Windows 10 SSL Fehler bei Youtube, erst mit FF, jetzt mit allen Browserm

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 13-03-2021
durchgeführt von Uli (Administrator) auf GOLLUM (MSI MS-7971) (14-03-2021 00:01:02)
Gestartet von C:\Users\Uli\Downloads
Geladene Profile: Uli
Platform: Windows 10 Pro Version 20H2 19042.867 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

() [Datei ist nicht signiert] C:\Program Files (x86)\Datacolor\Spyder3Pro\Utility\Spyder3Utility.exe
() [Datei ist nicht signiert] C:\Program Files\Tftpd64_SE\tftpd64_svc.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(EIZO Corporation -> EIZO Corporation) C:\Program Files (x86)\EIZO\Screen InStyle\ScreenInStyle.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2cec8fd58a80e6ea\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2cec8fd58a80e6ea\IntelCpHDCPSvc.exe
(Logitech Inc -> ) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\crashpad_handler.exe
(Logitech Inc -> Logitech Europe S.A.) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\RightSightService.exe
(Logitech Inc -> Logitech) C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.3-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.3-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <9>
(Paramount Software UK Ltd -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\MacriumService.exe
(Paramount Software UK Ltd -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectMonitor.exe
(Paramount Software UK Ltd -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectUI.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9181696 2016-12-09] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [337720 2020-11-12] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [7992032 2021-03-03] (Dropbox, Inc -> Dropbox, Inc.)
HKU\S-1-5-21-4011065955-4054300690-1704090217-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKLM\...\Windows x64\Print Processors\Canon G5000 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDFH.DLL [482816 2019-02-20] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon iP7200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBA.DLL [30208 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\LMPRTPRC: C:\Windows\System32\spool\prtprocs\x64\LMPRTPRC.DLL [98816 2009-06-22] (Microsoft Windows Hardware Compatibility Publisher -> Lexmark International Inc.)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [51032 2008-04-07] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\...\Print\Monitors\Canon BJ Language Monitor G5000 series: C:\WINDOWS\system32\CNMLMFH.DLL [1309696 2019-02-20] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor iP7200 series: C:\WINDOWS\system32\CNMLMBA.DLL [389120 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [359936 2012-03-28] (CANON INC.) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\PDF-XChange: C:\Windows\system32\pxc35pm.dll [6656 2006-01-30] (Tracker Software) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\PDF-XChange V6 Printer Port Monitor (Lite): C:\WINDOWS\system32\pxcpm5L.dll [150208 2016-09-23] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
HKLM\Software\...\AppCompatFlags\Custom\iisexpress.exe: [{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb] -> IIS Express Application Compatibility Database for x64
HKLM\Software\...\AppCompatFlags\Custom\iisexpress.exe: [{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb] -> IIS Express Application Compatibility Database for x86
HKLM\Software\...\AppCompatFlags\InstalledSDB\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}: [DatabasePath] -> C:\WINDOWS\AppPatch\Custom\Custom64\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb
HKLM\Software\...\AppCompatFlags\InstalledSDB\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}: [DatabasePath] -> C:\WINDOWS\AppPatch\Custom\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\89.0.4389.90\Installer\chrmstp.exe [2021-03-13] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2020-09-26] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Screen InStyle.lnk [2020-11-13]
ShortcutTarget: Screen InStyle.lnk -> C:\Program Files (x86)\EIZO\Screen InStyle\ScreenInStyle.exe (EIZO Corporation -> EIZO Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Spyder3Utility.lnk [2013-04-12]
ShortcutTarget: Spyder3Utility.lnk -> C:\Program Files (x86)\Datacolor\Spyder3Pro\Utility\Spyder3Utility.exe () [Datei ist nicht signiert]
Startup: C:\Users\Uli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2018-02-21]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\Users\Uli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2021-01-10] ()
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {009E0CDB-D1A4-45A6-A22A-07C15805B93E} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc -> Dropbox, Inc.)
