WIN10: CPU-Auslastung 50-100% / Avast meldet nodejs

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 04-10-2020
durchgeführt von Birgit (07-10-2020 20:15:18)
Gestartet von C:\Users\Birgit\Desktop
Windows 10 Pro Version 1909 18363.1082 (X64) (2019-09-02 11:11:03)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2191917921-1950315238-1581437913-500 - Administrator - Disabled)
Birgit (S-1-5-21-2191917921-1950315238-1581437913-1001 - Administrator - Enabled) => C:\Users\Birgit
DefaultAccount (S-1-5-21-2191917921-1950315238-1581437913-503 - Limited - Disabled)
Gast (S-1-5-21-2191917921-1950315238-1581437913-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2191917921-1950315238-1581437913-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.04 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov)
ACD/Labs 2018 Desktop Software in C:\ACD2018FREE\ (HKLM-x32\...\ACDLabs in C__ACD2018FREE_) (Version: v14.00, FREE - ACD/Labs)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 20.012.20048 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 27.0.0.124 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.433 - Adobe)
AirShowPcSender 1.0.0 (HKLM-x32\...\AirShowPcSender) (Version: 1.0.0 - AirShow)
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 10.100.303.238 - ALPS ELECTRIC CO., LTD.)
Audacity 2.4.2 (HKLM-x32\...\Audacity_is1) (Version: 2.4.2 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.7.2425 - Avast Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 85.0.5814.102 - Die Avast Secure Browser-Autoren)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.136.333 - AVAST Software) Hidden
BiBox (HKLM-x32\...\{52CC41DB-12E7-B223-3AA6-486EB0E62166}) (Version: 1.1.213 - westermann digital GmbH) Hidden
BiBox (HKLM-x32\...\BiBox) (Version: 1.1.213 - westermann digital GmbH)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5844 - CDBurnerXP)
Chemie heute SII Materialien (HKLM-x32\...\{52271A46-33D8-469E-9427-99F06BECA667}) (Version: 1.00.0000 - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg Schöningh Winklers GmbH)
D-GISS 2015-2016 Version 20.0 (HKLM-x32\...\{EFF5CFDD-D720-4FC4-82B7-F7EF93536041}_is1) (Version: 20.0 - Universum Verlag GmbH, Wiesbaden)
Dropbox (HKLM-x32\...\Dropbox) (Version: 106.4.368 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.335.1 - Dropbox, Inc.) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 21.2 - Thüringer Landesfinanzdirektion)
Epson Event Manager (HKLM-x32\...\{4B22C430-7EA8-4534-8358-376FD900B953}) (Version: 3.10.0042 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON WF-3620 Series Printer Uninstall (HKLM\...\EPSON WF-3620 Series) (Version:  - SEIKO EPSON Corporation)
FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version:  - Marek Jasinski)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 85.0.4183.121 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
HotPotatoes v 6.3.0.5 (HKLM-x32\...\hotpot_is1) (Version:  - HalfBaked)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.5126 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{3B236485-CCE7-48DE-82DC-A5EA54A6F7D6}) (Version: 5.0.10.2850 - Intel Corporation)
Java 8 Update 221 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180221F0}) (Version: 8.0.2210.11 - Oracle Corporation)
Kits Configuration Installer (HKLM-x32\...\{1704C439-1501-3446-7932-33DA822E8597}) (Version: 10.1.15063.468 - Microsoft) Hidden
Klett Lernen (HKLM-x32\...\{38F07883-D8B1-443D-B5F4-E5E3414DE1A1}_is1) (Version: 1.0.0 - Ernst Klett Verlag GmbH)
MediaManager (HKLM-x32\...\MediaManager) (Version:  - )
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 85.0.564.63 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.135.29 - )
Microsoft Office Professional Plus 2019 - de-de (HKLM\...\ProPlus2019Volume - de-de) (Version: 16.0.10366.20016 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2191917921-1950315238-1581437913-1001\...\OneDriveSetup.exe) (Version: 20.143.0716.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{97238E8A-4919-4A1E-965A-C6C36938F4CE}) (Version: 2.68.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 81.0.1 (x64 de) (HKLM\...\Mozilla Firefox 81.0.1 (x64 de)) (Version: 81.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 81.0.1.7578 - Mozilla)
