Trojaner-Board - Icon updatepush.com auf dem Desktop

FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 13-03-2021

durchgeführt von user (Administrator) auf USER-PC (Hewlett-Packard HP EliteBook 8570w) (14-03-2021 09:55:17)

Gestartet von C:\Users\user\Desktop

Geladene Profile: user

Platform: Windows 10 Pro Version 1909 18363.1379 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: FF

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(AOMEI International Network Limited -> AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI\AOMEI Backupper 5.9.0\ABService.exe

(Cambridge Silicon Radio Ltd. -> ) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe

(Digital Wave Ltd -> Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe

(Ericsson AB -> Ericsson AB) C:\Program Files (x86)\Ericsson\Mobile Broadband Drivers\WMCore\mini_WMCore.exe

(geek software GmbH -> geek software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe <2>

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hp\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hp\StatusAlerts\bin\HPStatusAlerts.exe

(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe

(HP) [Datei ist nicht signiert] C:\Program Files (x86)\Hp\HPLaserJetService\HPLaserJetService.exe

(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe

(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(Intel(R) Corporation) [Datei ist nicht signiert] C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe

(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

(NortonLifeLock Inc. -> NortonLifeLock Inc.) C:\Program Files\Norton Security\Engine\22.21.1.151\nsWscSvc.exe

(NortonLifeLock Inc. -> Symantec Corporation) C:\Program Files\Norton Security\Engine\22.21.1.151\NortonSecurity.exe <2>

(NVIDIA Corporation -> ) C:\Program Files\NVIDIA Corporation\nview\nviewMain.exe

(NVIDIA Corporation -> ) C:\Program Files\NVIDIA Corporation\nview\nviewMain64.exe <2>

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>

(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvwmi64.exe <2>

(Open Source Developer, Robin Krom -> Greenshot) C:\Program Files\Greenshot\Greenshot.exe

(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Renesas Electronics Corporation -> Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Symantec Corporation -> Symantec Corporation) C:\Program Files\Norton Utilities Premium\x64\LBGovernor.exe

(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Validity Sensors, Inc -> Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe

(VMware, Inc. -> ) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe

(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe

(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [HP LaserJet 200 color MFP M276 Series Fax] => C:\Program Files (x86)\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe [3706424 2011-10-09] (Hewlett-Packard Company -> Hewlett-Packard Company)

HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [527792 2017-08-09] (Open Source Developer, Robin Krom -> Greenshot)

HKLM\...\Run: [CsrHCRPServer] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe [1134288 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\...\Run: [CsrAudioguiCtrl] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe [511696 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\...\Run: [CsrSyncMLServer] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe [244944 2012-03-22] (Cambridge Silicon Radio Ltd. -> )

HKLM\...\Run: [vksts] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe [25792 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\...\Run: [HarmonyUserStartup] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe [39128 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\...\Run: [CSRHarmonySkypePlugin] => C:\Program Files (x86)\CSR\CSR Harmony Wireless Software Stack\CSRHarmonySkypePlugin.exe [146656 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\...\Run: [TrayApplication] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe [529616 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM-x32\...\Run: [NUSB3MON] => c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation -> Renesas Electronics Corporation)

HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2015-12-01] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation)

HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [336672 2014-05-16] (Hewlett-Packard Company -> Hewlett-Packard Company)

HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2015-10-13] (Intel Corporation -> Intel Corporation)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard Company -> Hewlett-Packard)

HKLM-x32\...\Run: [StatusAlerts] => C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [313248 2012-07-18] (Hewlett-Packard Company -> Hewlett-Packard Company)

HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [104128 2015-11-25] (VMware, Inc. -> VMware, Inc.)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32726088 2021-03-05] (Piriform Software Ltd -> Piriform Software Ltd)

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91591032 2020-04-14] (Skype Software Sarl -> Skype Technologies S.A.)

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\...\Run: [8042DBCBE0CC6F7D1E5DCD3935C9DB5EDE0B7F0B._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [568320 2021-01-21] (Microsoft Windows -> Microsoft Corporation)

HKU\S-1-5-21-2636535521-2909126409-823621586-501\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [152576 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

HKLM\...\Windows x64\Print Processors\hpcpp117: C:\Windows\System32\spool\prtprocs\x64\hpcpp117.DLL [467456 2013-03-21] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)

HKLM\...\Print\Monitors\HCR Client Port Monitor: C:\WINDOWS\SYSTEM32\csrportmon.dll [73416 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\...\Print\Monitors\HP Fax Port: C:\WINDOWS\SYSTEM32\hppfaxprintermon5.dll [27704 2011-10-09] (Hewlett-Packard Company -> Hewlett-Packard Company)

HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\WINDOWS\SYSTEM32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [Datei ist nicht signiert]

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.82\Installer\chrmstp.exe [2021-03-11] (Google LLC -> Google LLC)

HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> 

HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\WIDCOMM\Bluetooth Software\\BtwCP.dll [2014-03-06] (Broadcom Corporation -> Broadcom Corporation.)

HKLM\Software\...\Authentication\Credential Providers: [{5355DA8C-FE32-49b4-A567-A67535C86592}] -> C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BLEtokenCredentialProvider.dll [2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\Software\...\Authentication\Credential Providers: [{D28973E5-8630-41af-8831-50A15FEB396B}] -> 

Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {05544512-9E59-4575-A4C8-87C969395F66} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {05C49AC7-531B-4E3E-ACA8-95A378B85C56} - System32\Tasks\Norton 360\Norton 360 Error Analyzer => C:\Program Files\Norton Security\Engine\22.21.1.151\SymErr.exe [115608 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc)

Task: {05E076DE-7BD3-4BDC-B95F-55A5622797D3} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {06965CFE-FDC2-4D1F-B761-B53B31F00365} - System32\Tasks\Norton 360 Premier\Norton 360 Premier Error Processor => C:\Program Files\Norton Security\Engine\22.16.2.22\SymErr.exe

Task: {08978EA9-CCA4-4A54-8FA5-D4FF3971FD33} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {0A294A2A-32AA-46B3-8FEA-09A684BF4D46} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {1008FD9B-42A1-447B-AFD0-B26C3090D3FB} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Security\Engine\22.21.1.151\WSCStub.exe [643544 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

Task: {10171100-89B4-44D6-866F-19D10ECAFC02} - \Microsoft\Windows\Setup\EOSNotify2 -> Keine Datei <==== ACHTUNG

Task: {154CE1C5-2861-48D0-9239-500AAFCDE957} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {19DD36A0-BF7C-4633-A072-BAB2324200E5} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}

Task: {1B4F8E66-6AE8-410F-BEF5-0F511E431C9E} - System32\Tasks\AutomaticCare => C:\Program Files\Norton Utilities Premium\nup.exe [618152 2020-06-28] (Symantec Corporation -> Symantec Corporation)

Task: {2BACB666-BDC1-4EF0-BB3D-9FB847C822D7} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe

Task: {31C6A140-6CFF-433B-900F-EEF8C05A0633} - System32\Tasks\HPCeeScheduleForuser => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [97848 2016-01-22] (Hewlett-Packard Company -> Hewlett-Packard)

Task: {3319886A-ADBA-4D37-B68F-31ECA7A3054B} - System32\Tasks\Microsoft\Windows\End Of Support\Notify2 => C:\WINDOWS\system32\sipnotify.exe

Task: {345935BB-EE8E-4524-A704-0381C1879C10} - System32\Tasks\{040F56A4-A09C-4078-965C-3468BC0AA3B2} => C:\Windows\system32\pcalua.exe -a "C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JE5XIBXH\sp61429[1].exe" -d C:\Users\user\Desktop

Task: {3A3CF658-8AC6-4E67-9F61-433149FD08AA} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {3A6341E0-CF07-46B2-A9DC-5B5C03BE991F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [457272 2016-02-18] (Hewlett-Packard Company -> Hewlett-Packard Company)

Task: {3D95295A-DD1E-4694-BF43-26D096D37DDF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)

Task: {3E6D668C-E384-4CD1-B81F-9A42E0CEF1BF} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe

Task: {3EFD74D2-C364-4E91-ADF8-BAB90A5096D1} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe

Task: {47269525-3DC6-45AB-8896-DB27F0C4F492} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}

Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47c2-B62A-B7C4CED925CB}

Task: {4D7825AC-F1DA-4789-827B-C7688E6A1316} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [457272 2016-02-18] (Hewlett-Packard Company -> Hewlett-Packard Company)

Task: {4F121554-4790-4125-8E63-891B4DB0DA9E} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {55E9ECCE-CDCD-4CEE-B950-AF89E29C1815} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [694752 2021-02-26] (Mozilla Corporation -> Mozilla Foundation)

Task: {59AB6E47-773E-4B10-BAF7-203B0BC0517A} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {5A1CC2FC-79EE-4A4C-B7B8-A8DFAC93D72D} - System32\Tasks\nWizard_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2104760 2017-10-20] (NVIDIA Corporation -> )

Task: {5A83F260-612C-4B09-B72D-A29ABBD99640} - System32\Tasks\{71995872-6FE3-4985-814D-9568EC05913E} => C:\Windows\system32\pcalua.exe -a C:\Users\user\Downloads\sp69072.exe -d C:\Users\user\Downloads

Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}

Task: {5BF74145-90D1-43CA-8811-9A706C7F3B7F} - System32\Tasks\ActiveSync-NortonUtility => C:\Program Files\Norton Utilities Premium\activesync.exe [245928 2020-06-28] (Symantec Corporation -> Symantec Corporation)

Task: {5CD0A8E7-8C0D-454D-8D54-A035D0C05629} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-03-05] (Piriform Software Ltd -> Piriform)

Task: {61BB4AE4-7D0B-428E-931F-E719A650630A} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}

Task: {61C6905B-34A6-461D-AF2E-2DC454A8A9E2} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe

Task: {647329C2-5F73-4B10-8C6A-EC4CD4683F42} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23965992 2018-11-03] (Microsoft Corporation -> Microsoft Corporation)

Task: {6858A292-A730-42F0-B4BE-EA112FEA0674} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-12-26] (Google Inc -> Google Inc.)

Task: {6E118A1E-1729-475A-8119-5BFAC775698D} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton 360\Upgrade.exe [2344568 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

Task: {78DB798B-E897-474A-9E11-3F90790F5D37} - System32\Tasks\Live Boost Process Governor => C:\Program Files\Norton Utilities Premium\x64\LBgovernor.exe [1061544 2020-06-28] (Symantec Corporation -> Symantec Corporation)

Task: {79541ADF-1A72-4E14-B53B-C4BD4E5B65D2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [191064 2016-02-17] (Hewlett-Packard Company -> Hewlett-Packard)

Task: {82A986A1-6710-43D6-B320-FFDF6BAACEBF} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {8783DB72-D09A-4BE9-8ADF-D8554EF5F083} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {87EF3913-71E6-4D7D-996E-2921F954E645} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {8F534BEC-05BA-46CA-8039-18C1AF470E9B} - System32\Tasks\Norton 360\Norton 360 Error Processor => C:\Program Files\Norton Security\Engine\22.21.1.151\SymErr.exe [115608 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc)

Task: {9B6FD2BB-95BF-4B0B-9731-51ACD5B1C14B} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {9C6E7B47-77D3-48AC-96DA-478EB1EC6BE1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23965992 2018-11-03] (Microsoft Corporation -> Microsoft Corporation)

Task: {A4DA0A33-53B9-4EDC-8F6F-DE49108917DE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [88304 2016-02-18] (Hewlett-Packard Company -> Hewlett-Packard)

Task: {A7032469-EE9E-4E52-BE94-D9AEEE74FCEC} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {A7329DC2-8C98-4915-9278-B8BBE88B5FF0} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {A90DF7B9-21F8-441E-8660-85175B190F02} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {AFDAC582-9CE0-4CAB-8C8A-7A15266B528A} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}

Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40b4-8963-D3C761B18371}

Task: {B4309C7B-6366-4ADB-BA74-49C440DEDB2C} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {B4A0033B-B427-4318-BEE9-AB58AAD37F4E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27168840 2021-03-05] (Piriform Software Ltd -> Piriform Software Ltd)

Task: {B9E00FC8-9DCA-44C1-B465-02AEF35A985C} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {BDF6A506-2A61-4021-BBDA-9E02078068BC} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}

Task: {BFA158B0-526E-4198-BF94-715AF779DAED} - System32\Tasks\{E0D4DAB0-84DC-4D64-95DD-DBB5159AF7AF} => C:\Windows\system32\pcalua.exe -a C:\Users\user\Downloads\sp61430.exe -d C:\Users\user\Downloads

Task: {C0D0F622-8498-4D07-8238-FC95EABEE0BB} - System32\Tasks\Microsoft\Windows\End Of Support\Notify1 => C:\WINDOWS\system32\sipnotify.exe

Task: {CDD1B6BE-034C-4973-95F8-F5F060F1AE35} - System32\Tasks\Norton 360 Premier\Norton 360 Premier Error Analyzer => C:\Program Files\Norton Security\Engine\22.16.2.22\SymErr.exe

Task: {DB510AB0-4E38-4D85-9EA1-0B9E114F3EA0} - System32\Tasks\Norton 360\Norton 360 Autofix => C:\Program Files\Norton Security\Engine\22.21.1.151\SymErr.exe [115608 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc)

Task: {E7CFB0B0-6116-42D4-9E33-A2979F25AF0E} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe

Task: {E811DC46-661E-4305-BD12-5FBAADB9C220} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)

Task: {ECFFCA3B-5219-4EDC-BC6E-6118B39710B0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {F5F54F0F-379B-41B6-8609-6F9E1EED6693} - \Microsoft\Windows\Setup\EOSNotify -> Keine Datei <==== ACHTUNG

Task: {F9C4123E-E9AB-4B45-B250-40DB47D5453C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-12-26] (Google Inc -> Google Inc.)