Task: {039F1E73-49F1-49DD-83A8-A82901014DA8} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {042DA8FC-8632-47A4-9E82-45696F95874F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {08CB25BD-D456-4E04-AE6E-28D42D519523} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [286088 2020-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {0C49C197-5EB9-4B26-9803-AD1890501054} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {1475E336-469E-4E31-A2D0-0AADF9F45737} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {199D14E4-6729-46D4-8890-03C83A1768D0} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {1A041727-ECA7-42AC-AAAD-61C59407D230} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [286088 2020-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {1E8EBC0C-B35C-434D-9268-6088226E7B16} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {20CBAEFF-95EE-4756-8859-6B7513AE51BB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [972176 2020-05-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {23B02383-E21B-4397-875E-05099D4263DC} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {26025389-A8B8-4EF9-B982-5B03F23C8BB8} - System32\Tasks\{F8E4E99B-A809-4708-AF0F-69733E210E31} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Common Files\Adobe\Installers\4db064343401efd6449f33f8411c14b\Setup.exe" -c --uninstall=1
Task: {2A373A6C-57E2-4570-89E9-7A525DC76E41} - System32\Tasks\{8BE541B3-5ECB-4A90-B41A-E886F55A6009} => C:\WINDOWS\system32\pcalua.exe -a D:\Temp\Fritz\AVM_FRITZ_WLAN_Repeater_450E_Assistent.exe -d D:\Temp\Fritz <==== ACHTUNG
Task: {2C132871-4339-4728-9464-C990B5491944} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {2CE186BB-3776-4E2B-B86A-56A6DF104D17} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {2D770CF5-241F-4954-8EEB-74E5E02BAAB1} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2E8925DE-B7C4-4307-B6EC-0149B7F9549A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {2EFC0FC0-494D-4BF7-9513-09E0F921E0A4} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {3918ADE3-F1AC-46BF-9AEF-9DAFE422FDB7} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {3D02283C-3B5E-4D3B-AF8B-ED6665A976DC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {3F00C4AE-4B7C-4308-9503-BE36F6355245} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe [918288 2020-04-22] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {3FB383DE-5464-4538-A86E-8D16638BCB82} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MpCmdRun.exe [566376 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3FD6D0FC-3DE7-4961-A6C0-C05C660C7ACE} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung Magician\Samsung Magician.exe [4838816 2014-09-28] (Samsung Electronics Co., Ltd. -> Samsung Electronics.)
Task: {469EC777-7461-4CBC-868E-ADF155899D15} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4D51DFE7-A9CF-4ED4-BEE8-44AFC7CE7309} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {50676566-5142-4C8B-A3E2-CAE1E198E813} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {55932370-69C4-4808-8A7E-D17D6DD18D9A} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {5A558A25-570F-4408-98F1-0E80B2684A08} - System32\Tasks\{0CA59C97-1D2B-4651-8195-5E08FE29D85E} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" -d C:\WINDOWS\System32 -c /user
Task: {5D22AB48-FC9B-4AAE-84E2-DFDF8900B75F} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {603AFF14-4316-4106-ACF0-872DA6777F70} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {615B4FE0-5D94-4974-B150-6E1B734A11E2} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {62475955-EFF4-4DB0-8D7E-034D636D3B14} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {65A4447D-10CA-4174-9EBF-3BC7F2A52E49} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {65F4D06B-B243-46DD-A154-AFAC4E232ACD} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {676BB357-1A86-4259-A9ED-BEB84AF34552} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {6C047D43-B74C-4C5E-BA2A-462E0A870FEC} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {6CF5C55D-5B76-49E3-BAD7-FEE9EA9FAC7A} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {7C58EAD6-FBC2-4FE1-AD5A-97960EDD8F46} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {7CA99596-0EA5-45B1-A14D-74DBA6CDF67B} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {7DBA277A-C864-4B01-9E2B-911F70858E10} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [694256 2021-03-13] (Mozilla Corporation -> Mozilla Foundation)
Task: {85D7C6ED-6AF9-481B-B779-B44E7981096A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {8ACE493A-F57E-423A-A624-90FA52CAE6B3} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8D620F71-FB18-4C38-AB59-5E788E592971} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {93531DEA-DACF-44B0-A6ED-CC464BBE59A2} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {946262B8-2FC7-449F-B634-EDBE223CB139} - System32\Tasks\{7BD25104-B7FD-4F60-AFB3-B2A1879A4003} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Microsoft Games\Combat Flight Simulator 3\cfs3.exe" -d "C:\Program Files (x86)\Microsoft Games\Combat Flight Simulator 3" -c -intro
Task: {9C5ECAF7-DF4F-4799-9FF2-BFA2A4817089} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {9E26F70A-36AD-41F9-AA1C-BAC3FBA983D5} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [972176 2020-05-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {A04C08BD-A3EE-4BE6-BB79-805813098CDE} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A0E3D2E4-7D4F-4D0B-A055-44E67FC05452} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {A1FCEE95-C7FE-4558-AEEA-10C675C6BDFA} - System32\Tasks\Macrium-Backup-{541E1E74-B558-4CCE-8711-DA78174D2334} => C:\program files\macrium\reflect\Reflect.exe [1295664 2018-11-29] (Paramount Software UK Ltd -> Paramount Software UK Ltd) -> -e -w "C:\Users\Uli\Documents\Reflect\My Backup.xml" -full -g {541E1E74-B558-4CCE-8711-DA78174D2334}
Task: {A2872E6D-7A96-466C-8081-E8B424A143C7} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A97BAE7F-E0B0-4967-BFFA-DF836D64DC1E} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {B7B6D1BF-0E14-456D-8BC8-5CD23ED6BA42} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc -> Dropbox, Inc.)
