1-131236678434}] => (Allow) C:\Program Files\HP\HP ENVY 4520 series\Bin\DeviceSetup.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{77DB1BD7-04D8-41D6-B6AC-DF27608636E1}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{B177DB9D-2A78-4746-89BA-814825E0DFAC}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6A351D65-FA50-4385-BF36-CB12870AD166}] => (Allow) LPort=2869
FirewallRules: [{A3D2F521-B083-4CEE-983E-BEF3D90A4296}] => (Allow) LPort=1900
FirewallRules: [{B908F64B-967E-462E-A101-7A8E9D8FDFBA}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{0CAB6A9F-C646-476F-9C43-19CFC1EDA64C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe (CyberLink Corp. -> CyberLink)
FirewallRules: [{F4EC1883-85D2-4980-85D9-3F78A3FEC942}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{95902314-8C3D-42ED-83C7-856BC0561E5D}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [TCP Query User{7EA7D6FC-A484-4D87-913D-33015635246D}C:\program files (x86)\xmind\xmind.exe] => (Allow) C:\program files (x86)\xmind\xmind.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{0B5B1F37-181F-4544-BB4A-B40113F7C4D0}C:\program files (x86)\xmind\xmind.exe] => (Allow) C:\program files (x86)\xmind\xmind.exe () [Datei ist nicht signiert]
FirewallRules: [{6D6B3A1E-AD3D-4F2D-A1FD-A3658DDE95D8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D7AD0812-EE71-49FE-AF3E-454C6E9395E0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{C5296A9A-66AB-4514-AA6D-B402E50197E4}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{E7520145-6939-4005-B365-1F7DC5C3290D}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{DA9B80DD-F86D-480F-9F68-8F6E0246A0EF}K:\xmind portable\xmind_windows\xmind.exe] => (Allow) K:\xmind portable\xmind_windows\xmind.exe Keine Datei
FirewallRules: [UDP Query User{A614929C-FFED-4EF3-9161-EC628B291D66}K:\xmind portable\xmind_windows\xmind.exe] => (Allow) K:\xmind portable\xmind_windows\xmind.exe Keine Datei
FirewallRules: [{69AA52C8-5C83-4D54-8E53-A7E7914AF506}] => (Block) K:\xmind portable\xmind_windows\xmind.exe Keine Datei
FirewallRules: [{8C5BDEFB-F79B-4D3B-8421-3CF1A7E23732}] => (Block) K:\xmind portable\xmind_windows\xmind.exe Keine Datei
FirewallRules: [TCP Query User{1DBE26E1-8BB3-49C4-BE96-F2AD7B2C2D1B}J:\xmind portable\xmind_windows\xmind.exe] => (Allow) J:\xmind portable\xmind_windows\xmind.exe Keine Datei
FirewallRules: [UDP Query User{26E1CE59-15B4-48D5-B62A-287CBE151CBE}J:\xmind portable\xmind_windows\xmind.exe] => (Allow) J:\xmind portable\xmind_windows\xmind.exe Keine Datei
FirewallRules: [{B2B90411-AF5D-4529-B383-C8C1D4EDFCF2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C74E703B-AF65-4917-BEE4-932A4C121DD6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{2511BD1B-CDF3-4E23-B8D0-A47338206B93}C:\users\Fantasie\appdata\local\amazon music\amazon music helper.exe] => (Allow) C:\users\Fantasie\appdata\local\amazon music\amazon music helper.exe (Amazon Services LLC -> Amazon Services LLC)
FirewallRules: [UDP Query User{094C32C7-CD9A-4E42-860B-CB382C84647B}C:\users\Fantasie\appdata\local\amazon music\amazon music helper.exe] => (Allow) C:\users\Fantasie\appdata\local\amazon music\amazon music helper.exe (Amazon Services LLC -> Amazon Services LLC)
FirewallRules: [{DA71F3AF-ADE4-4D33-9B33-5FDCE483D81D}] => (Block) C:\users\Fantasie\appdata\local\amazon music\amazon music helper.exe (Amazon Services LLC -> Amazon Services LLC)
FirewallRules: [{C7C470F9-3F22-48B9-8B94-1CD3FA4D2E65}] => (Block) C:\users\Fantasie\appdata\local\amazon music\amazon music helper.exe (Amazon Services LLC -> Amazon Services LLC)
FirewallRules: [TCP Query User{85C06CFC-F851-4C41-8D09-8B7BE4BB4FAF}D:\sicherung usb-stick\portableapps\firefoxportable\app\firefox64\firefox.exe] => (Allow) D:\sicherung usb-stick\portableapps\firefoxportable\app\firefox64\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{7A86BCF2-3076-4789-BCBE-698017BF3183}D:\sicherung usb-stick\portableapps\firefoxportable\app\firefox64\firefox.exe] => (Allow) D:\sicherung usb-stick\portableapps\firefoxportable\app\firefox64\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{111614FF-0D2B-41F7-A231-993830984193}] => (Block) D:\sicherung usb-stick\portableapps\firefoxportable\app\firefox64\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{6171A7A8-CF80-4C61-817D-776B91DA37F4}] => (Block) D:\sicherung usb-stick\portableapps\firefoxportable\app\firefox64\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B678C0FE-2ECD-4695-832B-FB65E4BCBFF7}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{00454346-FA6D-4BDC-8DF4-3DC256305C65}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{252ED671-0C31-463B-8773-EFF84DFA6E69}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{301EDD52-4ACE-40D5-AF9B-86D6F60CC084}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0C9324A9-FE95-4F19-99D8-0CA58B2BDB62}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{531B1776-0050-4E6F-923A-5C2437656586}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C85F429A-9656-4230-8F0F-7F34BF2CDE78}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)