Task: {FD6334E4-DC89-43B9-BBF6-36D509D7C436} - System32\Tasks\TUDsDownloader => C:\Program Files\Norton Utilities Premium\activesync.exe [245928 2020-06-28] (Symantec Corporation -> Symantec Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\HPCeeScheduleForuser.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: 127.0.0.1       BMUC440308.europe.bmw.corp # LMS GENERATED LINE

Tcpip\..\Interfaces\{0E39E1E8-2B73-46B3-94DB-06C0392A3EC9}: [DhcpNameServer] 172.16.1.1

Tcpip\..\Interfaces\{26C9143D-B67A-4073-BB5B-7867EEF32D06}: [DhcpNameServer] 172.16.1.1

Tcpip\..\Interfaces\{4C0A3F67-8F43-4952-ACE2-CB9430133B58}: [DhcpNameServer] 172.16.1.1

Tcpip\..\Interfaces\{5E3ADCA4-1048-4475-8A01-CA85BEA714E5}: [DhcpNameServer] 172.16.1.1

Tcpip\..\Interfaces\{6581661C-0625-4FAB-A8A9-470FE18FF3AB}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{756249F5-6681-4D19-9DD4-D027B79D05B9}: [DhcpNameServer] 172.16.1.1

Tcpip\..\Interfaces\{A66331CA-914C-4D27-8339-8C7C59527423}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{B08DB118-1104-45B8-A231-44A863FC2B52}: [DhcpNameServer] 172.16.1.1

Tcpip\..\Interfaces\{E1669D0B-B0C1-4106-A848-D5E2ADF8FF1E}: [DhcpNameServer] 172.16.1.1
 

Edge: 

=======

Edge Profile: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default [2021-03-14]
 

FireFox:

========

FF DefaultProfile: 0xj4nb1f.default

FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\0xj4nb1f.default [2021-03-14]

FF Extension: (Norton Safe Search) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\0xj4nb1f.default\Extensions\nortonsafesearch_ul_2@symantec.com.xpi [2020-10-25] [UpdateUrl:hxxps://static.nortoncdn.com/idscp/firefox/nsss/ds_modified/updates.json]

FF Extension: (Norton Safe Web) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\0xj4nb1f.default\Extensions\nortonsafeweb@symantec.com.xpi [2021-03-05]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-12-01] (Internal - Intel® Identity Protection Technology Software -> Intel Corporation) [Datei ist nicht signiert]

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-12-01] (Internal - Intel® Identity Protection Technology Software -> Intel Corporation) [Datei ist nicht signiert]

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.12 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-03-06] (Adobe Inc. -> Adobe Systems Inc.)
 

Chrome: 

=======

CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default [2021-03-14]

CHR StartupUrls: Default -> "hxxp://www.google.com"

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-05-05]

CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-05]

CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security\Engine\22.21.1.151\Exts\Chrome.crx <nicht gefunden>

CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]

CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security\Engine\22.21.1.151\Exts\Chrome.crx <nicht gefunden>

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)

R2 Backupper Service; C:\Program Files (x86)\AOMEI\AOMEI Backupper 5.9.0\ABService.exe [898216 2020-07-31] (AOMEI International Network Limited -> AOMEI Tech Co., Ltd.)

R2 BtSwitcherService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe [64216 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9662752 2018-11-03] (Microsoft Corporation -> Microsoft Corporation)

R2 CSRBtAudioService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe [465624 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R2 CsrBtOBEX-Dienst; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe [1041616 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R2 CsrBtService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe [825032 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2018-02-16] (Digital Wave Ltd -> Digital Wave Ltd.)

S3 HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [13824 2011-10-17] (Hewlett-Packard Company) [Datei ist nicht signiert]

R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [164864 2012-05-02] (HP) [Datei ist nicht signiert]

R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [683296 2014-05-16] (Hewlett-Packard Company -> Hewlett-Packard Company)

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [26680 2016-02-18] (Hewlett-Packard Company -> Hewlett-Packard Company)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [Datei ist nicht signiert]

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-03-14] (Malwarebytes Inc -> Malwarebytes)

R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [959752 2021-03-12] (McAfee, LLC -> McAfee, LLC)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2011-04-13] (Hewlett-Packard) [Datei ist nicht signiert]

R2 NortonSecurity; C:\Program Files\Norton Security\Engine\22.21.1.151\NortonSecurity.exe [343296 2021-02-22] (NortonLifeLock Inc. -> Symantec Corporation)

R2 nsWscSvc; C:\Program Files\Norton Security\Engine\22.21.1.151\nsWscSvc.exe [1054496 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

R2 NVWMI; C:\WINDOWS\system32\nvwmi64.exe [4408432 2017-10-20] (NVIDIA Corporation -> NVIDIA Corporation)

R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)

R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [66048 2011-04-13] (Hewlett-Packard) [Datei ist nicht signiert]

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6264144 2021-01-21] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [12462784 2015-11-25] (VMware, Inc. -> )

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)

R2 WMCoreService; C:\Program Files (x86)\Ericsson\Mobile Broadband Drivers\WMCore\mini_WMCore.exe [586280 2011-03-03] (Ericsson AB -> Ericsson AB)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R0 ambakdrv; C:\WINDOWS\System32\ambakdrv.sys [51120 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )

R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [171952 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )

R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [38320 2017-09-01] (CHENGDU AOMEI Tech Co., Ltd. -> )

S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)

R1 BHDrvx64; C:\Program Files\Norton Security\NortonData\22.16.2.22\Definitions\BASHDefs\20210310.005\BHDrvx64.sys [1991536 2020-11-03] (Symantec Corporation -> Broadcom)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [231936 2019-10-07] (Microsoft Corporation) [Datei ist nicht signiert]

S3 BTWDPAN; C:\WINDOWS\System32\DRIVERS\btwdpan.sys [89640 2012-02-01] (Broadcom Corporation -> Broadcom Corporation.)

R1 ccSet_NGC; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\ccSetx64.sys [192248 2021-02-22] (Symantec Corporation -> Symantec Corporation)

R3 CsrBtPort; C:\WINDOWS\system32\DRIVERS\CsrBtPort.sys [2784968 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R3 csrpan; C:\WINDOWS\System32\drivers\csrpan.sys [39616 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R3 csrserial; C:\WINDOWS\system32\DRIVERS\csrserial.sys [61128 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R3 csrusb; C:\WINDOWS\System32\Drivers\csrusb.sys [47296 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R3 csrusbfilter; C:\WINDOWS\System32\Drivers\csrusbfilter.sys [23752 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [516168 2021-02-02] (Symantec Corporation -> Broadcom)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153672 2021-02-11] (Symantec Corporation -> Broadcom)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2021-03-14] (Malwarebytes Corporation -> Malwarebytes)

R1 IDSVia64; C:\Program Files\Norton Security\NortonData\22.16.2.22\Definitions\IPSDefs\20210311.061\IDSvia64.sys [1479536 2021-01-20] (Symantec Corporation -> Broadcom)

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220616 2021-03-14] (Malwarebytes Inc -> Malwarebytes)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-03-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198248 2021-03-14] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77496 2021-03-14] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-03-14] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [155360 2021-03-14] (Malwarebytes Inc -> Malwarebytes)

R3 SRTSP; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\SRTSP64.SYS [889712 2021-02-22] (Symantec Corporation -> Symantec Corporation)

R1 SRTSPX; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\SRTSPX64.SYS [51056 2021-02-22] (Symantec Corporation -> Symantec Corporation)

R0 SymEFASI; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\SYMEFASI64.SYS [2060656 2021-02-22] (Symantec Corporation -> Broadcom)

S0 SymELAM; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\SymELAM.sys [25080 2021-02-22] (Microsoft Windows Early Launch Anti-malware Publisher -> Broadcom Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [100064 2019-03-31] (Symantec Corporation -> Symantec Corporation)

R3 SymEvnt; C:\Program Files\Norton Security\NortonData\22.16.2.22\SymPlatform\SymEvnt.sys [712368 2020-01-13] (Symantec Corporation -> Symantec Corporation)

R1 SymIRON; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\Ironx64.SYS [316488 2021-02-22] (Symantec Corporation -> Symantec Corporation)

R1 SymNetS; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\symnets.sys [575328 2021-02-22] (Symantec Corporation -> Symantec Corporation)

R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [48832 2015-11-25] (VMware, Inc. -> VMware, Inc.)

R2 VMparport; C:\WINDOWS\system32\drivers\VMparport.sys [31936 2015-11-25] (VMware, Inc. -> VMware, Inc.)

R0 vsock; C:\WINDOWS\System32\drivers\vsock.sys [75512 2015-11-05] (VMware, Inc. -> VMware, Inc.)

R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [34520 2015-07-09] (VMware, Inc. -> VMware, Inc.)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [34944 2018-05-11] (HP Inc. -> HP)

S3 wpCtrlDrv_NGC; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\wpCtrlDrv.sys [1013792 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

U3 idsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2021-03-14 09:51 - 2021-03-14 09:51 - 000077496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2021-03-14 09:50 - 2021-03-14 09:50 - 000198248 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys

2021-03-14 09:50 - 2021-03-14 09:50 - 000155360 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2021-03-14 09:46 - 2021-03-14 09:46 - 000002648 _____ C:\Users\user\Desktop\AdwCleaner[C00].txt

2021-03-14 09:44 - 2021-03-14 09:45 - 000000000 ___DC C:\AdwCleaner

2021-03-14 09:43 - 2021-03-14 09:43 - 008463216 _____ (Malwarebytes) C:\Users\user\Downloads\adwcleaner_8.1.exe

2021-03-14 09:42 - 2021-03-14 09:42 - 000004939 _____ C:\Users\user\Desktop\MBAM.txt

2021-03-14 09:35 - 2021-03-14 09:35 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2021-03-14 09:35 - 2021-03-14 09:35 - 000220616 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys

2021-03-14 09:35 - 2021-03-14 09:35 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

2021-03-14 09:35 - 2021-03-14 09:35 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys

2021-03-14 09:35 - 2021-03-14 09:35 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk

2021-03-14 09:35 - 2021-03-14 09:35 - 000002021 _____ C:\ProgramData\Desktop\Malwarebytes.lnk

2021-03-14 09:35 - 2021-03-14 09:35 - 000000000 ____D C:\Users\user\AppData\Local\mbam

2021-03-14 09:35 - 2021-03-14 09:35 - 000000000 ____D C:\ProgramData\Malwarebytes

2021-03-14 09:35 - 2021-03-14 09:35 - 000000000 ____D C:\Program Files\Malwarebytes

2021-03-14 09:34 - 2021-03-14 09:34 - 002084016 _____ (Malwarebytes) C:\Users\user\Downloads\MBSetup.exe

2021-03-14 09:15 - 2021-03-14 09:17 - 000000251 _____ C:\Users\user\Desktop\Search.txt

2021-03-14 09:07 - 2021-03-14 09:08 - 000038945 _____ C:\Users\user\Desktop\Addition.txt

2021-03-14 09:06 - 2021-03-14 09:55 - 000040522 _____ C:\Users\user\Desktop\FRST.txt

2021-03-14 09:05 - 2021-03-14 09:55 - 000000000 ___DC C:\FRST

2021-03-14 09:04 - 2021-03-14 09:04 - 002300928 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe

2021-03-14 09:01 - 2021-03-14 09:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation

2021-03-14 08:34 - 2021-03-14 09:36 - 000000818 _____ C:\WINDOWS\ntbtlog.txt

2021-03-14 08:32 - 2021-03-14 08:32 - 009645984 _____ (NortonLifeLock Inc.) C:\Users\user\Desktop\NPE.exe

2021-03-13 12:04 - 2021-03-14 08:34 - 000000344 _____ C:\WINDOWS\Tasks\HPCeeScheduleForuser.job

2021-03-13 12:04 - 2021-03-13 12:04 - 000003232 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForuser

2021-03-12 21:57 - 2021-03-12 21:57 - 000000408 _____ C:\ProgramData\Desktop\updatepush.com.lnk

2021-03-12 21:56 - 2021-03-12 21:57 - 000000000 ____D C:\Program Files\McAfee

2021-03-12 21:56 - 2021-03-12 21:56 - 000178412 _____ C:\Users\user\Downloads\Erste_Schritte.pdf

2021-03-12 21:56 - 2021-03-12 21:56 - 000001190 _____ C:\ProgramData\Desktop\Audiograbber.lnk

2021-03-12 21:56 - 2021-03-12 21:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber

2021-03-12 21:56 - 2021-03-12 21:56 - 000000000 ____D C:\ProgramData\McAfee

2021-03-12 21:56 - 2021-03-12 21:56 - 000000000 ____D C:\Program Files (x86)\Audiograbber

2021-03-12 21:36 - 2021-03-12 21:36 - 000001447 _____ C:\ProgramData\Desktop\Free Video To MP3 Converter.lnk

2021-03-12 21:36 - 2021-03-12 21:36 - 000001408 _____ C:\ProgramData\Desktop\DVDVideoSoft Free Studio.lnk

2021-03-12 21:36 - 2021-03-12 21:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2021-03-12 21:36 - 2021-03-12 21:36 - 000000000 ____D C:\ProgramData\DigitalWave.ApplicationUpdater_files

2021-03-12 21:36 - 2021-03-12 21:36 - 000000000 ____D C:\Program Files (x86)\FreeCodecPack

2021-03-12 21:36 - 2021-03-12 21:36 - 000000000 ____D C:\Program Files (x86)\DVDVideoSoft

2021-03-12 21:35 - 2021-03-12 21:38 - 000000000 ____D C:\Users\user\AppData\Roaming\DVDVideoSoft

2021-03-12 21:34 - 2021-03-12 21:34 - 033447016 _____ (Digital Wave Ltd ) C:\Users\user\Downloads\FreeVideoToMP3Converter516215.exe