Task: {B8E89AFE-FEBA-4E91-B89B-FDDBD15C5B0A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MpCmdRun.exe [566376 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BBF0D108-5F9E-4EE4-B7B0-2BC03FEA3A6E} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {BC370F97-16D0-4F06-B125-AA6AE96C8D92} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {C4570153-7282-4516-9B0E-9F9AB8BE8E4F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {C5FF38E4-6C6D-486D-9A01-4530CAF4F93A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {CA69083D-9240-415B-A0BA-5CAFBF082553} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MpCmdRun.exe [566376 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CBC8A91D-3EDE-42CA-914E-D48A8EF71816} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {CBDA4BB9-C1BF-4498-A21F-B546DFC88BEC} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {CF8AE421-01C1-4225-A618-1E466D17B434} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {EEF095B8-46A5-4D0E-888F-EB18CF63E4F9} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {F2A230A1-06A8-4D19-9A5C-E1C9B110B448} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {F71C172D-2483-47ED-B571-9831FA235B82} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [862 2019-04-30] () [Datei ist nicht signiert]
Task: {F85688A1-208B-4779-8D5B-4643D8AAB236} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MpCmdRun.exe [566376 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{23cade95-283f-42e9-b5ab-4194b2e4a3fc}: [NameServer] 192.168.178.1
Tcpip\..\Interfaces\{23cade95-283f-42e9-b5ab-4194b2e4a3fc}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{ad98a4b6-6cee-44ac-8af0-3fa23a30222a}: [DhcpNameServer] 0.0.0.0
Tcpip\..\Interfaces\{be5bef8b-eabc-4532-8dc8-710f14bd0bc2}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{e88f31f0-b487-4168-87cc-5212fa30b712}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{eb26b97b-77b1-4ae2-988c-9a52c51a0a89}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{feaeac50-21ac-44a9-83ab-e2e6d6d87c15}: [DhcpNameServer] 0.0.0.0

Edge: 
=======
Edge DefaultProfile: Profile 1
Edge Profile: C:\Users\Uli\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2021-03-13]
Edge StartupUrls: Profile 1 -> "about:blank"

FireFox:
========
FF DefaultProfile: h861jesy.default-1614118649321
FF ProfilePath: C:\Users\Uli\AppData\Roaming\TomTom\HOME\Profiles\0ou6drem.default [2013-10-01]
FF Extension: (Emulator) - C:\Users\Uli\AppData\Roaming\TomTom\HOME\Profiles\0ou6drem.default\Extensions\Navcore.7.903.9183@tomtom.com [2013-10-01] [] [ist nicht signiert]
FF Extension: (Kein Name) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [nicht gefunden]
FF ProfilePath: C:\Users\Uli\AppData\Roaming\Mozilla\Firefox\Profiles\0ympyetb.default-release-1615121638629 [2021-03-14]
FF ProfilePath: C:\Users\Uli\AppData\Roaming\Mozilla\Firefox\Profiles\h861jesy.default-1614118649321 [2021-02-23]
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-07-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> E:\Program Files\Java\jre1.8\bin\dtplugin\npDeployJava1.dll [Keine Datei]
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> E:\Program Files\Java\jre1.8\bin\plugin2\npjp2.dll [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2016-09-23] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-07-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2018-04-24] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-07-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2018-11-02] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2018-11-02] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corporation -> Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2016-09-23] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-07-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-03-06] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2018-04-24] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin HKU\S-1-5-21-4011065955-4054300690-1704090217-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-07-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-4011065955-4054300690-1704090217-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\Uli\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2020-04-17] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FF Plugin HKU\S-1-5-21-4011065955-4054300690-1704090217-1001: LWA64Plugin15.8 -> C:\Users\Uli\AppData\Roaming\Mozilla\Plugins\npLWAPlugin15.8.dll [2013-03-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-4011065955-4054300690-1704090217-1001: LWAPlugin15.8 -> C:\Users\Uli\AppData\Roaming\Mozilla\Plugins\npLWAPlugin15.8.dll [2013-03-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-4011065955-4054300690-1704090217-1001: SkypeForBusinessPlugin-16.2 -> C:\Users\Uli\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.232\npGatewayNpapi.dll [2017-11-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-4011065955-4054300690-1704090217-1001: SkypeForBusinessPlugin64-16.2 -> C:\Users\Uli\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.232\npGatewayNpapi-x64.dll [2017-11-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Users\Uli\AppData\Roaming\mozilla\plugins\npatgpc.dll [2017-12-15]
FF Plugin ProgramFiles/Appdata: C:\Users\Uli\AppData\Roaming\mozilla\plugins\npLWA64Plugin15.8.dll [2017-12-15]
FF Plugin ProgramFiles/Appdata: C:\Users\Uli\AppData\Roaming\mozilla\plugins\npLWAPlugin15.8.dll [2017-12-15]

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Uli\AppData\Local\Google\Chrome\User Data\Default [2021-03-13]
CHR Notifications: Default -> hxxp://book.lufthansa.com; hxxps://www.holidaycheck.de
CHR Extension: (Google Drive) - C:\Users\Uli\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22]
CHR Extension: (Web Developer) - C:\Users\Uli\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm [2020-01-13]
CHR Extension: (YouTube) - C:\Users\Uli\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Google-Suche) - C:\Users\Uli\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-13]
CHR Extension: (TweetDeck by Twitter) - C:\Users\Uli\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl [2015-08-01]
CHR Extension: (µTorrent Remote) - C:\Users\Uli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jddfmceehemldgjnljmpihlfndejndea [2014-12-30]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Uli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Google Mail) - C:\Users\Uli\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-27]
CHR Extension: (Chrome Media Router) - C:\Users\Uli\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-11]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818128 2018-04-24] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
S4 apmwinsrv; C:\Program Files (x86)\Paragon Software\HFS+ for Windows\apmwinsrv.exe [2225384 2020-04-07] (Paragon Software GmbH -> Paragon Software)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-09-24] (Apple Inc. -> Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3051928 2020-05-12] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44272 2021-03-03] (Dropbox, Inc -> Dropbox, Inc.)
S4 DialogBlockingService; C:\WINDOWS\System32\DialogBlockingService.dll [76288 2021-03-11] (Microsoft Windows -> Microsoft Corporation)
S4 DVBVRecorder; C:\Program Files (x86)\DVBViewer\DVBVservice.exe [856704 2015-07-10] (CM & V) [Datei ist nicht signiert]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [443344 2020-05-25] (Canon Inc. -> )
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21304 2017-09-28] (Microsoft Corporation -> Microsoft Corporation)
R2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [5452688 2018-11-29] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-03-13] (Malwarebytes Inc -> Malwarebytes)
R2 nebula; C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe [4489352 2019-06-12] (Logitech Inc -> Logitech)
S4 OracleJobSchedulerXE; d:\oraexpress\app\oracle\product\11.2.0\server\Bin\extjob.exe [45568 2014-05-29] () [Datei ist nicht signiert]
S4 OracleMTSRecoveryService; D:\oraexpress\app\oracle\product\11.2.0\server\BIN\omtsreco.exe [81408 2014-05-29] (Oracle Corporation) [Datei ist nicht signiert]
S4 OracleServiceXE; d:\oraexpress\app\oracle\product\11.2.0\server\bin\ORACLE.EXE [147110912 2014-05-30] (Oracle Corporation) [Datei ist nicht signiert]
S4 OracleXEClrAgent; D:\oraexpress\app\oracle\product\11.2.0\server\bin\OraClrAgnt.exe [83968 2014-05-29] (Oracle Corporation) [Datei ist nicht signiert]
S4 OracleXETNSListener; D:\oraexpress\app\oracle\product\11.2.0\server\BIN\tnslsnr.exe [522240 2014-05-29] (Oracle Corporation) [Datei ist nicht signiert]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5352528 2021-03-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [187904 2017-09-28] (Microsoft Corporation) [Datei ist nicht signiert]