Mozilla Thunderbird 68.11.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 68.11.0 (x86 de)) (Version: 68.11.0 - Mozilla)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.11 - F.J. Wechselberger)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.10366.20016 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.10366.20016 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.10366.20016 - Microsoft Corporation) Hidden
PDF24 Creator 9.2.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 9.2.2 - PDF24.org)
PerkinElmer ChemOffice Professional 2015 (HKLM-x32\...\{83DBA37B-B24C-431B-9D7B-8331D28A067C}) (Version: 15.0 - PerkinElmer Informatics, Inc.)
Pfadfinder 2.0 (HKLM-x32\...\{26160589-3DEA-4CE4-A040-C06D836F69C6}) (Version: 2.0.33 - Bildungshaus Schulbuchverlage GmbH, Braunschweig)
Pixum Fotowelt (HKLM-x32\...\Pixum Fotowelt) (Version: 6.3.5 - CEWE Stiftung u Co. KGaA)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.2.1 r2386 - )
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21234 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7548 - Realtek Semiconductor Corp.)
Rund um (2.0) ... Biologie heute SII Teil 1 (HKLM-x32\...\{6E4C3B7E-70F8-421F-8A3F-7085231DD78E}) (Version: 1.00.0000 - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg Schöningh Winklers GmbH)
Rund um (2.0) ... Biologie heute SII Teil 2 (HKLM-x32\...\{CC0B1CCC-D324-4DB7-B8F9-D1C6FB798177}) (Version: 1.00.0000 - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg Schöningh Winklers GmbH)
Rund um (2.0) ... Chemie heute Lehrermaterialien 1 + 2 (HKLM-x32\...\{DB095155-41A5-46B5-BB49-688E14EEB87D}) (Version: 1.00.0000 - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg Schöningh Winklers GmbH)
Rund um (2.0) ... Chemie heute Lehrermaterialien 3 + 4 (HKLM-x32\...\{04FF8CFC-EBC8-4FC7-B7F3-0A1433C9C1BA}) (Version: 1.00.0000 - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg Schöningh Winklers GmbH)
Rund um (2.0) ... Chemie heute Lehrermaterialien 5 + 6 (HKLM-x32\...\{B1DDD733-5FF8-48B1-AD97-89462BC56AD0}) (Version: 1.00.0000 - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg Schöningh Winklers GmbH)
Rund um (2.0) ... Netzwerk Naturwissenschaft und Technik BW (HKLM-x32\...\{16C02ADC-24AE-4337-8220-64AE6E26DD52}) (Version: 1.00.0000 - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg Schöningh Winklers GmbH)
SDK Debuggers (HKLM-x32\...\{8E90E239-34EE-0F5B-24D5-16FA162EF3CB}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden
Skype Version 8.59 (HKLM-x32\...\Skype_is1) (Version: 8.59 - Skype Technologies S.A.)
Synaptics WBF DDK 5111 (HKLM\...\{216E9285-2B1C-4C8E-87B0-45ACBE079A95}) (Version: 4.5.308.0 - Synaptics)
TOSHIBA eco Utility (HKLM\...\{72EFCFA8-3923-451D-AF52-7CE9D87BC2A1}) (Version: 3.0.0.6406 - Toshiba Corporation)
TOSHIBA Fingerprint Utility (HKLM\...\{62BBF381-D208-4EF0-B502-6CB6E5B9A161}) (Version: 2.3.09.64402 - Toshiba Corporation)
TOSHIBA Function Key (HKLM\...\{ABB33FFD-6D6C-4670-9EF4-6181BB4D0DF2}) (Version: 1.1.15.6404 - Toshiba Corporation)
TOSHIBA PC Diagnostic Tool (HKLM-x32\...\{F0794FA5-1809-4FC3-AA4E-48061281B5A2}) (Version: 9.0.3.6400 - Toshiba Corporation)
TOSHIBA PC Health Monitor (HKLM\...\{B507386D-1F61-4E55-B05B-F56ACB0086B3}) (Version: 4.02.00.6400 - Toshiba Corporation)
TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.01.0002 - Toshiba Corporation)
TOSHIBA System Settings (HKLM-x32\...\{4D57ED72-6B01-40BD-9CA9-012B8FC09CEB}) (Version: 2.0.12.32002 - Toshiba Corporation)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.21 - IDRIX)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Software Development Kit - Windows 10.0.15063.468 (HKLM-x32\...\{0a829ae9-ca13-4f58-a168-648e80cf6739}) (Version: 10.1.15063.468 - Microsoft Corporation)
Windows-Treiberpaket - Digistump LLC (digistump.com) (usbser) Ports  (09/02/2014 5.1.2600.1) (HKLM\...\9CC287B52147A33B868EF5C1925869E338E5DB33) (Version: 09/02/2014 5.1.2600.1 - Digistump LLC (digistump.com))
Windows-Treiberpaket - Digistump LLC (usbser) Ports  (08/16/2014 1.1.0.0) (HKLM\...\4DA6FDC07A46FA211FFF1D2621FB5C4AECCF361F) (Version: 08/16/2014 1.1.0.0 - Digistump LLC)
Windows-Treiberpaket - libusb-win32 Digispark Bootloader (01/17/2012 1.2.6.0) (HKLM\...\BB397D9B032B585B30B619E3C501166D1E8ECF0D) (Version: 01/17/2012 1.2.6.0 - libusb-win32)
Windows-Treiberpaket - libusb-win32 DigiUSB (09/02/2014 1.2.6.1) (HKLM\...\3D61A803D3651752BA620721E99EDDDB37384949) (Version: 09/02/2014 1.2.6.1 - libusb-win32)
WinRAR 5.70 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)