2021-03-08 08:00 - 2021-03-14 08:41 - 000000000 ____D C:\WINDOWS\system32\Tasks\Norton 360

2021-03-08 08:00 - 2021-03-08 08:18 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security

2021-03-08 08:00 - 2021-03-08 08:00 - 000003378 _____ C:\WINDOWS\system32\Tasks\Norton WSC Integration

2021-02-26 14:45 - 2021-02-26 14:45 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla

2021-02-22 21:24 - 2021-02-22 21:24 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2021-02-22 21:24 - 2021-02-22 21:24 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2021-02-22 21:24 - 2021-02-22 21:24 - 000232752 _____ C:\WINDOWS\system32\containerdevicemanagement.dll

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth18.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth17.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth16.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth15.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin

2021-02-21 21:32 - 2021-02-21 21:32 - 000182952 _____ C:\Users\user\Downloads\anleitung-ffb.pdf

2021-02-14 07:22 - 2021-02-14 07:22 - 003404923 _____ C:\Users\user\Downloads\Brochüre-Fortelock.pdf

2021-02-14 07:22 - 2021-02-14 07:22 - 001294106 _____ C:\Users\user\Downloads\Fortelock-INDUSTRY-LIGHT-ECO.pdf
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2021-03-14 09:55 - 2020-02-16 16:25 - 001938502 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2021-03-14 09:55 - 2019-03-19 13:16 - 000825560 _____ C:\WINDOWS\system32\perfh007.dat

2021-03-14 09:55 - 2019-03-19 13:16 - 000184786 _____ C:\WINDOWS\system32\perfc007.dat

2021-03-14 09:55 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF

2021-03-14 09:52 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2021-03-14 09:52 - 2016-10-26 21:17 - 000000000 ____D C:\Program Files\CCleaner

2021-03-14 09:51 - 2016-12-13 17:01 - 000000000 ____D C:\Users\user\AppData\LocalLow\Mozilla

2021-03-14 09:51 - 2008-03-27 12:59 - 000000000 ____D C:\ProgramData\Mozilla

2021-03-14 09:50 - 2020-08-14 07:00 - 000000416 _____ C:\WINDOWS\SysWOW64\AbBakConfig.dat

2021-03-14 09:50 - 2020-08-14 07:00 - 000000150 _____ C:\WINDOWS\SysWOW64\winsevr.dat

2021-03-14 09:50 - 2020-08-02 16:31 - 000000000 ____D C:\ProgramData\VMware

2021-03-14 09:50 - 2020-02-16 16:28 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2021-03-14 09:50 - 2019-03-19 05:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI

2021-03-14 09:50 - 2016-01-18 13:20 - 000000000 ____D C:\ProgramData\NVIDIA

2021-03-14 09:46 - 2015-10-13 15:34 - 000000000 ____D C:\Users\user\AppData\Local\Downloaded Installations

2021-03-14 09:41 - 2015-12-01 11:12 - 000000000 ____D C:\ProgramData\Package Cache

2021-03-14 09:35 - 2019-03-19 05:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2021-03-14 08:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness

2021-03-14 08:48 - 2018-05-01 09:32 - 000000000 ____D C:\Users\user\AppData\Local\NPE

2021-03-14 08:35 - 2018-05-01 09:33 - 000000000 ____D C:\NPE

2021-03-14 08:34 - 2020-04-05 06:46 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

2021-03-14 08:34 - 2008-03-27 12:59 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2021-03-14 08:09 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp

2021-03-14 08:03 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps

2021-03-13 13:26 - 2020-02-16 16:17 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2021-03-13 10:31 - 2021-01-05 15:46 - 000000000 ____D C:\Users\user\Desktop\914 Einspritzanlage

2021-03-13 10:29 - 2016-12-28 07:34 - 000000000 ____D C:\01 Thomas

2021-03-13 08:36 - 2008-03-27 11:58 - 000000000 ____D C:\Users\user\AppData\Local\VirtualStore

2021-03-12 21:36 - 2019-02-03 20:33 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2021-03-12 16:20 - 2021-02-07 07:35 - 000013153 _____ C:\Users\user\Desktop\Laufpensum.xlsx

2021-03-12 15:45 - 2020-06-21 13:48 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2021-03-11 20:57 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ServiceState

2021-03-11 20:41 - 2019-12-26 11:32 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2021-03-11 20:41 - 2019-12-26 11:32 - 000002252 _____ C:\ProgramData\Desktop\Google Chrome.lnk

2021-03-10 23:09 - 2020-06-28 12:53 - 000000000 ____D C:\Program Files\Norton Utilities Premium

2021-03-10 21:43 - 2014-12-27 14:23 - 000000000 ____D C:\WINDOWS\system32\MRT

2021-03-10 21:41 - 2014-12-27 14:23 - 131005360 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2021-03-08 08:44 - 2016-10-26 21:20 - 000000000 ____D C:\Program Files\Common Files\AV

2021-03-08 08:18 - 2018-11-19 13:06 - 000002429 _____ C:\ProgramData\Desktop\Norton Security.lnk

2021-03-08 08:00 - 2019-03-19 05:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM

2021-03-08 08:00 - 2018-11-19 13:06 - 000000000 ____D C:\WINDOWS\system32\Drivers\NGCx64

2021-03-08 07:30 - 2016-10-26 21:23 - 000000000 ____D C:\Users\user\AppData\Roaming\vlc

2021-03-06 20:48 - 2020-02-16 16:28 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update

2021-02-28 22:04 - 2020-02-16 16:37 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2636535521-2909126409-823621586-1000

2021-02-28 22:04 - 2020-02-16 16:25 - 000002413 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2021-02-28 22:04 - 2016-11-02 20:27 - 000000000 ___RD C:\Users\user\OneDrive

2021-02-26 14:45 - 2008-03-27 12:59 - 000001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2021-02-26 06:53 - 2016-10-26 21:23 - 000001139 _____ C:\ProgramData\Desktop\VLC media player.lnk

2021-02-26 06:51 - 2020-06-21 13:48 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2021-02-26 06:51 - 2020-06-21 13:48 - 000003576 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2021-02-23 16:25 - 2020-02-16 16:35 - 000000000 ___RD C:\Users\user\3D Objects

2021-02-23 16:25 - 2020-02-16 16:17 - 000309168 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\oobe

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\es-MX

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Dism

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Common Files\System

2021-02-22 21:26 - 2019-03-19 13:19 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll

2021-02-22 21:26 - 2019-03-19 13:19 - 000019469 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml

2021-02-22 21:24 - 2008-03-27 11:52 - 000410822 __RSH C:\bootmgr

2021-02-21 07:37 - 2020-08-23 06:57 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

2021-02-20 06:15 - 2019-06-26 18:16 - 000000000 ____D C:\Users\user\AppData\Local\Greenshot

2021-02-13 10:00 - 2020-02-16 16:28 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

--- --- ---FRST Additions Logfile:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 13-03-2021

durchgeführt von user (14-03-2021 09:56:34)

Gestartet von C:\Users\user\Desktop

Windows 10 Pro Version 1909 18363.1379 (X64) (2020-02-16 15:28:30)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-2636535521-2909126409-823621586-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2636535521-2909126409-823621586-503 - Limited - Disabled)

Gast (S-1-5-21-2636535521-2909126409-823621586-501 - Limited - Enabled) => C:\Users\Gast

HomeGroupUser$ (S-1-5-21-2636535521-2909126409-823621586-1002 - Limited - Enabled)

user (S-1-5-21-2636535521-2909126409-823621586-1000 - Administrator - Enabled) => C:\Users\user

WDAGUtilityAccount (S-1-5-21-2636535521-2909126409-823621586-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Norton 360 (Enabled - Up to date) {1122B19A-E671-38EC-8EAC-87048FD4528D}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}

AV: Norton 360 (Enabled - Up to date) {9E3FD331-C4C2-7AC4-0537-131EEF1B1F8A}

AS: Norton 360 (Enabled - Up to date) {AA43507E-C04B-3762-B41C-BC76F4531830}

AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Norton 360 (Enabled) {A6045214-8EAD-7B9C-2E68-BA2B11C858F1}

FW: Norton 360 (Enabled) {291930BF-AC1E-39B4-A5F3-2E31710715F6}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

4K Video Downloader (HKLM\...\{A730612F-DC69-4EEC-AB92-0366346D9CCD}) (Version: 4.14.1.4020 - Open Media LLC)

64 Bit HP CIO Components Installer (HKLM\...\{BC741628-0AFC-405C-8946-DD46D1005A0A}) (Version: 8.2.4 - Hewlett-Packard) Hidden

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 21.001.20145 - Adobe Systems Incorporated)

Alcor Micro Smart Card Reader Driver (HKLM-x32\...\{F24F876B-7D71-4BD6-88E9-614D3BB84242}) (Version: 1.7.42.0 - Alcor Micro Corp.) Hidden

Alcor Micro Smart Card Reader Driver (HKLM-x32\...\SZCCID) (Version: 1.7.42.0 - Alcor Micro Corp.)

AOMEI Backupper 5.9 (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1) (Version:  - AOMEI Technology Co., Ltd.)

Audiograbber (HKLM-x32\...\Audiograbber) (Version: 1.83 (2020 Edition) - Audiograbber)

Broadcom Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.5300 - Broadcom Corporation)

CCleaner (HKLM\...\CCleaner) (Version: 5.77 - Piriform)

CSR Harmony Wireless Software Stack (HKLM\...\{17DEA095-8EE1-49A2-AC5A-9663DB098FA9}) (Version: 2.1.63.0 - CSR Plc.)

Free Video To MP3 Converter (HKLM-x32\...\Free Video To MP3 Converter_is1) (Version: 5.1.6.215 - Digital Wave Ltd)

FreeCAD 0.16 - A free open source CAD system (HKLM\...\FreeCAD 0.16) (Version: 0.16.6700 - Juergen Riegel)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 89.0.4389.82 - Google LLC)

Greenshot 1.2.10.6 (HKLM\...\Greenshot_is1) (Version: 1.2.10.6 - Greenshot)

HP 3D DriveGuard (HKLM\...\{B64F0818-316F-4237-8CB4-35BC2DA784C2}) (Version: 5.1.12.1 - Hewlett-Packard Company)

HP Connection Manager (HKLM-x32\...\{F0809EF3-DE1B-4A3C-9825-D4ABD1BA06BC}) (Version: 4.8.10.1 - Hewlett-Packard Company)

HP HD Webcam Driver (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 6.0.1113.1_WHQL - Sonix)

HP Hotkey Support (HKLM-x32\...\{57FA60DA-585F-456A-B80E-17D1CDD22A30}) (Version: 5.0.27.1 - Hewlett-Packard Company)

HP LaserJet 200 color MFP M276 (HKLM-x32\...\{CC38C23C-7824-4DBB-AC73-997CD0BBFEC7}) (Version: 5.0.14057.1503 - Hewlett-Packard)

HP Mobile Broadband Drivers (HKLM-x32\...\{646E8C34-C88B-42F9-9F41-985A801219E1}) (Version: 6.3.5.3 - Ericsson AB)

HP SoftPaq Download Manager (HKLM-x32\...\{f41e84dd-bf67-4276-a972-df8f69ff28b6}) (Version: 4.0.0.0 - Hewlett-Packard Company)

HP Software Framework (HKLM-x32\...\{D2462056-BA75-4B2C-8267-DFEA2B6AC4AE}) (Version: 4.6.10.1 - Hewlett-Packard Company)

HP Support Assistant (HKLM-x32\...\{78E2C850-ADA6-420D-BA35-2F4A9BE733CC}) (Version: 8.2.8.25 - HP)

HP Support Solutions Framework (HKLM-x32\...\{77FA4949-7EC5-43ED-8EDA-EE537D7DB878}) (Version: 12.2.8.17 - HP)

HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)

hpbDSService (HKLM-x32\...\{62022DCB-BA92-4EC2-AE03-9B946E4DBF12}) (Version: 002.002.07399 - Hewlett-Packard) Hidden

hpbM276DSService (HKLM-x32\...\{4B02D3CE-A011-4475-93A5-774E0DA4E27E}) (Version: 001.001.05874 - Hewlett-Packard) Hidden

HPLaserJet200color-MFPM276_HelpLearnCenter_SI (HKLM-x32\...\{0F044C7A-6EE1-4F03-90AC-329AAF2FCF12}) (Version: 1.01.0000 - Hewlett-Packard)

hppFaxDrvM276 (HKLM-x32\...\{B361ED10-259E-4B76-B35E-E47BB6DDDD74}) (Version: 003.000.00002 - Hewlett-Packard) Hidden

hppLaserJetService (HKLM-x32\...\{180D6813-95E0-415C-B58A-5B9493DE2DDA}) (Version: 009.027.00856 - Hewlett-Packard) Hidden

hppM276LaserJetService (HKLM-x32\...\{D6610387-8E8B-48ED-AB1C-0D38DFE31C55}) (Version: 001.019.00639 - Hewlett-Packard) Hidden

hppSendFaxM276 (HKLM-x32\...\{54525107-4C4E-44AC-AC65-806084151057}) (Version: 003.000.00002 - Hewlett-Packard) Hidden

hpStatusAlerts (HKLM-x32\...\{46A99EAE-98DA-4BE5-94C3-D41BA4C266DA}) (Version: 050.037.00142 - Hewlett Packard) Hidden

hpStatusAlertsM276 (HKLM-x32\...\{FFD4184D-7EC6-476E-9A72-E83412AB9D3B}) (Version: 050.034.00131 - Hewlett-Packard) Hidden

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.30.1349 - Intel Corporation)

Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 17.3 - Intel)

Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)

Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.10.255 - Intel Corporation)

Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000110-0210-1031-84C8-B8D95FA3C8C3}) (Version: 21.110.0.3 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{105fa5c4-72e1-41f2-a82c-884d8aa4b381}) (Version: 16.6.0 - Intel Corporation)

JMicron 1394 Filter Driver (HKLM-x32\...\{13C96625-28E4-4c58-ADE0-CDAFC64752EB}) (Version: 1.00.25.03 - JMicron Technology Corp.)

JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.76.1 - JMicron Technology Corp.)

Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.13 - Magical Jelly Bean)

Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 89.0.774.50 - Microsoft Corporation)

Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.141.63 - )

Microsoft Office Home and Student 2016 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 16.0.7369.2038 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2636535521-2909126409-823621586-1000\...\OneDriveSetup.exe) (Version: 21.016.0124.0003 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{BAB9FCC5-1506-4B4F-BFCA-EDE0BDB86C21}) (Version: 2.75.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.20.27508 (HKLM-x32\...\{7b178cda-9740-4701-a92a-f168d213b343}) (Version: 14.20.27508.1 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.20.27508 (HKLM-x32\...\{8c3f057e-d6a6-4338-ac6a-f1c795a6577b}) (Version: 14.20.27508.1 - Microsoft Corporation)

Mozilla Firefox 86.0 (x64 de) (HKLM\...\Mozilla Firefox 86.0 (x64 de)) (Version: 86.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 86.0.0.7723 - Mozilla)

Norton 360 (HKLM-x32\...\NGC) (Version: 22.21.1.151 - Symantec Corporation)

Norton Utilities Premium (HKLM\...\{36896A40-D958-486B-8A43-31A41E129FE2}) (Version: 17.0.3.658 - NortonLifeLock)

NVIDIA Grafiktreiber 385.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 385.73 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)

NVIDIA nView 148.47 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 148.47 - NVIDIA Corporation)

NVIDIA WMI 2.30.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVWMI) (Version: 2.30.0 - NVIDIA Corporation)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.7369.2038 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.7369.2038 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.7369.2038 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.7369.2038 - Microsoft Corporation) Hidden

PDF24 Creator 9.2.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 9.2.2 - PDF24.org)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.36.0 - Renesas Electronics Corporation) Hidden

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.36.0 - Renesas Electronics Corporation)

Skype Version 8.59 (HKLM-x32\...\Skype_is1) (Version: 8.59 - Skype Technologies S.A.)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.65 - Synaptics Incorporated)

TAHUNA TOOL Version 4.2.4.0 (HKLM-x32\...\{805FBA43-88AB-4E02-A16C-560F7D0D7CE5}_is1) (Version: 4.2.4.0 - GPS Tuner)

Validity Fingerprint Sensor Driver (HKLM\...\{ADAA7361-54B8-4FC8-804E-94EC6C11ED68}) (Version: 4.5.133.0 - Validity Sensors, Inc.)

VCDS DRV 18.9 (HKLM-x32\...\VCDS DRV) (Version: DRV 18.9.1 - Ross-Tech, LLC)

VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.12 - VideoLAN)

VMware Workstation (HKLM\...\{0AD91785-F9BD-47FD-84F7-9E27B5A1853D}) (Version: 12.1.0 - VMware, Inc.)

Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - LunarG, Inc.) Hidden

WebAdvisor von McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.200 - McAfee, LLC)

Windows 10-Update-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22925 - Microsoft Corporation)

Windows-Treiberpaket - Auto-Intern USB-Treiber (01/27/2014 2.10.00) (HKLM\...\8A6877F9F5E2BDF3ED64EF602BCC6C098A365E38) (Version: 01/27/2014 2.10.00 - Auto-Intern)

Windows-Treiberpaket - Auto-Intern Virtueller COM-Port-Treiber (01/27/2014 2.10.00) (HKLM\...\C4AF7B4D22D910BBA580416C3052FEFD8D702132) (Version: 01/27/2014 2.10.00 - Auto-Intern)

Windows-Treiberpaket - Ross-Tech USB Driver Package (05/12/2014 2.10.00) (HKLM\...\88B02C4BD09AA7910C55C4E74BE8F036244B5CF9) (Version: 05/12/2014 2.10.00 - Ross-Tech)

WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
 

Packages:

=========

HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_122.3.838.0_x64__v10z8vjag6ke6 [2021-02-27] (HP Inc.)

Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-06-22] (Microsoft Corporation)

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.1252.0_x64__8wekyb3d8bbwe [2021-02-01] (Microsoft Studios) [MS Ad]
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers-x32: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers-x32: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers-x32: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers1: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers1: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.21.1.151\NavShExt.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers2: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.21.1.151\NavShExt.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Workstation\vmdkShellExt.dll [2015-11-25] (VMware, Inc. -> VMware, Inc.)

ContextMenuHandlers2: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Workstation\x64\vmdkShellExt64.dll [2015-11-25] (VMware, Inc. -> VMware, Inc.)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-03-14] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers5: [00nView] -> {1E9B04FB-F9E5-4718-997B-B8DA88302A48} => C:\Program Files\NVIDIA Corporation\nview\nvshell.dll [2017-10-20] (NVIDIA Corporation -> )

ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Keine Datei

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-09-25] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-03-14] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers6: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.21.1.151\NavShExt.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::

WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]

WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2009-09-16 17:44 - 2009-09-16 17:44 - 000153088 _____ (Hewlett Packard) [Datei ist nicht signiert] C:\WINDOWS\System32\hptcpmib.dll

2009-09-16 17:45 - 2009-09-16 17:45 - 000331264 _____ (Hewlett Packard) [Datei ist nicht signiert] C:\WINDOWS\System32\HpTcpMon.dll

2009-09-16 10:44 - 2009-09-16 10:44 - 000132096 _____ (Hewlett Packard) [Datei ist nicht signiert] C:\WINDOWS\System32\hpzjrd01.dll

2012-05-02 20:02 - 2012-05-02 20:02 - 000041472 _____ (Hewlett-Packard Company) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\HP\HPLaserJetService\HPHTTPProxy.dll

2012-05-02 20:02 - 2012-05-02 20:02 - 000073728 _____ (Hewlett-Packard Company) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\HP\HPLaserJetService\HPTools.dll

2012-05-02 20:02 - 2012-05-02 20:02 - 001218560 _____ (Hewlett-Packard Company) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\HP\HPLaserJetService\LEDMXMLObjects.dll

2013-03-26 20:12 - 2013-03-26 20:12 - 000056832 _____ (Hewlett-Packard Development Company, L.P.) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HP.Mobile.Shared.dll

2011-04-13 15:08 - 2011-04-13 15:08 - 000050688 _____ (Hewlett-Packard) [Datei ist nicht signiert] c:\windows\system32\hpzinw12.dll

2011-04-13 15:08 - 2011-04-13 15:08 - 000066048 _____ (Hewlett-Packard) [Datei ist nicht signiert] c:\windows\system32\hpzipm12.dll

2012-05-02 20:02 - 2012-05-02 20:02 - 000034816 _____ (HP) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\HP\HPLaserJetService\HPServiceCommunicator.dll

2015-10-13 15:37 - 2015-10-13 15:36 - 000073728 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.dll

2009-09-16 17:45 - 2009-09-16 17:45 - 000317440 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\System32\HPTcpMUI.dll

2020-02-16 16:16 - 2020-02-16 16:16 - 000065536 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\WinSxS\x86_microsoft.vc80.openmp_1fc8b3b9a1e18e3b_8.0.50727.6195_none_3b1209fdc9ac7774\vcomp.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

BHO: Norton Password Manager -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine\22.21.1.151\coIEPlg.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2021-03-12] (McAfee, LLC -> McAfee, LLC)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Norton Password Manager -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine32\22.21.1.151\coIEPlg.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2021-03-12] (McAfee, LLC -> McAfee, LLC)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-02-17] (Hewlett-Packard Company -> HP)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine\22.21.1.151\coIEPlg.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine32\22.21.1.151\coIEPlg.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2011-01-19] (Skype Technologies SA -> Skype Technologies)
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2016-01-18 13:11 - 000000889 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1       BMUC440308.europe.bmw.corp # LMS GENERATED LINE
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;%SYSTEMROOT%\SYSTEM32\WINDOWSPOWERSHELL\V1.0\;C:\Program Files\WIDCOMM\Bluetooth Software\;C:\Program Files\WIDCOMM\Bluetooth Software\syswow64;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\AOMEI\AOMEI Backupper 5.9.0

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\user\AppData\Local\Microsoft\Windows\Themes\DE-wp4.jpg

HKU\S-1-5-21-2636535521-2909126409-823621586-501\Control Panel\Desktop\\Wallpaper -> C:\Users\Gast\AppData\Local\Microsoft\Windows\Themes\DE-wp6.jpg

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Keine Datei)

 ist aktiviert.
 

Network Binding:

=============

VMware Network Adapter VMnet1: VMware Bridge Protocol -> vmware_bridge (disabled) 

VMware Network Adapter VMnet8: VMware Bridge Protocol -> vmware_bridge (disabled) 

Drahtlosnetzwerkverbindung 11: VMware Bridge Protocol -> vmware_bridge (enabled) 

Bluetooth-Netzwerkverbindung 5: VMware Bridge Protocol -> vmware_bridge (enabled) 

LAN-Verbindung 4: VMware Bridge Protocol -> vmware_bridge (enabled) 
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

MSCONFIG\startupfolder: C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^An OneNote senden.lnk => C:\Windows\pss\An OneNote senden.lnk.Startup

MSCONFIG\startupfolder: C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Ross-Tech VCDS Updater-DRV24.lnk => C:\Windows\pss\Ross-Tech VCDS Updater-DRV24.lnk.Startup

HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\...\StartupApproved\Run: => "Skype for Desktop"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{82806DE6-E91C-42E5-8365-CF7E8D852E2C}] => (Allow) C:\Ross-Tech\VCDS-DRV\VCIConfig.EXE (Ross-Tech, LLC -> Ross-Tech, LLC)

FirewallRules: [{E56DFD5B-1760-4F70-B6D5-339A7E4909FE}] => (Allow) C:\Ross-Tech\VCDS-DRV\VCDS.EXE (Ross-Tech, LLC -> Ross-Tech, LLC)

FirewallRules: [{02AC749D-DC54-47A3-A096-B43EA30F28C0}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)

FirewallRules: [{0665E963-F9AF-46B7-88EF-2F02CD83725D}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)

FirewallRules: [{A9853601-E058-4EC8-93D6-377E70C95336}] => (Allow) C:\Program Files (x86)\HP\HP LaserJet 200 color MFP M276\bin\EWSProxy.exe (Hewlett Packard -> Hewlett-Packard Co.)

FirewallRules: [{36EBBD4A-0A1A-4F86-A4F0-45E1C67B40E6}] => (Allow) C:\Program Files (x86)\HP\HP LaserJet 200 color MFP M276\Bin\HPNetworkCommunicator.exe (Hewlett Packard -> Hewlett-Packard Co.)

FirewallRules: [{4B393791-351A-40FD-B973-10B00393BDC8}] => (Allow) C:\Program Files (x86)\HP\HP LaserJet 200 color MFP M276\bin\DigitalWizards.exe (Hewlett Packard -> Hewlett-Packard Co.)

FirewallRules: [{F3005C0F-6576-4FA6-BF03-717DA8121905}] => (Allow) C:\Program Files (x86)\HP\HP LaserJet 200 color MFP M276\bin\FaxApplications.exe (Hewlett Packard -> Hewlett-Packard Co.)

FirewallRules: [{F9F89573-A5C1-4679-8B7B-71B5C96B8FF5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{6696C3BC-F057-4F8D-8933-D768FA63120F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{C96124FE-2A09-4342-9F5A-A11EE74D580B}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{BE830D73-618F-4B06-8857-5EB0B43B9363}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{0DE32949-85E0-4262-97C6-E5D6BED0D831}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc. -> VMware, Inc.)

FirewallRules: [{2E382CAA-35A4-446E-BA58-066BDD50FEF0}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc. -> VMware, Inc.)

FirewallRules: [{27566200-4E43-437C-BA36-0FED5FC682EA}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (VMware, Inc. -> )

FirewallRules: [{D767D21D-A160-475C-8731-62B5762E23B1}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (VMware, Inc. -> )

FirewallRules: [{0802C27F-2D79-4F82-BE89-5E6479E2AAC1}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper 5.9.0\ABService.exe (AOMEI International Network Limited -> AOMEI Tech Co., Ltd.)

FirewallRules: [{82907441-B9B7-4D8E-9860-45FFF9686B6D}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper 5.9.0\ABService.exe (AOMEI International Network Limited -> AOMEI Tech Co., Ltd.)

FirewallRules: [{2C0E2652-1FAB-40E6-AEDD-FFB1D660E551}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper 5.9.0\ABService.exe (AOMEI International Network Limited -> AOMEI Tech Co., Ltd.)

FirewallRules: [{8ACE5FEC-8499-4EC6-BAF5-0A5662D8FB4E}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper 5.9.0\ABService.exe (AOMEI International Network Limited -> AOMEI Tech Co., Ltd.)

FirewallRules: [{A803F642-B42F-4AB1-9A2A-ADFC9BF78025}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{FB7B05F4-3629-4C38-B8EF-1FDC041D7C0D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{977292F9-A456-4608-AF8F-1148B91535F7}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{9FE9BC6C-C587-4F0F-A9F0-392E539B1053}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{187A459D-9F7F-4296-AF13-B229846D265F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
 

==================== Wiederherstellungspunkte =========================
 

21-02-2021 07:36:55 Windows Update

01-03-2021 07:19:02 Geplanter Prüfpunkt

10-03-2021 21:34:15 Windows Update

14-03-2021 08:02:26 Windows Update
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (03/14/2021 09:54:58 AM) (Source: HP Active Health) (EventID: 91) (User: )

Description: Unhandled Exception. Application will terminate immediately.