R2 Tftpd32_svc; C:\Program Files\Tftpd64_SE\tftpd64_svc.exe [200704 2017-01-28] () [Datei ist nicht signiert]
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [142440 2017-12-14] (Microsoft Corporation -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\NisSrv.exe [2483624 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MsMpEng.exe [128392 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R3 avmaura; C:\WINDOWS\System32\drivers\avmaura.sys [116480 2015-01-26] (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 causbaudio; C:\WINDOWS\System32\drivers\causbaudio.sys [352368 2018-02-05] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 causbaudioks; C:\WINDOWS\System32\drivers\causbaudioks.sys [53360 2018-02-05] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 CLAVIAUSB64; C:\WINDOWS\System32\drivers\ClaviaUSB64.sys [26496 2015-08-07] (Microsoft Windows Hardware Compatibility Publisher -> Clavia DMI AB)
S3 dlcdcncm; C:\WINDOWS\System32\drivers\dlcdcncm62_x64.sys [92880 2017-12-06] (DISPLAYLINK -> DisplayLink Corp.)
S3 dlusbaudio; C:\WINDOWS\system32\DRIVERS\dlusbaudio_x64.sys [238312 2017-12-06] (DISPLAYLINK -> DisplayLink Corp.)
S3 GigasetGenericUSB_x64; C:\WINDOWS\system32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2017-03-07] (Siemens AG -> Siemens Home and Office Communication Devices GmbH & Co. KG)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220616 2021-03-13] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-03-13] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-03-13] (Malwarebytes Inc -> Malwarebytes)
R3 MpKsld87ede03; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{68B70FD3-4525-4523-BF2B-F6A868D1C8CB}\MpKslDrv.sys [90360 2021-03-13] (Microsoft Windows -> Microsoft Corporation)
S3 NDMSHLP; C:\Program Files (x86)\Common Files\HHD Software\Device Monitor\ndmshlp.sys [7632 2005-05-24] (HHD Software) [Datei ist nicht signiert]
S3 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [81680 2020-05-02] (Insecure.Com LLC -> Insecure.Com LLC.)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [36600 2014-08-19] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] (MiniTool Solution Ltd -> )
S3 RimUsb; C:\WINDOWS\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Research In Motion Limited)
S3 RTL2832UBDA; C:\Windows\SysWOW64\drivers\RTL2832UBDA.sys [237968 2012-08-03] (Realtek Semiconductor Corp -> REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832UUSB; C:\Windows\SysWOW64\Drivers\RTL2832UUSB.sys [39056 2012-08-03] (Realtek Semiconductor Corp -> REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832U_IRHID; C:\Windows\SysWOW64\drivers\RTL2832U_IRHID.sys [50320 2012-11-23] (Realtek Semiconductor Corp -> Realtek)
R2 speedfan; C:\WINDOWS\SysWoW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 Spyder3; C:\WINDOWS\System32\drivers\Spyder3.sys [15360 2010-03-30] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R3 USBPcap; C:\WINDOWS\system32\DRIVERS\USBPcap.sys [58160 2019-04-01] (Tomasz Moń -> USBPcap)
S3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [199808 2017-10-18] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [210680 2017-10-18] (Oracle Corporation -> Oracle Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49544 2021-03-06] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [420088 2021-03-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72952 2021-03-06] (Microsoft Windows -> Microsoft Corporation)
S3 dg_ssudbus; \SystemRoot\system32\DRIVERS\ssudbus.sys [X]
S3 ssudmdm; \SystemRoot\system32\DRIVERS\ssudmdm.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-03-13 19:37 - 2021-03-13 19:37 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-03-13 19:37 - 2021-03-13 19:37 - 000220616 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2021-03-13 19:37 - 2021-03-13 19:37 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-03-13 19:37 - 2021-03-13 19:37 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-03-13 19:37 - 2021-03-13 19:37 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-03-13 19:37 - 2021-03-13 19:37 - 000002021 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2021-03-13 19:36 - 2021-03-13 19:36 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-03-13 19:05 - 2021-03-13 19:37 - 