Packages:
=========
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-10] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-10] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.8101.0_x64__8wekyb3d8bbwe [2020-08-20] (Microsoft Studios) [MS Ad]
MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-24] (Microsoft Corporation) [MS Ad]
My Toshiba -> C:\Program Files\WindowsApps\EnnovaResearch.ToshibaPlaces_3.2.49.0_x64__3s2an63h56yee [2016-02-09] (Ennova Research)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2191917921-1950315238-1581437913-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [dropbox-NamespaceExtensionRole.Personal] => C:\Users\Birgit\Dropbox [2015-09-13 23:21]
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-09-02] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-09-02] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [ATFPUOverlayIcon] -> {3239DBC1-B76D-4dc7-8B29-D99CBA3C7336} => C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUOverlayIcon.dll [2013-07-17] (TOSHIBA CORPORATION -> TOSHIBA)
ShellIconOverlayIdentifiers: [TFPUOverlayIcon] -> {8DBDDA23-34E3-4BF1-A107-67B94C080A1F} => C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUFileShellExt.dll [2015-04-23] (TOSHIBA CORPORATION -> TOSHIBA)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-09-02] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [DLNA播放到] -> {C14F7681-33D8-11D3-A09B-00500402F30B} => C:\Program Files (x86)\AirShowPcSender\AirShowPcShell64.dll [2016-05-13] (AirShow) [Datei ist nicht signiert]
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => C:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll [2010-03-30] (F.J. Wechselberger) [Datei ist nicht signiert]
ContextMenuHandlers1: [TFPUContextMenu] -> {2E34EBB9-C147-4DF4-938F-90C5B0837B1E} => C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUFileShellExt.dll [2015-04-23] (TOSHIBA CORPORATION -> TOSHIBA)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-09-02] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.45.0.dll [2020-09-09] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2020-04-28] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-09-02] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [TFPUContextMenu] -> {2E34EBB9-C147-4DF4-938F-90C5B0837B1E} => C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUFileShellExt.dll [2015-04-23] (TOSHIBA CORPORATION -> TOSHIBA)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Birgit\Desktop\Sicherung_und_Herunterfahren.lnk -> C:\PortableProgramme\TraybackupPortable\Batch-Dateien\Sicherung_und_Herunterfahren.bat ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sicherung_und_Herunterfahren.lnk -> C:\PortableProgramme\TraybackupPortable\Batch-Dateien\Sicherung_und_Herunterfahren.bat ()