System.ArgumentNullException: Der Wert darf nicht NULL sein.

   bei System.Threading.Monitor.Enter(Object obj)

   bei HP.ActiveHealth.Commons.Security.HashStore.Validate(String filePath)

   bei HP.ActiveHealth.Core.Program..ctor(String[] args, Boolean mustCheckSignature, Boolean validateIni)

   bei HP.ActiveHealth.Core.ActiveHealthMain.Main(String[] args)
 

Error: (03/14/2021 09:50:24 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1000) (User: NT-AUTORITÄT)

Description: Der Zugriff auf Leistungsdaten wurde für den Benutzer "SYSTEM" (Wert von getbenutzername() für den ausgeführten Thread) verweigert, da er vom Modul "C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe" (Wert von GetModuleFileName() für die Binärdatei, die die Abfrage ausgegeben hat) versucht wurde.
 

Error: (03/14/2021 09:39:24 AM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (2548,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (03/14/2021 09:25:40 AM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (14808,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (03/14/2021 09:11:38 AM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (14264,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (03/14/2021 09:00:07 AM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (2640,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (03/14/2021 08:54:56 AM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (8792,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (03/14/2021 08:39:05 AM) (Source: HP Active Health) (EventID: 91) (User: )

Description: Unhandled Exception. Application will terminate immediately.

System.ArgumentNullException: Der Wert darf nicht NULL sein.

   bei System.Threading.Monitor.Enter(Object obj)

   bei HP.ActiveHealth.Commons.Security.HashStore.Validate(String filePath)

   bei HP.ActiveHealth.Core.Program..ctor(String[] args, Boolean mustCheckSignature, Boolean validateIni)

   bei HP.ActiveHealth.Core.ActiveHealthMain.Main(String[] args)
 
 

Systemfehler:

=============

Error: (03/14/2021 09:51:01 AM) (Source: DCOM) (EventID: 10010) (User: USER-PC)

Description: Der Server "Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (03/14/2021 09:50:53 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "MessagingService_5fc0e" wurde mit folgendem Fehler beendet: 

Das Gerät ist nicht bereit.
 

Error: (03/14/2021 09:50:49 AM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: NT-AUTORITÄT)

Description: Fehler "126" beim Laden der Kennwortbenachrichtigungs-DLL "C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll". Stellen Sie sicher, dass der in der Registrierung definierte DLL-Pfad "HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages" sich auf einen korrekten und absoluten Pfad (<Laufwerk>:\<Pfad>\<Dateiname>.<Erw.>) bezieht und nicht auf einen relativen oder ungültigen Pfad. Wenn der DLL-Pfad falsch ist, stellen Sie sicher, dass sich alle Hilfsdateien im gleichen Verzeichnis befinden und dass das Systemkonto sowohl auf den DLL-Pfad als auch die Hilfsdateien Lesezugriff hat.  Wenden Sie sich an den Anbieter der Benachrichtigungs-DLL, um weitere Unterstützung zu erhalten. Weitere Informationen finden Sie im Internet unter "hxxp://go.microsoft.com/fwlink/?LinkId=245898".
 

Error: (03/14/2021 09:50:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "VMware Workstation Server" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (03/14/2021 09:46:02 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "HP LaserJet Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (03/14/2021 09:46:02 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "VMware Workstation Server" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (03/14/2021 09:46:02 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "VMware NAT Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (03/14/2021 09:46:02 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "PDF24" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

==================== Speicherinformationen =========================== 
 

BIOS: Hewlett-Packard 68IAV Ver. F.41 05/20/2013

Hauptplatine: Hewlett-Packard 176B

Prozessor: Intel(R) Core(TM) i7-3820QM CPU @ 2.70GHz

Prozentuale Nutzung des RAM: 26%

Installierter physikalischer RAM: 16315.4 MB

Verfügbarer physikalischer RAM: 11942.61 MB

Summe virtueller Speicher: 32699.4 MB

Verfügbarer virtueller Speicher: 27756.13 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:931.51 GB) (Free:566.21 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
 
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 001331B2)

Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt =======================

--- --- ---

Hallo Matthias,
habe mittlerweile in eurem Forum gesehen, dass dieses Problem schon öfter behandelt wurde und habe mit Malwarebytes schon eine Überprüfung durchgeführt und die gemeldeten Dateinen in Quarantäne geschoben

FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 14-03-2021

durchgeführt von user (Administrator) auf USER-PC (Hewlett-Packard HP EliteBook 8570w) (14-03-2021 20:53:12)

Gestartet von C:\Users\user\Downloads

Geladene Profile: user

Platform: Windows 10 Pro Version 1909 18363.1379 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: FF

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(AOMEI International Network Limited -> AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI\AOMEI Backupper 5.9.0\ABService.exe

(Cambridge Silicon Radio Ltd. -> ) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe

(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe

(Ericsson AB -> Ericsson AB) C:\Program Files (x86)\Ericsson\Mobile Broadband Drivers\WMCore\mini_WMCore.exe

(geek software GmbH -> geek software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe <2>

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hp\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hp\StatusAlerts\bin\HPStatusAlerts.exe

(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe

(HP) [Datei ist nicht signiert] C:\Program Files (x86)\Hp\HPLaserJetService\HPLaserJetService.exe

(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe

(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(Intel(R) Corporation) [Datei ist nicht signiert] C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe

(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <7>

(NortonLifeLock Inc. -> NortonLifeLock Inc.) C:\Program Files\Norton Security\Engine\22.21.1.151\nsWscSvc.exe

(NortonLifeLock Inc. -> Symantec Corporation) C:\Program Files\Norton Security\Engine\22.21.1.151\NortonSecurity.exe <2>

(NVIDIA Corporation -> ) C:\Program Files\NVIDIA Corporation\nview\nviewMain.exe

(NVIDIA Corporation -> ) C:\Program Files\NVIDIA Corporation\nview\nviewMain64.exe <2>

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>

(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvwmi64.exe <2>

(Open Source Developer, Robin Krom -> Greenshot) C:\Program Files\Greenshot\Greenshot.exe

(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Renesas Electronics Corporation -> Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Symantec Corporation -> Symantec Corporation) C:\Program Files\Norton Utilities Premium\x64\LBGovernor.exe

(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Validity Sensors, Inc -> Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe

(VMware, Inc. -> ) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe

(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe

(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [HP LaserJet 200 color MFP M276 Series Fax] => C:\Program Files (x86)\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe [3706424 2011-10-09] (Hewlett-Packard Company -> Hewlett-Packard Company)

HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [527792 2017-08-09] (Open Source Developer, Robin Krom -> Greenshot)

HKLM\...\Run: [CsrHCRPServer] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe [1134288 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\...\Run: [CsrAudioguiCtrl] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe [511696 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\...\Run: [CsrSyncMLServer] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe [244944 2012-03-22] (Cambridge Silicon Radio Ltd. -> )

HKLM\...\Run: [vksts] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe [25792 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\...\Run: [HarmonyUserStartup] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe [39128 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\...\Run: [CSRHarmonySkypePlugin] => C:\Program Files (x86)\CSR\CSR Harmony Wireless Software Stack\CSRHarmonySkypePlugin.exe [146656 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\...\Run: [TrayApplication] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe [529616 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM-x32\...\Run: [NUSB3MON] => c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation -> Renesas Electronics Corporation)

HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2015-12-01] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation)

HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [336672 2014-05-16] (Hewlett-Packard Company -> Hewlett-Packard Company)

HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2015-10-13] (Intel Corporation -> Intel Corporation)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard Company -> Hewlett-Packard)

HKLM-x32\...\Run: [StatusAlerts] => C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [313248 2012-07-18] (Hewlett-Packard Company -> Hewlett-Packard Company)

HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [104128 2015-11-25] (VMware, Inc. -> VMware, Inc.)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32726088 2021-03-05] (Piriform Software Ltd -> Piriform Software Ltd)

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91591032 2020-04-14] (Skype Software Sarl -> Skype Technologies S.A.)

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\...\Run: [8042DBCBE0CC6F7D1E5DCD3935C9DB5EDE0B7F0B._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [568320 2021-01-21] (Microsoft Windows -> Microsoft Corporation)

HKU\S-1-5-21-2636535521-2909126409-823621586-501\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [152576 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

HKLM\...\Windows x64\Print Processors\hpcpp117: C:\Windows\System32\spool\prtprocs\x64\hpcpp117.DLL [467456 2013-03-21] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)

HKLM\...\Print\Monitors\HCR Client Port Monitor: C:\WINDOWS\SYSTEM32\csrportmon.dll [73416 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

HKLM\...\Print\Monitors\HP Fax Port: C:\WINDOWS\SYSTEM32\hppfaxprintermon5.dll [27704 2011-10-09] (Hewlett-Packard Company -> Hewlett-Packard Company)

HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\WINDOWS\SYSTEM32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [Datei ist nicht signiert]

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.82\Installer\chrmstp.exe [2021-03-11] (Google LLC -> Google LLC)

HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\WIDCOMM\Bluetooth Software\\BtwCP.dll [2014-03-06] (Broadcom Corporation -> Broadcom Corporation.)

HKLM\Software\...\Authentication\Credential Providers: [{5355DA8C-FE32-49b4-A567-A67535C86592}] -> C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BLEtokenCredentialProvider.dll [2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {05544512-9E59-4575-A4C8-87C969395F66} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {05C49AC7-531B-4E3E-ACA8-95A378B85C56} - System32\Tasks\Norton 360\Norton 360 Error Analyzer => C:\Program Files\Norton Security\Engine\22.21.1.151\SymErr.exe [115608 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc)

Task: {05E076DE-7BD3-4BDC-B95F-55A5622797D3} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {06965CFE-FDC2-4D1F-B761-B53B31F00365} - System32\Tasks\Norton 360 Premier\Norton 360 Premier Error Processor => C:\Program Files\Norton Security\Engine\22.16.2.22\SymErr.exe

Task: {08978EA9-CCA4-4A54-8FA5-D4FF3971FD33} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {0A294A2A-32AA-46B3-8FEA-09A684BF4D46} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {1008FD9B-42A1-447B-AFD0-B26C3090D3FB} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Security\Engine\22.21.1.151\WSCStub.exe [643544 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

Task: {154CE1C5-2861-48D0-9239-500AAFCDE957} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {19DD36A0-BF7C-4633-A072-BAB2324200E5} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}

Task: {1B4F8E66-6AE8-410F-BEF5-0F511E431C9E} - System32\Tasks\AutomaticCare => C:\Program Files\Norton Utilities Premium\nup.exe [618152 2020-06-28] (Symantec Corporation -> Symantec Corporation)

Task: {2BACB666-BDC1-4EF0-BB3D-9FB847C822D7} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe

Task: {31C6A140-6CFF-433B-900F-EEF8C05A0633} - System32\Tasks\HPCeeScheduleForuser => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [97848 2016-01-22] (Hewlett-Packard Company -> Hewlett-Packard)

Task: {3319886A-ADBA-4D37-B68F-31ECA7A3054B} - System32\Tasks\Microsoft\Windows\End Of Support\Notify2 => C:\WINDOWS\system32\sipnotify.exe

Task: {3A3CF658-8AC6-4E67-9F61-433149FD08AA} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {3A6341E0-CF07-46B2-A9DC-5B5C03BE991F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [457272 2016-02-18] (Hewlett-Packard Company -> Hewlett-Packard Company)

Task: {3D95295A-DD1E-4694-BF43-26D096D37DDF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)

Task: {3E6D668C-E384-4CD1-B81F-9A42E0CEF1BF} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe

Task: {3EFD74D2-C364-4E91-ADF8-BAB90A5096D1} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe

Task: {47269525-3DC6-45AB-8896-DB27F0C4F492} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}

Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47c2-B62A-B7C4CED925CB}

Task: {4D7825AC-F1DA-4789-827B-C7688E6A1316} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [457272 2016-02-18] (Hewlett-Packard Company -> Hewlett-Packard Company)

Task: {4F121554-4790-4125-8E63-891B4DB0DA9E} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {55E9ECCE-CDCD-4CEE-B950-AF89E29C1815} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [694752 2021-02-26] (Mozilla Corporation -> Mozilla Foundation)

Task: {59AB6E47-773E-4B10-BAF7-203B0BC0517A} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {5A1CC2FC-79EE-4A4C-B7B8-A8DFAC93D72D} - System32\Tasks\nWizard_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2104760 2017-10-20] (NVIDIA Corporation -> )

Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}

Task: {5BF74145-90D1-43CA-8811-9A706C7F3B7F} - System32\Tasks\ActiveSync-NortonUtility => C:\Program Files\Norton Utilities Premium\activesync.exe [245928 2020-06-28] (Symantec Corporation -> Symantec Corporation)

Task: {5CD0A8E7-8C0D-454D-8D54-A035D0C05629} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-03-05] (Piriform Software Ltd -> Piriform)

Task: {61BB4AE4-7D0B-428E-931F-E719A650630A} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}

Task: {61C6905B-34A6-461D-AF2E-2DC454A8A9E2} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe

Task: {64684EBB-B250-461F-AF4A-CED44CEF5CF9} - System32\Tasks\Norton 360\Norton 360 Autofix => C:\Program Files\Norton Security\Engine\22.21.1.151\SymErr.exe [115608 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc)

Task: {647329C2-5F73-4B10-8C6A-EC4CD4683F42} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23965992 2018-11-03] (Microsoft Corporation -> Microsoft Corporation)

Task: {6858A292-A730-42F0-B4BE-EA112FEA0674} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-12-26] (Google Inc -> Google Inc.)