000002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-03-13 19:05 - 2021-03-13 19:37 - 000002198 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2021-03-13 15:10 - 2021-03-13 19:37 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-03-11 10:22 - 2021-03-11 10:22 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-03-11 10:22 - 2021-03-11 10:22 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-03-11 10:22 - 2021-03-11 10:22 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-03-11 10:22 - 2021-03-11 10:22 - 001394024 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-03-11 10:22 - 2021-03-11 10:22 - 001328400 _____ C:\WINDOWS\system32\FaceTrackerInternal.dll
2021-03-11 10:22 - 2021-03-11 10:22 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-03-11 10:22 - 2021-03-11 10:22 - 001282560 _____ C:\WINDOWS\system32\FaceProcessor.dll
2021-03-11 10:22 - 2021-03-11 10:22 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-03-11 10:22 - 2021-03-11 10:22 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-03-11 10:22 - 2021-03-11 10:22 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-11 10:22 - 2021-03-11 10:22 - 000512864 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2021-03-11 10:22 - 2021-03-11 10:22 - 000480256 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2021-03-11 10:22 - 2021-03-11 10:22 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-03-11 10:22 - 2021-03-11 10:22 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-11 10:22 - 2021-03-11 10:22 - 000011359 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-03-07 11:37 - 2021-03-13 19:36 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-03-07 11:37 - 2021-03-07 11:37 - 000000993 _____ C:\ProgramData\Desktop\Firefox.lnk
2021-03-03 20:20 - 2021-03-03 20:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2021-03-03 04:12 - 2021-03-03 04:12 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2021-03-03 04:12 - 2021-03-03 04:12 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2021-03-03 04:12 - 2021-03-03 04:12 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2021-03-03 04:12 - 2021-03-03 04:12 - 000044272 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2021-02-23 23:42 - 2021-02-23 23:42 - 000001107 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe DNG Converter.lnk


==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-03-13 23:54 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-03-13 23:46 - 2013-04-08 15:00 - 000000000 ____D C:\ProgramData\Mozilla
2021-03-13 23:45 - 2016-11-18 08:13 - 000000000 ____D C:\Users\Uli\AppData\LocalLow\Mozilla
2021-03-13 23:42 - 2020-09-26 00:21 - 001835128 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-03-13 23:42 - 2019-12-07 15:51 - 000785800 _____ C:\WINDOWS\system32\perfh007.dat
2021-03-13 23:42 - 2019-12-07 15:51 - 000167914 _____ C:\WINDOWS\system32\perfc007.dat
2021-03-13 23:40 - 2015-03-23 13:03 - 000000000 ____D C:\Users\Uli\AppData\Local\CrashDumps
2021-03-13 23:38 - 2020-11-13 22:40 - 000002136 _____ C:\Users\Uli\Desktop\Monitor Power OFF.lnk
2021-03-13 23:38 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-03-13 23:38 - 2016-12-17 03:58 - 000000000 __SHD C:\Users\Uli\IntelGraphicsProfiles
2021-03-13 23:37 - 2020-09-26 00:18 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-03-13 23:37 - 2020-09-26 00:11 - 000008192 ___SH C:\DumpStack.log.tmp
2021-03-13 23:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-03-13 23:37 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-03-13 23:37 - 2016-12-17 03:58 - 000000000 ____D C:\Intel
2021-03-13 23:36 - 2015-09-28 10:03 - 000002924 __RSH C:\ProgramData\ntuser.pol
2021-03-13 22:38 - 2014-11-08 18:06 - 000000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2021-03-13 22:25 - 2013-04-16 07:35 - 000000000 ____D C:\Users\Uli\AppData\Local\Downloaded Installations
2021-03-13 21:56 - 2020-09-26 00:11 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-03-13 19:37 - 2020-02-13 23:15 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-13 19:37 - 2020-02-13 23:15 - 000002274 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2021-03-13 19:37 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-03-13 19:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-03-13 19:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-03-13 19:37 - 2013-05-30 12:36 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-03-13 19:37 - 2013-04-08 15:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-03-13 19:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-03-13 19:10 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-03-13 19:05 - 2013-04-23 08:08 - 000000000 ____D C:\Program Files\Google