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2015-03-24 15:27 - 2015-03-24 15:27 - 000011776 _____ () [Datei ist nicht signiert] C:\Program Files\Rainmeter\Plugins\PowerPlugin.dll
2015-03-24 15:27 - 2015-03-24 15:27 - 000058368 _____ () [Datei ist nicht signiert] C:\Program Files\Rainmeter\Plugins\WebParser.DLL
2016-10-04 19:52 - 2016-10-04 19:52 - 000076800 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll
2015-09-12 16:54 - 2011-04-19 03:03 - 000120320 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\WINDOWS\System32\E_YLMJJE.DLL

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

HKU\S-1-5-21-2191917921-1950315238-1581437913-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/?pc=COS2&ptag=D092120-AB5E7204335A1488EBDF&form=CONMHP&conlogo=CT3331977
SearchScopes: HKU\S-1-5-21-2191917921-1950315238-1581437913-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COS2&ptag=D092120-N0700AB5E7204335A1488EBDF&form=CONBDF&conlogo=CT3331977&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2191917921-1950315238-1581437913-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COS2&ptag=D092120-N0700AB5E7204335A1488EBDF&form=CONBDF&conlogo=CT3331977&q={searchTerms}
BHO: TOSHIBA Fingerprint Utility Web Site Passwords -> {030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9} -> C:\Program Files\TOSHIBA\Fingerprint Utility\TFPUPWDBankBHO.dll [2013-08-26] (TOSHIBA CORPORATION -> TOSHIBA)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: TOSHIBA Fingerprint Utility Web Site Passwords -> {030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9} -> C:\Program Files\TOSHIBA\Fingerprint Utility\BrowserAddin\TFPUPWDBankBHO.dll [2013-08-26] (TOSHIBA CORPORATION -> TOSHIBA)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_221\bin\ssv.dll [2019-09-08] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2020-09-11] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_221\bin\jp2ssv.dll [2019-09-08] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-11-15] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2191917921-1950315238-1581437913-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2191917921-1950315238-1581437913-1001\...\sharepoint.com -> hxxps://bwedu-files.sharepoint.com
IE trusted site: HKU\S-1-5-21-2191917921-1950315238-1581437913-1001\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-07-10 13:04 - 2019-01-04 12:34 - 000000835 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\nodejs\
HKU\S-1-5-21-2191917921-1950315238-1581437913-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Birgit\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\23_Hwy1.JPG
DNS Servers: 192.168.188.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run: => "TFPUService"
HKLM\...\StartupApproved\Run: => "TosWaitSrv"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "Opera Browser Assistant"
HKU\S-1-5-21-2191917921-1950315238-1581437913-1001\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"
HKU\S-1-5-21-2191917921-1950315238-1581437913-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2191917921-1950315238-1581437913-1001\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_B9FD75E69DE9F4A8049403DEDAE250FF"