Task: {78DB798B-E897-474A-9E11-3F90790F5D37} - System32\Tasks\Live Boost Process Governor => C:\Program Files\Norton Utilities Premium\x64\LBgovernor.exe [1061544 2020-06-28] (Symantec Corporation -> Symantec Corporation)

Task: {79541ADF-1A72-4E14-B53B-C4BD4E5B65D2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [191064 2016-02-17] (Hewlett-Packard Company -> Hewlett-Packard)

Task: {82A986A1-6710-43D6-B320-FFDF6BAACEBF} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {8783DB72-D09A-4BE9-8ADF-D8554EF5F083} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {87EF3913-71E6-4D7D-996E-2921F954E645} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {8F534BEC-05BA-46CA-8039-18C1AF470E9B} - System32\Tasks\Norton 360\Norton 360 Error Processor => C:\Program Files\Norton Security\Engine\22.21.1.151\SymErr.exe [115608 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc)

Task: {9B6FD2BB-95BF-4B0B-9731-51ACD5B1C14B} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {9C6E7B47-77D3-48AC-96DA-478EB1EC6BE1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23965992 2018-11-03] (Microsoft Corporation -> Microsoft Corporation)

Task: {A4DA0A33-53B9-4EDC-8F6F-DE49108917DE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [88304 2016-02-18] (Hewlett-Packard Company -> Hewlett-Packard)

Task: {A7032469-EE9E-4E52-BE94-D9AEEE74FCEC} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {A7329DC2-8C98-4915-9278-B8BBE88B5FF0} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {A90DF7B9-21F8-441E-8660-85175B190F02} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {AC8B0D67-4CA3-47C6-BC01-4069326F46CB} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton 360\Upgrade.exe [2344568 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

Task: {AFDAC582-9CE0-4CAB-8C8A-7A15266B528A} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}

Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40b4-8963-D3C761B18371}

Task: {B4309C7B-6366-4ADB-BA74-49C440DEDB2C} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {B4A0033B-B427-4318-BEE9-AB58AAD37F4E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27168840 2021-03-05] (Piriform Software Ltd -> Piriform Software Ltd)

Task: {B9E00FC8-9DCA-44C1-B465-02AEF35A985C} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {BDF6A506-2A61-4021-BBDA-9E02078068BC} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}

Task: {BFA158B0-526E-4198-BF94-715AF779DAED} - System32\Tasks\{E0D4DAB0-84DC-4D64-95DD-DBB5159AF7AF} => C:\Windows\system32\pcalua.exe -a C:\Users\user\Downloads\sp61430.exe -d C:\Users\user\Downloads

Task: {C0D0F622-8498-4D07-8238-FC95EABEE0BB} - System32\Tasks\Microsoft\Windows\End Of Support\Notify1 => C:\WINDOWS\system32\sipnotify.exe

Task: {CDD1B6BE-034C-4973-95F8-F5F060F1AE35} - System32\Tasks\Norton 360 Premier\Norton 360 Premier Error Analyzer => C:\Program Files\Norton Security\Engine\22.16.2.22\SymErr.exe

Task: {E7CFB0B0-6116-42D4-9E33-A2979F25AF0E} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe

Task: {E811DC46-661E-4305-BD12-5FBAADB9C220} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)

Task: {ECFFCA3B-5219-4EDC-BC6E-6118B39710B0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {F9C4123E-E9AB-4B45-B250-40DB47D5453C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-12-26] (Google Inc -> Google Inc.)

Task: {FD6334E4-DC89-43B9-BBF6-36D509D7C436} - System32\Tasks\TUDsDownloader => C:\Program Files\Norton Utilities Premium\activesync.exe [245928 2020-06-28] (Symantec Corporation -> Symantec Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\HPCeeScheduleForuser.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\..\Interfaces\{0E39E1E8-2B73-46B3-94DB-06C0392A3EC9}: [DhcpNameServer] 172.16.1.1

Tcpip\..\Interfaces\{26C9143D-B67A-4073-BB5B-7867EEF32D06}: [DhcpNameServer] 172.16.1.1

Tcpip\..\Interfaces\{4C0A3F67-8F43-4952-ACE2-CB9430133B58}: [DhcpNameServer] 172.16.1.1

Tcpip\..\Interfaces\{5E3ADCA4-1048-4475-8A01-CA85BEA714E5}: [DhcpNameServer] 172.16.1.1

Tcpip\..\Interfaces\{6581661C-0625-4FAB-A8A9-470FE18FF3AB}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{756249F5-6681-4D19-9DD4-D027B79D05B9}: [DhcpNameServer] 172.16.1.1

Tcpip\..\Interfaces\{A66331CA-914C-4D27-8339-8C7C59527423}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{B08DB118-1104-45B8-A231-44A863FC2B52}: [DhcpNameServer] 172.16.1.1

Tcpip\..\Interfaces\{E1669D0B-B0C1-4106-A848-D5E2ADF8FF1E}: [DhcpNameServer] 172.16.1.1
 

Edge: 

=======

Edge Profile: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default [2021-03-14]

Edge Notifications: Default -> hxxps://www.schwaebische.de
 

FireFox:

========

FF DefaultProfile: 0xj4nb1f.default

FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\0xj4nb1f.default [2021-03-14]

FF Extension: (Norton Safe Search) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\0xj4nb1f.default\Extensions\nortonsafesearch_ul_2@symantec.com.xpi [2020-10-25] [UpdateUrl:hxxps://static.nortoncdn.com/idscp/firefox/nsss/ds_modified/updates.json]

FF Extension: (Norton Safe Web) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\0xj4nb1f.default\Extensions\nortonsafeweb@symantec.com.xpi [2021-03-05]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-12-01] (Internal - Intel® Identity Protection Technology Software -> Intel Corporation) [Datei ist nicht signiert]

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-12-01] (Internal - Intel® Identity Protection Technology Software -> Intel Corporation) [Datei ist nicht signiert]

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.12 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-03-06] (Adobe Inc. -> Adobe Systems Inc.)
 

Chrome: 

=======

CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default [2021-03-14]

CHR StartupUrls: Default -> "hxxp://www.google.com"

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-05-05]

CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-05]

CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security\Engine\22.21.1.151\Exts\Chrome.crx <nicht gefunden>

CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]

CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security\Engine\22.21.1.151\Exts\Chrome.crx <nicht gefunden>

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)

R2 Backupper Service; C:\Program Files (x86)\AOMEI\AOMEI Backupper 5.9.0\ABService.exe [898216 2020-07-31] (AOMEI International Network Limited -> AOMEI Tech Co., Ltd.)

R2 BtSwitcherService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe [64216 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9662752 2018-11-03] (Microsoft Corporation -> Microsoft Corporation)

R2 CSRBtAudioService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe [465624 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R2 CsrBtOBEX-Dienst; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe [1041616 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R2 CsrBtService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe [825032 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

S3 HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [13824 2011-10-17] (Hewlett-Packard Company) [Datei ist nicht signiert]

R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [164864 2012-05-02] (HP) [Datei ist nicht signiert]

R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [683296 2014-05-16] (Hewlett-Packard Company -> Hewlett-Packard Company)

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [26680 2016-02-18] (Hewlett-Packard Company -> Hewlett-Packard Company)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [Datei ist nicht signiert]

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-03-14] (Malwarebytes Inc -> Malwarebytes)

R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [959752 2021-03-12] (McAfee, LLC -> McAfee, LLC)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2011-04-13] (Hewlett-Packard) [Datei ist nicht signiert]

R2 NortonSecurity; C:\Program Files\Norton Security\Engine\22.21.1.151\NortonSecurity.exe [343296 2021-02-22] (NortonLifeLock Inc. -> Symantec Corporation)

R2 nsWscSvc; C:\Program Files\Norton Security\Engine\22.21.1.151\nsWscSvc.exe [1054496 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

R2 NVWMI; C:\WINDOWS\system32\nvwmi64.exe [4408432 2017-10-20] (NVIDIA Corporation -> NVIDIA Corporation)

R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)

R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [66048 2011-04-13] (Hewlett-Packard) [Datei ist nicht signiert]

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6264144 2021-01-21] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [12462784 2015-11-25] (VMware, Inc. -> )

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)

R2 WMCoreService; C:\Program Files (x86)\Ericsson\Mobile Broadband Drivers\WMCore\mini_WMCore.exe [586280 2011-03-03] (Ericsson AB -> Ericsson AB)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R0 ambakdrv; C:\WINDOWS\System32\ambakdrv.sys [51120 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )

R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [171952 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )

R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [38320 2017-09-01] (CHENGDU AOMEI Tech Co., Ltd. -> )

S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)

R1 BHDrvx64; C:\Program Files\Norton Security\NortonData\22.16.2.22\Definitions\BASHDefs\20210310.005\BHDrvx64.sys [1991536 2020-11-03] (Symantec Corporation -> Broadcom)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [231936 2019-10-07] (Microsoft Corporation) [Datei ist nicht signiert]

S3 BTWDPAN; C:\WINDOWS\System32\DRIVERS\btwdpan.sys [89640 2012-02-01] (Broadcom Corporation -> Broadcom Corporation.)

R1 ccSet_NGC; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\ccSetx64.sys [192248 2021-02-22] (Symantec Corporation -> Symantec Corporation)

R3 CsrBtPort; C:\WINDOWS\system32\DRIVERS\CsrBtPort.sys [2784968 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R3 csrpan; C:\WINDOWS\System32\drivers\csrpan.sys [39616 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R3 csrserial; C:\WINDOWS\system32\DRIVERS\csrserial.sys [61128 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R3 csrusb; C:\WINDOWS\System32\Drivers\csrusb.sys [47296 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R3 csrusbfilter; C:\WINDOWS\System32\Drivers\csrusbfilter.sys [23752 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [516168 2021-02-02] (Symantec Corporation -> Broadcom)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153672 2021-02-11] (Symantec Corporation -> Broadcom)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2021-03-14] (Malwarebytes Corporation -> Malwarebytes)

R1 IDSVia64; C:\Program Files\Norton Security\NortonData\22.16.2.22\Definitions\IPSDefs\20210311.061\IDSvia64.sys [1479536 2021-01-20] (Symantec Corporation -> Broadcom)

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220616 2021-03-14] (Malwarebytes Inc -> Malwarebytes)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-03-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198248 2021-03-14] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77496 2021-03-14] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-03-14] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [155360 2021-03-14] (Malwarebytes Inc -> Malwarebytes)

R1 SRTSP; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\SRTSP64.SYS [889712 2021-02-22] (Symantec Corporation -> Symantec Corporation)

R1 SRTSPX; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\SRTSPX64.SYS [51056 2021-02-22] (Symantec Corporation -> Symantec Corporation)

R0 SymEFASI; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\SYMEFASI64.SYS [2060656 2021-02-22] (Symantec Corporation -> Broadcom)

S0 SymELAM; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\SymELAM.sys [25080 2021-02-22] (Microsoft Windows Early Launch Anti-malware Publisher -> Broadcom Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [100064 2019-03-31] (Symantec Corporation -> Symantec Corporation)

R3 SymEvnt; C:\Program Files\Norton Security\NortonData\22.16.2.22\SymPlatform\SymEvnt.sys [712368 2020-01-13] (Symantec Corporation -> Symantec Corporation)

R1 SymIRON; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\Ironx64.SYS [316488 2021-02-22] (Symantec Corporation -> Symantec Corporation)

R1 SymNetS; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\symnets.sys [575328 2021-02-22] (Symantec Corporation -> Symantec Corporation)

R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [48832 2015-11-25] (VMware, Inc. -> VMware, Inc.)

R2 VMparport; C:\WINDOWS\system32\drivers\VMparport.sys [31936 2015-11-25] (VMware, Inc. -> VMware, Inc.)

R0 vsock; C:\WINDOWS\System32\drivers\vsock.sys [75512 2015-11-05] (VMware, Inc. -> VMware, Inc.)

R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [34520 2015-07-09] (VMware, Inc. -> VMware, Inc.)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [34944 2018-05-11] (HP Inc. -> HP)

S3 wpCtrlDrv_NGC; C:\WINDOWS\System32\drivers\NGCx64\1615010.097\wpCtrlDrv.sys [1013792 2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

U3 idsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2021-03-14 20:53 - 2021-03-14 20:53 - 000039101 _____ C:\Users\user\Downloads\FRST.txt

2021-03-14 20:49 - 2021-03-14 20:49 - 000198248 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys

2021-03-14 20:49 - 2021-03-14 20:49 - 000155360 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2021-03-14 20:49 - 2021-03-14 20:49 - 000077496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2021-03-14 20:49 - 2021-03-14 20:49 - 000000000 ____D C:\Users\user\AppData\LocalLow\IGDump

2021-03-14 20:48 - 2021-03-14 20:49 - 000007578 _____ C:\Users\user\Downloads\Fixlog.txt

2021-03-14 20:48 - 2021-03-14 20:48 - 002300928 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe

2021-03-14 20:48 - 2021-03-14 20:48 - 000000022 _____ C:\Users\user\Desktop\14.03.2021_20.48.43.zip

2021-03-14 20:42 - 2021-03-14 20:43 - 000000000 ____D C:\Users\user\Desktop\FRST-OlderVersion

2021-03-14 12:23 - 2021-03-14 12:23 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation

2021-03-14 09:46 - 2021-03-14 09:46 - 000002648 _____ C:\Users\user\Desktop\AdwCleaner[C00].txt

2021-03-14 09:44 - 2021-03-14 09:45 - 000000000 ___DC C:\AdwCleaner

2021-03-14 09:43 - 2021-03-14 09:43 - 008463216 _____ (Malwarebytes) C:\Users\user\Downloads\adwcleaner_8.1.exe

2021-03-14 09:42 - 2021-03-14 09:42 - 000004939 _____ C:\Users\user\Desktop\MBAM.txt

2021-03-14 09:35 - 2021-03-14 09:35 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2021-03-14 09:35 - 2021-03-14 09:35 - 000220616 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys

2021-03-14 09:35 - 2021-03-14 09:35 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

2021-03-14 09:35 - 2021-03-14 09:35 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys

2021-03-14 09:35 - 2021-03-14 09:35 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk

2021-03-14 09:35 - 2021-03-14 09:35 - 000002021 _____ C:\ProgramData\Desktop\Malwarebytes.lnk

2021-03-14 09:35 - 2021-03-14 09:35 - 000000000 ____D C:\Users\user\AppData\Local\mbam

2021-03-14 09:35 - 2021-03-14 09:35 - 000000000 ____D C:\ProgramData\Malwarebytes

2021-03-14 09:35 - 2021-03-14 09:35 - 000000000 ____D C:\Program Files\Malwarebytes

2021-03-14 09:34 - 2021-03-14 09:34 - 002084016 _____ (Malwarebytes) C:\Users\user\Downloads\MBSetup.exe

2021-03-14 09:07 - 2021-03-14 09:57 - 000040718 _____ C:\Users\user\Desktop\Addition.txt

2021-03-14 09:06 - 2021-03-14 10:03 - 000053993 _____ C:\Users\user\Desktop\FRST.txt

2021-03-14 09:05 - 2021-03-14 20:53 - 000000000 ___DC C:\FRST

2021-03-14 08:34 - 2021-03-14 09:36 - 000000818 _____ C:\WINDOWS\ntbtlog.txt

2021-03-14 08:32 - 2021-03-14 08:32 - 009645984 _____ (NortonLifeLock Inc.) C:\Users\user\Desktop\NPE.exe

2021-03-13 12:04 - 2021-03-14 08:34 - 000000344 _____ C:\WINDOWS\Tasks\HPCeeScheduleForuser.job

2021-03-13 12:04 - 2021-03-13 12:04 - 000003232 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForuser

2021-03-13 10:25 - 2021-03-13 10:31 - 000000000 ____D C:\Users\user\Desktop\F.Fetzer KG

2021-03-12 21:56 - 2021-03-12 21:57 - 000000000 ____D C:\Program Files\McAfee

2021-03-12 21:56 - 2021-03-12 21:56 - 000178412 _____ C:\Users\user\Downloads\Erste_Schritte.pdf

2021-03-12 21:56 - 2021-03-12 21:56 - 000001190 _____ C:\ProgramData\Desktop\Audiograbber.lnk

2021-03-12 21:56 - 2021-03-12 21:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber

2021-03-12 21:56 - 2021-03-12 21:56 - 000000000 ____D C:\ProgramData\McAfee

2021-03-12 21:56 - 2021-03-12 21:56 - 000000000 ____D C:\Program Files (x86)\Audiograbber

2021-03-12 21:36 - 2021-03-12 21:36 - 000000000 ____D C:\ProgramData\DigitalWave.ApplicationUpdater_files

2021-03-12 21:36 - 2021-03-12 21:36 - 000000000 ____D C:\Program Files (x86)\FreeCodecPack

2021-03-12 21:35 - 2021-03-14 09:57 - 000000000 ____D C:\Users\user\AppData\Roaming\DVDVideoSoft

2021-03-08 21:52 - 2021-03-08 21:52 - 000265990 _____ C:\Users\user\Desktop\Bestellung Kats Audi.pdf

2021-03-08 08:00 - 2021-03-14 19:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\Norton 360

2021-03-08 08:00 - 2021-03-08 08:18 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security

2021-03-08 08:00 - 2021-03-08 08:00 - 000003378 _____ C:\WINDOWS\system32\Tasks\Norton WSC Integration

2021-02-26 14:45 - 2021-02-26 14:45 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla

2021-02-22 21:24 - 2021-02-22 21:24 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2021-02-22 21:24 - 2021-02-22 21:24 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2021-02-22 21:24 - 2021-02-22 21:24 - 000232752 _____ C:\WINDOWS\system32\containerdevicemanagement.dll

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth18.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth17.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth16.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth15.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin

2021-02-22 21:24 - 2021-02-22 21:24 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin

2021-02-16 19:05 - 2021-02-16 19:05 - 000780120 _____ C:\Users\user\Downloads\Manual_PC_15-11_DE.pdf

2021-02-14 07:22 - 2021-02-14 07:22 - 003404923 _____ C:\Users\user\Downloads\Brochüre-Fortelock.pdf

2021-02-14 07:22 - 2021-02-14 07:22 - 001294106 _____ C:\Users\user\Downloads\Fortelock-INDUSTRY-LIGHT-ECO.pdf
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2021-03-14 20:51 - 2016-10-26 21:17 - 000000000 ____D C:\Program Files\CCleaner

2021-03-14 20:51 - 2008-03-27 12:59 - 000000000 ____D C:\ProgramData\Mozilla

2021-03-14 20:50 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2021-03-14 20:50 - 2016-12-13 17:01 - 000000000 ____D C:\Users\user\AppData\LocalLow\Mozilla

2021-03-14 20:49 - 2020-08-14 07:00 - 000000416 _____ C:\WINDOWS\SysWOW64\AbBakConfig.dat

2021-03-14 20:49 - 2020-08-14 07:00 - 000000150 _____ C:\WINDOWS\SysWOW64\winsevr.dat

2021-03-14 20:49 - 2020-08-02 16:31 - 000000000 ____D C:\ProgramData\VMware

2021-03-14 20:49 - 2020-02-16 16:28 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2021-03-14 20:49 - 2019-03-19 05:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI

2021-03-14 20:49 - 2016-01-18 13:20 - 000000000 ____D C:\ProgramData\NVIDIA

2021-03-14 20:48 - 2020-02-21 18:05 - 000000000 ____D C:\Users\user\AppData\LocalLow\Temp

2021-03-14 20:44 - 2019-03-19 05:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM

2021-03-14 20:40 - 2020-02-16 16:17 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2021-03-14 18:43 - 2021-02-07 07:35 - 000013191 _____ C:\Users\user\Desktop\Laufpensum.xlsx

2021-03-14 16:16 - 2016-12-28 07:34 - 000000000 ____D C:\01 Thomas

2021-03-14 14:18 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp

2021-03-14 12:02 - 2020-02-16 16:25 - 001938502 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2021-03-14 12:02 - 2019-03-19 13:16 - 000825560 _____ C:\WINDOWS\system32\perfh007.dat

2021-03-14 12:02 - 2019-03-19 13:16 - 000184786 _____ C:\WINDOWS\system32\perfc007.dat

2021-03-14 12:02 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF

2021-03-14 09:46 - 2015-10-13 15:34 - 000000000 ____D C:\Users\user\AppData\Local\Downloaded Installations

2021-03-14 09:41 - 2015-12-01 11:12 - 000000000 ____D C:\ProgramData\Package Cache

2021-03-14 09:35 - 2019-03-19 05:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2021-03-14 08:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness

2021-03-14 08:48 - 2018-05-01 09:32 - 000000000 ____D C:\Users\user\AppData\Local\NPE

2021-03-14 08:35 - 2018-05-01 09:33 - 000000000 ____D C:\NPE

2021-03-14 08:34 - 2020-04-05 06:46 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

2021-03-14 08:34 - 2008-03-27 12:59 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2021-03-14 08:03 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps

2021-03-13 10:31 - 2021-01-05 15:46 - 000000000 ____D C:\Users\user\Desktop\914 Einspritzanlage

2021-03-13 08:36 - 2008-03-27 11:58 - 000000000 ____D C:\Users\user\AppData\Local\VirtualStore

2021-03-12 21:36 - 2019-02-03 20:33 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2021-03-12 15:45 - 2020-06-21 13:48 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2021-03-11 20:57 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ServiceState

2021-03-11 20:41 - 2019-12-26 11:32 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2021-03-11 20:41 - 2019-12-26 11:32 - 000002252 _____ C:\ProgramData\Desktop\Google Chrome.lnk

2021-03-10 23:09 - 2020-06-28 12:53 - 000000000 ____D C:\Program Files\Norton Utilities Premium

2021-03-10 21:43 - 2014-12-27 14:23 - 000000000 ____D C:\WINDOWS\system32\MRT

2021-03-10 21:41 - 2014-12-27 14:23 - 131005360 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2021-03-08 08:44 - 2016-10-26 21:20 - 000000000 ____D C:\Program Files\Common Files\AV

2021-03-08 08:18 - 2018-11-19 13:06 - 000002429 _____ C:\ProgramData\Desktop\Norton Security.lnk

2021-03-08 08:00 - 2018-11-19 13:06 - 000000000 ____D C:\WINDOWS\system32\Drivers\NGCx64

2021-03-08 07:30 - 2016-10-26 21:23 - 000000000 ____D C:\Users\user\AppData\Roaming\vlc

2021-03-06 20:48 - 2020-02-16 16:28 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update

2021-02-28 22:04 - 2020-02-16 16:37 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2636535521-2909126409-823621586-1000

2021-02-28 22:04 - 2020-02-16 16:25 - 000002413 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2021-02-28 22:04 - 2016-11-02 20:27 - 000000000 ___RD C:\Users\user\OneDrive

2021-02-26 14:45 - 2008-03-27 12:59 - 000001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2021-02-26 06:53 - 2016-10-26 21:23 - 000001139 _____ C:\ProgramData\Desktop\VLC media player.lnk

2021-02-26 06:51 - 2020-06-21 13:48 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2021-02-26 06:51 - 2020-06-21 13:48 - 000003576 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2021-02-23 16:25 - 2020-02-16 16:35 - 000000000 ___RD C:\Users\user\3D Objects

2021-02-23 16:25 - 2020-02-16 16:17 - 000309168 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\oobe

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\es-MX

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Dism

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr

2021-02-22 21:47 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Common Files\System

2021-02-22 21:26 - 2019-03-19 13:19 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll

2021-02-22 21:26 - 2019-03-19 13:19 - 000019469 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml

2021-02-22 21:24 - 2008-03-27 11:52 - 000410822 __RSH C:\bootmgr

2021-02-21 07:37 - 2020-08-23 06:57 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

2021-02-20 06:15 - 2019-06-26 18:16 - 000000000 ____D C:\Users\user\AppData\Local\Greenshot

2021-02-13 10:00 - 2020-02-16 16:28 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

--- --- ---

FRST Additions Logfile:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 14-03-2021

durchgeführt von user (14-03-2021 20:54:39)

Gestartet von C:\Users\user\Downloads

Windows 10 Pro Version 1909 18363.1379 (X64) (2020-02-16 15:28:30)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-2636535521-2909126409-823621586-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2636535521-2909126409-823621586-503 - Limited - Disabled)

Gast (S-1-5-21-2636535521-2909126409-823621586-501 - Limited - Enabled) => C:\Users\Gast

HomeGroupUser$ (S-1-5-21-2636535521-2909126409-823621586-1002 - Limited - Enabled)

user (S-1-5-21-2636535521-2909126409-823621586-1000 - Administrator - Enabled) => C:\Users\user

WDAGUtilityAccount (S-1-5-21-2636535521-2909126409-823621586-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Norton 360 (Enabled - Up to date) {1122B19A-E671-38EC-8EAC-87048FD4528D}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}

AV: Norton 360 (Enabled - Up to date) {9E3FD331-C4C2-7AC4-0537-131EEF1B1F8A}

AS: Norton 360 (Enabled - Up to date) {AA43507E-C04B-3762-B41C-BC76F4531830}

AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Norton 360 (Enabled) {A6045214-8EAD-7B9C-2E68-BA2B11C858F1}

FW: Norton 360 (Enabled) {291930BF-AC1E-39B4-A5F3-2E31710715F6}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

4K Video Downloader (HKLM\...\{A730612F-DC69-4EEC-AB92-0366346D9CCD}) (Version: 4.14.1.4020 - Open Media LLC)

64 Bit HP CIO Components Installer (HKLM\...\{BC741628-0AFC-405C-8946-DD46D1005A0A}) (Version: 8.2.4 - Hewlett-Packard) Hidden

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 21.001.20145 - Adobe Systems Incorporated)

Alcor Micro Smart Card Reader Driver (HKLM-x32\...\{F24F876B-7D71-4BD6-88E9-614D3BB84242}) (Version: 1.7.42.0 - Alcor Micro Corp.) Hidden

Alcor Micro Smart Card Reader Driver (HKLM-x32\...\SZCCID) (Version: 1.7.42.0 - Alcor Micro Corp.)

AOMEI Backupper 5.9 (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1) (Version:  - AOMEI Technology Co., Ltd.)

Audiograbber (HKLM-x32\...\Audiograbber) (Version: 1.83 (2020 Edition) - Audiograbber)

Broadcom Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.5300 - Broadcom Corporation)

CCleaner (HKLM\...\CCleaner) (Version: 5.77 - Piriform)

CSR Harmony Wireless Software Stack (HKLM\...\{17DEA095-8EE1-49A2-AC5A-9663DB098FA9}) (Version: 2.1.63.0 - CSR Plc.)