2021-03-13 19:03 - 2013-04-17 18:19 - 000000000 ____D C:\Program Files (x86)\Google
2021-03-13 04:41 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-03-13 04:31 - 2020-09-26 00:11 - 003097960 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-03-13 04:31 - 2017-12-08 21:26 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2021-03-13 04:30 - 2019-12-07 15:54 - 000000000 ___SD C:\WINDOWS\system32\AppV
2021-03-13 04:30 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-03-13 04:30 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-03-13 04:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-03-13 04:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-03-13 04:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-03-13 04:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-03-13 04:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-03-13 04:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-03-13 04:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-03-13 04:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-03-13 04:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-03-13 04:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-03-13 04:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-03-12 07:55 - 2013-04-11 16:22 - 000002229 _____ C:\Users\Uli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2021-03-12 07:55 - 2013-04-11 16:22 - 000001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2021-03-11 10:22 - 2012-07-26 09:18 - 000413702 __RSH C:\bootmgr
2021-03-10 23:17 - 2018-11-02 18:01 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-03-10 11:42 - 2013-07-28 08:57 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-03-10 11:37 - 2013-04-08 15:15 - 131005360 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-03-09 00:04 - 2014-06-13 09:44 - 000000000 ____D C:\Users\Uli\AppData\Local\Spotify
2021-03-08 23:34 - 2014-06-13 09:43 - 000000000 ____D C:\Users\Uli\AppData\Roaming\Spotify
2021-03-07 16:07 - 2017-10-30 19:31 - 000000000 ____D C:\Users\Uli\AppData\Local\Packages
2021-03-07 13:55 - 2020-11-19 22:02 - 000000000 ____D C:\ProgramData\CanonIJPLM
2021-03-06 10:20 - 2018-03-01 10:40 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-03-05 18:54 - 2020-09-26 00:18 - 000003522 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2021-03-05 02:55 - 2020-09-26 00:18 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-05 02:55 - 2020-09-26 00:18 - 000003576 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-03-03 20:20 - 2015-10-21 20:08 - 000000000 ____D C:\Program Files (x86)\Dropbox
2021-02-28 18:39 - 2013-05-07 10:22 - 000000000 ____D C:\Temp
2021-02-22 19:58 - 2020-01-05 01:06 - 000040003 _____ C:\Users\Uli\AppData\Local\digikamrc
2021-02-22 08:59 - 2020-10-08 23:26 - 000000000 ____D C:\Users\Uli\AppData\Local\Deployment
2021-02-12 14:14 - 2021-01-22 03:07 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2013-04-16 07:35 - 2017-12-26 22:56 - 000000268 ___RH () C:\Users\Uli\AppData\Roaming\Guitar
2013-04-16 07:35 - 2017-12-26 22:56 - 000000268 ___RH () C:\Users\Uli\AppData\Roaming\HAL
2014-05-11 12:20 - 2014-05-11 12:20 - 000000268 ___RH () C:\Users\Uli\AppData\Roaming\Help
2013-04-16 07:35 - 2017-12-26 22:55 - 000000000 _____ () C:\Users\Uli\AppData\Roaming\Hybrid Morph
2016-10-07 23:53 - 2016-10-07 23:57 - 000002990 _____ () C:\Users\Uli\AppData\Roaming\ZeroBraneStudio.ini
2013-04-13 21:23 - 2020-09-04 11:59 - 000036352 _____ () C:\Users\Uli\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2020-01-05 01:06 - 2021-02-22 19:58 - 000040003 _____ () C:\Users\Uli\AppData\Local\digikamrc
2018-09-28 13:03 - 2018-09-28 13:03 - 000000000 _____ () C:\Users\Uli\AppData\Local\oobelibMkey.log
2017-11-17 17:20 - 2020-05-06 20:38 - 000000600 _____ () C:\Users\Uli\AppData\Local\PUTTY.RND
2019-12-29 13:00 - 2019-12-29 13:00 - 000001205 _____ () C:\Users\Uli\AppData\Local\recently-used.xbel
2014-04-11 16:07 - 2018-03-29 20:26 - 000007603 _____ () C:\Users\Uli\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================