HKU\S-1-5-21-2191917921-1950315238-1581437913-1001\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-2191917921-1950315238-1581437913-1001\...\StartupApproved\Run: => "Lync"
HKU\S-1-5-21-2191917921-1950315238-1581437913-1001\...\StartupApproved\Run: => "2777DFB8279EC8463BCF81E6CF8E7F3A484AB6D9._service_run"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{1F7F6313-BA77-4883-B795-D4F7528DA172}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{74C30BD5-DED4-43EF-A9E4-F0E904B289DE}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C366C4C7-E4AE-4DEA-9B06-1853DB03230C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5F0F36E3-90BD-4DDF-BDD1-D6F5B1D36177}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B20B4504-51FB-42E0-8B06-30EDA393D857}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E438FDB9-144D-4D39-A6E2-CD870689EDB1}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe => Keine Datei
FirewallRules: [{12A8A942-5326-4FFF-9E36-1F6D3F5B206B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe => Keine Datei
FirewallRules: [UDP Query User{4EC07DF2-1C03-43A3-9A8A-C9B60C558E53}C:\program files (x86)\arduino\java\bin\javaw.exe] => (Allow) C:\program files (x86)\arduino\java\bin\javaw.exe => Keine Datei
FirewallRules: [TCP Query User{BA097CD7-EA2E-47FE-8CA9-CD4CE4FC2FAA}C:\program files (x86)\arduino\java\bin\javaw.exe] => (Allow) C:\program files (x86)\arduino\java\bin\javaw.exe => Keine Datei
FirewallRules: [UDP Query User{0CDB0811-BBA6-4F4A-A750-829A73D3BEFD}\\netzlw115\birgit\dokumente\materialsl\ch\17_fokus_si_umat\win\bm-stick.exe] => (Allow) \\netzlw115\birgit\dokumente\materialsl\ch\17_fokus_si_umat\win\bm-stick.exe => Keine Datei
FirewallRules: [TCP Query User{EA22D098-1520-4CCB-82BE-852ADD76E425}\\netzlw115\birgit\dokumente\materialsl\ch\17_fokus_si_umat\win\bm-stick.exe] => (Allow) \\netzlw115\birgit\dokumente\materialsl\ch\17_fokus_si_umat\win\bm-stick.exe => Keine Datei
FirewallRules: [UDP Query User{8CE2D793-B81E-4659-831E-1BD9B96079DA}\\netzlw115\birgit\dokumente\materialsl\ch\17_fokus_umat\win\bm-stick.exe] => (Allow) \\netzlw115\birgit\dokumente\materialsl\ch\17_fokus_umat\win\bm-stick.exe => Keine Datei
FirewallRules: [TCP Query User{78999E70-5677-4270-9C30-89D9DDFA1DF9}\\netzlw115\birgit\dokumente\materialsl\ch\17_fokus_umat\win\bm-stick.exe] => (Allow) \\netzlw115\birgit\dokumente\materialsl\ch\17_fokus_umat\win\bm-stick.exe => Keine Datei
FirewallRules: [UDP Query User{1359C831-296B-471A-86FA-15796D085EF3}D:\win\bm-stick.exe] => (Allow) D:\win\bm-stick.exe => Keine Datei
FirewallRules: [TCP Query User{C02E952A-57B5-44E0-A838-1CDE37F90027}D:\win\bm-stick.exe] => (Allow) D:\win\bm-stick.exe => Keine Datei
FirewallRules: [{225224A4-AC79-4C58-8792-821AEEA1EA90}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{1F379B56-DCC3-44DD-A65A-446740DF1182}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{32010D2A-B328-4095-AE22-382967DAE9F9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{7C7F081B-D93B-4A08-9B67-C34FA0A62B61}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{18EA89E9-700E-4D6A-B400-97A4B10525AC}C:\program files (x86)\cambridgesoft\chemoffice2015\chemdraw\chemdraw.exe] => (Block) C:\program files (x86)\cambridgesoft\chemoffice2015\chemdraw\chemdraw.exe (CambridgeSoft Corporation -> PerkinElmer)