==================== Wiederherstellungspunkte =========================

11-10-2019 15:57:43 Windows Update
20-10-2019 12:05:40 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/22/2019 06:17:18 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (5692,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/22/2019 05:48:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 3.1.0.1840, Zeitstempel: 0x5d5c15af
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x8f948b48
ID des fehlerhaften Prozesses: 0x2ea4
Startzeit der fehlerhaften Anwendung: 0x01d588f021415ef4
Pfad der fehlerhaften Anwendung: C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: c408377b-c7d5-4507-8e2b-f890a4f2846a
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (10/22/2019 05:15:08 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (10232,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/22/2019 05:09:02 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (37020,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/22/2019 05:00:33 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (37820,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/22/2019 04:42:51 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (23224,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/22/2019 07:43:09 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (15340,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/21/2019 10:08:10 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (35300,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.


Systemfehler:
=============
Error: (10/22/2019 05:46:24 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎22.‎10.‎2019 um 17:06:48 unerwartet heruntergefahren.

Error: (10/22/2019 05:46:14 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT-AUTORITÄT)
Description: 3221225684Bei der Verarbeitung der Wiederherstellungsdaten ist ein schwerwiegender Fehler aufgetreten.

Error: (10/22/2019 07:57:18 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP1)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/22/2019 07:57:18 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP1)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/22/2019 07:57:18 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP1)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/22/2019 07:57:18 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP1)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/22/2019 07:57:18 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP1)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/22/2019 07:57:18 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP1)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


CodeIntegrity:
===================================

Date: 2019-10-22 18:21:06.362
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\G DATA\AntiVirus\AVK\AVKWCtlx64.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-22 18:21:06.361
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\G DATA\AntiVirus\AVK\AVKWCtlx64.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-22 18:20:09.385
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-22 18:20:04.662
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-22 18:20:03.484
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-22 18:20:02.851
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-22 18:20:00.376
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-22 18:20:00.282
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Speicherinformationen =========================== 

BIOS: AMI 80.23 07/06/2016
Hauptplatine: Hewlett-Packard 2AF7
Prozessor: Intel(R) Core(TM) i5-4460S CPU @ 2.90GHz
Prozentuale Nutzung des RAM: 51%
Installierter physikalischer RAM: 12227.25 MB
Verfügbarer physikalischer RAM: 5893.29 MB
Summe virtueller Speicher: 14083.25 MB
Verfügbarer virtueller Speicher: 6989.92 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:929.16 GB) (Free:659.58 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Daten) (Fixed) (Total:1862.89 GB) (Free:499.35 GB) NTFS
Drive f: (StoreJet 35T3 USB 3) (Fixed) (Total:1863.02 GB) (Free:359.92 GB) NTFS
Drive z: (Boxcryptor Classic) (Fixed) (Total:929.16 GB) (Free:659.58 GB) FAT32

\\?\Volume{2bb67940-be4e-11e8-842c-2025647bb6ea}\ (Windows RE tools) (Fixed) (Total:1 GB) (Free:0.61 GB) NTFS
\\?\Volume{5253de0b-50ea-4229-9c92-7e6804a89c49}\ () (Fixed) (Total:0.88 GB) (Free:0.45 GB) NTFS
\\?\Volume{e562e29b-33ad-4182-ad88-b540ec243cb4}\ (SYSTEM) (Fixed) (Total:0.35 GB) (Free:0.29 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: D3CD1A47)

Partition: GPT.

========================================================
Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 6 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 0018412A)
Partition 1: (Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================