FirewallRules: [UDP Query User{46320CF5-21C9-4723-9028-FA5F450FFF4D}C:\program files (x86)\cambridgesoft\chemoffice2015\chemdraw\chemdraw.exe] => (Block) C:\program files (x86)\cambridgesoft\chemoffice2015\chemdraw\chemdraw.exe (CambridgeSoft Corporation -> PerkinElmer)
FirewallRules: [TCP Query User{66D8E7F0-F7A4-49CB-9D50-A6C3E4899F85}C:\program files (x86)\cambridgesoft\chemoffice2015\chemfinder\chemfinder.exe] => (Block) C:\program files (x86)\cambridgesoft\chemoffice2015\chemfinder\chemfinder.exe (CambridgeSoft Corporation -> PerkinElmer)
FirewallRules: [UDP Query User{5407CEB5-3CEA-4277-8925-2DEACE79DF25}C:\program files (x86)\cambridgesoft\chemoffice2015\chemfinder\chemfinder.exe] => (Block) C:\program files (x86)\cambridgesoft\chemoffice2015\chemfinder\chemfinder.exe (CambridgeSoft Corporation -> PerkinElmer)
FirewallRules: [TCP Query User{016A6A94-9B1C-43C3-9DB0-3BD5C1713594}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Block) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe (Franz Josef Wechselberger -> F.J. Wechselberger)
FirewallRules: [UDP Query User{49BF69C4-6939-4490-85A1-DEE82FD85B90}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Block) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe (Franz Josef Wechselberger -> F.J. Wechselberger)
FirewallRules: [{0B71F746-7F5C-440D-9E93-4C36492DFD65}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
FirewallRules: [{858AAE3E-5DBB-437E-8950-41FEAD133147}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
FirewallRules: [{ED1A757A-B65F-4945-96B7-2470F3107DBF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{9F9F284D-D0B7-4D52-B84C-9E02BFC45C10}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{DC7EBCF4-A03D-4249-8299-FE04D5B97CD1}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe (Franz Josef Wechselberger -> F.J. Wechselberger)
FirewallRules: [UDP Query User{61BF79D7-76BB-4915-B06E-B0AA4248B2C1}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe (Franz Josef Wechselberger -> F.J. Wechselberger)
FirewallRules: [TCP Query User{05CD4B58-BC54-44C7-A3AE-E46CBDFC8BEA}C:\program files (x86)\java\jre1.8.0_121\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_121\bin\jp2launcher.exe => Keine Datei
FirewallRules: [UDP Query User{46125113-09AA-49C2-8E03-B1D168BA3592}C:\program files (x86)\java\jre1.8.0_121\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_121\bin\jp2launcher.exe => Keine Datei
FirewallRules: [TCP Query User{33AB632E-584B-461A-AA90-D79283B85F8F}C:\program files (x86)\cambridgesoft\chemoffice2015\chemdraw\chemdraw.exe] => (Allow) C:\program files (x86)\cambridgesoft\chemoffice2015\chemdraw\chemdraw.exe (CambridgeSoft Corporation -> PerkinElmer)
FirewallRules: [UDP Query User{A4C1F7A7-19BF-421A-B919-60F369A0CE01}C:\program files (x86)\cambridgesoft\chemoffice2015\chemdraw\chemdraw.exe] => (Allow) C:\program files (x86)\cambridgesoft\chemoffice2015\chemdraw\chemdraw.exe (CambridgeSoft Corporation -> PerkinElmer)
FirewallRules: [{8794B050-A358-4A60-ABDE-C921E18DC1DD}] => (Allow) C:\Program Files (x86)\AirShowPcSender\AirShowPcSender.exe (AirShow) [Datei ist nicht signiert]
FirewallRules: [{75A0CF4E-A602-49E4-842F-18BBFE5DE765}] => (Allow) C:\Program Files (x86)\AirShowPcSender\AirShowPcSender.exe (AirShow) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{17B62B59-B609-40C3-A428-CF4016AB56FD}D:\fokus_biologie_7-8_materialien\win\bm-stick.exe] => (Block) D:\fokus_biologie_7-8_materialien\win\bm-stick.exe => Keine Datei
FirewallRules: [UDP Query User{B0955371-13EB-49AA-A504-980029EB01E5}D:\fokus_biologie_7-8_materialien\win\bm-stick.exe] => (Block) D:\fokus_biologie_7-8_materialien\win\bm-stick.exe => Keine Datei
FirewallRules: [TCP Query User{3F2CDF98-E800-4DA4-8A64-CDEB1ADAFEC2}\\netzlw115\birgit\dokumente\materialsl\bio\11_fokus_biologie_7-8_materialien\win\bm-stick.exe] => (Allow) \\netzlw115\birgit\dokumente\materialsl\bio\11_fokus_biologie_7-8_materialien\win\bm-stick.exe (Cornelsen Verlag -> Cornelsen Verlag GmbH)
FirewallRules: [UDP Query User{8E1A5BCC-6135-4579-B9D0-6A194B224D03}\\netzlw115\birgit\dokumente\materialsl\bio\11_fokus_biologie_7-8_materialien\win\bm-stick.exe] => (Allow) \\netzlw115\birgit\dokumente\materialsl\bio\11_fokus_biologie_7-8_materialien\win\bm-stick.exe (Cornelsen Verlag -> Cornelsen Verlag GmbH)
FirewallRules: [{5F3ABF32-92F8-48A4-B285-44A7A301158D}] => (Allow) C:\Users\Birgit\AppData\Roaming\Zoom\bin\Zoom.exe => Keine Datei
FirewallRules: [{6F3AB764-E7E5-46FD-AE06-A5C9459DEB34}] => (Allow) C:\Users\Birgit\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [{68A4B7A3-70A7-45BB-B5F4-69436404CA99}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E62715CE-C221-4161-B2F3-9E949028847E}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{04B7A2D3-EAB4-43B8-820E-F04A5B321DC0}D:\windows\unterrichtsmanager.exe] => (Allow) D:\windows\unterrichtsmanager.exe => Keine Datei
FirewallRules: [UDP Query User{7C6FCAA4-AE79-4AD9-83DE-AC625BB303F3}D:\windows\unterrichtsmanager.exe] => (Allow) D:\windows\unterrichtsmanager.exe => Keine Datei
FirewallRules: [TCP Query User{43E41D5A-99A6-4A2F-B548-DBF06A73C63A}\\netzlw115\birgit\dokumente\materialsl\ch\17b_fokus_sii_umat_stick\windows\unterrichtsmanager.exe] => (Allow) \\netzlw115\birgit\dokumente\materialsl\ch\17b_fokus_sii_umat_stick\windows\unterrichtsmanager.exe (Cornelsen Verlag GmbH) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{A7C3D5CD-742D-4A71-8EA6-DC83D8D06A99}\\netzlw115\birgit\dokumente\materialsl\ch\17b_fokus_sii_umat_stick\windows\unterrichtsmanager.exe] => (Allow) \\netzlw115\birgit\dokumente\materialsl\ch\17b_fokus_sii_umat_stick\windows\unterrichtsmanager.exe (Cornelsen Verlag GmbH) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{41EA7785-5D98-411D-9D4A-13B13B2D91FD}\\netzlw115\birgit\dokumente\materialsl\ch\17_fokus_si_umat_stick\win\bm-stick.exe] => (Allow) \\netzlw115\birgit\dokumente\materialsl\ch\17_fokus_si_umat_stick\win\bm-stick.exe (Cornelsen Verlag -> Cornelsen Verlag GmbH)
FirewallRules: [UDP Query User{5BE61B88-B3F0-441C-8F59-7DB85A2AC23A}\\netzlw115\birgit\dokumente\materialsl\ch\17_fokus_si_umat_stick\win\bm-stick.exe] => (Allow) \\netzlw115\birgit\dokumente\materialsl\ch\17_fokus_si_umat_stick\win\bm-stick.exe (Cornelsen Verlag -> Cornelsen Verlag GmbH)
FirewallRules: [{C0719F20-9DD1-4002-86FC-E7A0BD2A5153}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{A4045912-91B3-4EA2-9802-4047344D8240}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{3573CF25-5226-4269-AE10-9B0EB3E1AAFE}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)

==================== Wiederherstellungspunkte =========================

21-09-2020 16:23:42 Geplanter Prüfpunkt
28-09-2020 17:20:11 Geplanter Prüfpunkt
02-10-2020 17:11:24 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager ============

Name: Intel(R) Wireless Bluetooth(R)
Description: Intel(R) Wireless Bluetooth(R)
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Intel Corporation
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (10/07/2020 08:15:03 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4120,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/07/2020 07:25:52 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (856,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/07/2020 05:26:09 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (8148,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/07/2020 05:03:26 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (11256,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/07/2020 04:42:49 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4724,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/07/2020 04:34:14 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (5816,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/07/2020 04:18:44 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3896,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/07/2020 03:58:54 PM) (Source: CertEnroll) (EventID: 87) (User: NT-AUTORITÄT)
Description: Fehler bei der SCEP-Zertifikatregistrierung für WORKGROUP\TOSHIBA-BP$ über https://IFX-KeyId-78a409c457de6926f6df42c6114eb7e56a9b56e7.microsoftaik.azure.net/templates/Aik/scep:

SubmitDone
Submit(Request): Bad Request
{"Message":"Attestation statement cannot be verified, rejecting request. TPM firmware needs update."}
HTTP/1.1 400 Bad Request
Date: Wed, 07 Oct 2020 13:58:53 GMT
Content-Length: 101
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 16c58000-17c9-4a4f-836d-7d32c9e0932b

Methode: POST(1562ms)
Phase: SubmitDone
Ungültige Anforderung (400). 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)


Systemfehler:
=============
Error: (10/07/2020 03:57:16 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Windows-Biometriedienst konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (10/07/2020 03:56:44 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: Der Computer wurde nach einem schwerwiegenden Fehler neu gestartet. Der Fehlercode war: 0x0000010e (0x0000000000000017, 0xffffe3036b305000, 0x0000000000000000, 0xffffffffc000022d). Ein volles Abbild wurde gespeichert in: C:\WINDOWS\MEMORY.DMP. Berichts-ID: 9931d754-5f94-4e65-b0b5-36efce9d387f.

Error: (10/07/2020 03:56:28 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎07.‎10.‎2020 um 15:53:17 unerwartet heruntergefahren.

Error: (10/07/2020 03:47:03 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT-AUTORITÄT)
Description: 0xc000014d29\??\C:\Users\Birgit\ntuser.dat

Error: (10/07/2020 03:44:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Broker für Laufzeitüberwachung der Systemüberwachung" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/07/2020 03:44:14 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WerSvc" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
Zugriff verweigert


Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/07/2020 03:44:14 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WerSvc" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
Zugriff verweigert


Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/07/2020 03:43:54 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WerSvc" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
Zugriff verweigert


Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).


CodeIntegrity:
===================================

Date: 2020-10-07 19:28:39.919
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\x86\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 19:28:39.600
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\x86\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 19:28:38.993
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\x86\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 19:28:38.520
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\x86\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 19:28:38.429
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\x86\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 19:28:37.952
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\x86\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 19:28:37.207
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\x86\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 19:28:36.940
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\x86\aswhook.dll that did not meet the Microsoft signing level requirements.

==================== Speicherinformationen =========================== 

BIOS: TOSHIBA Version 4.30 04/26/2018
Hauptplatine: TOSHIBA TECRA Z50-A
Prozessor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Prozentuale Nutzung des RAM: 94%
Installierter physikalischer RAM: 4021.3 MB
Verfügbarer physikalischer RAM: 235.02 MB
Summe virtueller Speicher: 9485.62 MB
Verfügbarer virtueller Speicher: 986.05 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:433.56 GB) (Free:67.43 GB) NTFS

\\?\Volume{f77e7c9e-54e8-4126-8d4c-6d58becfdbdd}\ (Wiederherstellung) (Fixed) (Total:0.44 GB) (Free:0.42 GB) NTFS
\\?\Volume{b4539c0e-118d-4d1b-a0d9-9f438761d0e3}\ () (Fixed) (Total:0.88 GB) (Free:0.41 GB) NTFS
\\?\Volume{b9318a5b-49ab-43c5-80e4-8a73ec90304b}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 465.8 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt =======================