FreeCAD 0.16 - A free open source CAD system (HKLM\...\FreeCAD 0.16) (Version: 0.16.6700 - Juergen Riegel)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 89.0.4389.82 - Google LLC)

Greenshot 1.2.10.6 (HKLM\...\Greenshot_is1) (Version: 1.2.10.6 - Greenshot)

HP 3D DriveGuard (HKLM\...\{B64F0818-316F-4237-8CB4-35BC2DA784C2}) (Version: 5.1.12.1 - Hewlett-Packard Company)

HP Connection Manager (HKLM-x32\...\{F0809EF3-DE1B-4A3C-9825-D4ABD1BA06BC}) (Version: 4.8.10.1 - Hewlett-Packard Company)

HP HD Webcam Driver (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 6.0.1113.1_WHQL - Sonix)

HP Hotkey Support (HKLM-x32\...\{57FA60DA-585F-456A-B80E-17D1CDD22A30}) (Version: 5.0.27.1 - Hewlett-Packard Company)

HP LaserJet 200 color MFP M276 (HKLM-x32\...\{CC38C23C-7824-4DBB-AC73-997CD0BBFEC7}) (Version: 5.0.14057.1503 - Hewlett-Packard)

HP Mobile Broadband Drivers (HKLM-x32\...\{646E8C34-C88B-42F9-9F41-985A801219E1}) (Version: 6.3.5.3 - Ericsson AB)

HP SoftPaq Download Manager (HKLM-x32\...\{f41e84dd-bf67-4276-a972-df8f69ff28b6}) (Version: 4.0.0.0 - Hewlett-Packard Company)

HP Software Framework (HKLM-x32\...\{D2462056-BA75-4B2C-8267-DFEA2B6AC4AE}) (Version: 4.6.10.1 - Hewlett-Packard Company)

HP Support Assistant (HKLM-x32\...\{78E2C850-ADA6-420D-BA35-2F4A9BE733CC}) (Version: 8.2.8.25 - HP)

HP Support Solutions Framework (HKLM-x32\...\{77FA4949-7EC5-43ED-8EDA-EE537D7DB878}) (Version: 12.2.8.17 - HP)

HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)

HPLaserJet200color-MFPM276_HelpLearnCenter_SI (HKLM-x32\...\{0F044C7A-6EE1-4F03-90AC-329AAF2FCF12}) (Version: 1.01.0000 - Hewlett-Packard)

hppM276LaserJetService (HKLM-x32\...\{D6610387-8E8B-48ED-AB1C-0D38DFE31C55}) (Version: 001.019.00639 - Hewlett-Packard) Hidden

hpStatusAlerts (HKLM-x32\...\{46A99EAE-98DA-4BE5-94C3-D41BA4C266DA}) (Version: 050.037.00142 - Hewlett Packard) Hidden

hpStatusAlertsM276 (HKLM-x32\...\{FFD4184D-7EC6-476E-9A72-E83412AB9D3B}) (Version: 050.034.00131 - Hewlett-Packard) Hidden

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.30.1349 - Intel Corporation)

Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 17.3 - Intel)

Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)

Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.10.255 - Intel Corporation)

Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000110-0210-1031-84C8-B8D95FA3C8C3}) (Version: 21.110.0.3 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{105fa5c4-72e1-41f2-a82c-884d8aa4b381}) (Version: 16.6.0 - Intel Corporation)

JMicron 1394 Filter Driver (HKLM-x32\...\{13C96625-28E4-4c58-ADE0-CDAFC64752EB}) (Version: 1.00.25.03 - JMicron Technology Corp.)

JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.76.1 - JMicron Technology Corp.)

Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.13 - Magical Jelly Bean)

Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 89.0.774.50 - Microsoft Corporation)

Microsoft Office Home and Student 2016 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 16.0.7369.2038 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2636535521-2909126409-823621586-1000\...\OneDriveSetup.exe) (Version: 21.016.0124.0003 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{BAB9FCC5-1506-4B4F-BFCA-EDE0BDB86C21}) (Version: 2.75.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.20.27508 (HKLM-x32\...\{7b178cda-9740-4701-a92a-f168d213b343}) (Version: 14.20.27508.1 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.20.27508 (HKLM-x32\...\{8c3f057e-d6a6-4338-ac6a-f1c795a6577b}) (Version: 14.20.27508.1 - Microsoft Corporation)

Mozilla Firefox 86.0 (x64 de) (HKLM\...\Mozilla Firefox 86.0 (x64 de)) (Version: 86.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 86.0.0.7723 - Mozilla)

Norton 360 (HKLM-x32\...\NGC) (Version: 22.21.1.151 - Symantec Corporation)

Norton Utilities Premium (HKLM\...\{36896A40-D958-486B-8A43-31A41E129FE2}) (Version: 17.0.3.658 - NortonLifeLock)

NVIDIA Grafiktreiber 385.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 385.73 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)

NVIDIA nView 148.47 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 148.47 - NVIDIA Corporation)

NVIDIA WMI 2.30.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVWMI) (Version: 2.30.0 - NVIDIA Corporation)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.7369.2038 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.7369.2038 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.7369.2038 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.7369.2038 - Microsoft Corporation) Hidden

PDF24 Creator 9.2.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 9.2.2 - PDF24.org)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.36.0 - Renesas Electronics Corporation) Hidden

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.36.0 - Renesas Electronics Corporation)

Skype Version 8.59 (HKLM-x32\...\Skype_is1) (Version: 8.59 - Skype Technologies S.A.)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.65 - Synaptics Incorporated)

TAHUNA TOOL Version 4.2.4.0 (HKLM-x32\...\{805FBA43-88AB-4E02-A16C-560F7D0D7CE5}_is1) (Version: 4.2.4.0 - GPS Tuner)

Validity Fingerprint Sensor Driver (HKLM\...\{ADAA7361-54B8-4FC8-804E-94EC6C11ED68}) (Version: 4.5.133.0 - Validity Sensors, Inc.)

VCDS DRV 18.9 (HKLM-x32\...\VCDS DRV) (Version: DRV 18.9.1 - Ross-Tech, LLC)

VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.12 - VideoLAN)

Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - LunarG, Inc.) Hidden

WebAdvisor von McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.200 - McAfee, LLC)

Windows 10-Update-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22925 - Microsoft Corporation)

Windows-Treiberpaket - Auto-Intern USB-Treiber (01/27/2014 2.10.00) (HKLM\...\8A6877F9F5E2BDF3ED64EF602BCC6C098A365E38) (Version: 01/27/2014 2.10.00 - Auto-Intern)

Windows-Treiberpaket - Auto-Intern Virtueller COM-Port-Treiber (01/27/2014 2.10.00) (HKLM\...\C4AF7B4D22D910BBA580416C3052FEFD8D702132) (Version: 01/27/2014 2.10.00 - Auto-Intern)

Windows-Treiberpaket - Ross-Tech USB Driver Package (05/12/2014 2.10.00) (HKLM\...\88B02C4BD09AA7910C55C4E74BE8F036244B5CF9) (Version: 05/12/2014 2.10.00 - Ross-Tech)

WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
 

Packages:

=========

HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_122.3.838.0_x64__v10z8vjag6ke6 [2021-02-27] (HP Inc.)

Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-06-22] (Microsoft Corporation)

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.1252.0_x64__8wekyb3d8bbwe [2021-02-01] (Microsoft Studios) [MS Ad]
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers-x32: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers-x32: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers-x32: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers1: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers1: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.21.1.151\NavShExt.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers2: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.21.1.151\NavShExt.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Workstation\vmdkShellExt.dll [2015-11-25] (VMware, Inc. -> VMware, Inc.)

ContextMenuHandlers2: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Workstation\x64\vmdkShellExt64.dll [2015-11-25] (VMware, Inc. -> VMware, Inc.)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-03-14] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers5: [00nView] -> {1E9B04FB-F9E5-4718-997B-B8DA88302A48} => C:\Program Files\NVIDIA Corporation\nview\nvshell.dll [2017-10-20] (NVIDIA Corporation -> )

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-09-25] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.21.1.151\buShell.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-03-14] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers6: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.21.1.151\NavShExt.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::

WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]

WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2009-09-16 17:44 - 2009-09-16 17:44 - 000153088 _____ (Hewlett Packard) [Datei ist nicht signiert] C:\WINDOWS\System32\hptcpmib.dll

2009-09-16 17:45 - 2009-09-16 17:45 - 000331264 _____ (Hewlett Packard) [Datei ist nicht signiert] C:\WINDOWS\System32\HpTcpMon.dll

2009-09-16 10:44 - 2009-09-16 10:44 - 000132096 _____ (Hewlett Packard) [Datei ist nicht signiert] C:\WINDOWS\System32\hpzjrd01.dll

2012-05-02 20:02 - 2012-05-02 20:02 - 000041472 _____ (Hewlett-Packard Company) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\HP\HPLaserJetService\HPHTTPProxy.dll

2012-05-02 20:02 - 2012-05-02 20:02 - 000073728 _____ (Hewlett-Packard Company) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\HP\HPLaserJetService\HPTools.dll

2012-05-02 20:02 - 2012-05-02 20:02 - 001218560 _____ (Hewlett-Packard Company) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\HP\HPLaserJetService\LEDMXMLObjects.dll

2013-03-26 20:12 - 2013-03-26 20:12 - 000056832 _____ (Hewlett-Packard Development Company, L.P.) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HP.Mobile.Shared.dll

2011-04-13 15:08 - 2011-04-13 15:08 - 000050688 _____ (Hewlett-Packard) [Datei ist nicht signiert] c:\windows\system32\hpzinw12.dll

2011-04-13 15:08 - 2011-04-13 15:08 - 000066048 _____ (Hewlett-Packard) [Datei ist nicht signiert] c:\windows\system32\hpzipm12.dll

2012-05-02 20:02 - 2012-05-02 20:02 - 000034816 _____ (HP) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\HP\HPLaserJetService\HPServiceCommunicator.dll

2015-10-13 15:37 - 2015-10-13 15:36 - 000073728 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.dll

2009-09-16 17:45 - 2009-09-16 17:45 - 000317440 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\System32\HPTcpMUI.dll

2020-02-16 16:16 - 2020-02-16 16:16 - 000065536 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\WinSxS\x86_microsoft.vc80.openmp_1fc8b3b9a1e18e3b_8.0.50727.6195_none_3b1209fdc9ac7774\vcomp.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

BHO: Norton Password Manager -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine\22.21.1.151\coIEPlg.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2021-03-12] (McAfee, LLC -> McAfee, LLC)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Norton Password Manager -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine32\22.21.1.151\coIEPlg.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2021-03-12] (McAfee, LLC -> McAfee, LLC)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-02-17] (Hewlett-Packard Company -> HP)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine\22.21.1.151\coIEPlg.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine32\22.21.1.151\coIEPlg.dll [2021-02-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-02] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2011-01-19] (Skype Technologies SA -> Skype Technologies)
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2021-03-14 20:48 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1       localhost
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;%SYSTEMROOT%\SYSTEM32\WINDOWSPOWERSHELL\V1.0\;C:\Program Files\WIDCOMM\Bluetooth Software\;C:\Program Files\WIDCOMM\Bluetooth Software\syswow64;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\AOMEI\AOMEI Backupper 5.9.0

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\user\AppData\Local\Microsoft\Windows\Themes\DE-wp4.jpg

HKU\S-1-5-21-2636535521-2909126409-823621586-501\Control Panel\Desktop\\Wallpaper -> C:\Users\Gast\AppData\Local\Microsoft\Windows\Themes\DE-wp6.jpg

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Keine Datei)

 ist aktiviert.
 

Network Binding:

=============

VMware Network Adapter VMnet1: VMware Bridge Protocol -> vmware_bridge (disabled) 

VMware Network Adapter VMnet8: VMware Bridge Protocol -> vmware_bridge (disabled) 

Drahtlosnetzwerkverbindung 11: VMware Bridge Protocol -> vmware_bridge (enabled) 

Bluetooth-Netzwerkverbindung 5: VMware Bridge Protocol -> vmware_bridge (enabled) 

LAN-Verbindung 4: VMware Bridge Protocol -> vmware_bridge (enabled) 
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

MSCONFIG\startupfolder: C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^An OneNote senden.lnk => C:\Windows\pss\An OneNote senden.lnk.Startup

MSCONFIG\startupfolder: C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Ross-Tech VCDS Updater-DRV24.lnk => C:\Windows\pss\Ross-Tech VCDS Updater-DRV24.lnk.Startup

HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-2636535521-2909126409-823621586-1000\...\StartupApproved\Run: => "Skype for Desktop"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{DB6ED88B-D88F-4E61-8EEC-B85DD3A88E16}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper 5.9.0\ABService.exe (AOMEI International Network Limited -> AOMEI Tech Co., Ltd.)

FirewallRules: [{753802FC-1FCA-4048-A114-AFF4D3E0A0C2}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper 5.9.0\ABService.exe (AOMEI International Network Limited -> AOMEI Tech Co., Ltd.)
 

==================== Wiederherstellungspunkte =========================
 

21-02-2021 07:36:55 Windows Update

01-03-2021 07:19:02 Geplanter Prüfpunkt

10-03-2021 21:34:15 Windows Update

14-03-2021 08:02:26 Windows Update
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (03/14/2021 08:53:45 PM) (Source: HP Active Health) (EventID: 91) (User: )

Description: Unhandled Exception. Application will terminate immediately.

System.ArgumentNullException: Der Wert darf nicht NULL sein.

   bei System.Threading.Monitor.Enter(Object obj)

   bei HP.ActiveHealth.Commons.Security.HashStore.Validate(String filePath)

   bei HP.ActiveHealth.Core.Program..ctor(String[] args, Boolean mustCheckSignature, Boolean validateIni)

   bei HP.ActiveHealth.Core.ActiveHealthMain.Main(String[] args)
 

Error: (03/14/2021 08:48:38 PM) (Source: HP Active Health) (EventID: 91) (User: )

Description: Unhandled Exception. Application will terminate immediately.

System.ArgumentNullException: Der Wert darf nicht NULL sein.

   bei System.Threading.Monitor.Enter(Object obj)

   bei HP.ActiveHealth.Commons.Security.HashStore.Validate(String filePath)

   bei HP.ActiveHealth.Core.Program..ctor(String[] args, Boolean mustCheckSignature, Boolean validateIni)

   bei HP.ActiveHealth.Core.ActiveHealthMain.Main(String[] args)
 

Error: (03/14/2021 04:25:38 PM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (15904,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (03/14/2021 04:01:44 PM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (9504,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (03/14/2021 03:55:07 PM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (2320,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (03/14/2021 03:43:32 PM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (10540,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (03/14/2021 02:41:57 PM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (14464,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 

Error: (03/14/2021 02:30:11 PM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (96,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
 
 

Systemfehler:

=============

Error: (03/14/2021 08:49:51 PM) (Source: DCOM) (EventID: 10010) (User: USER-PC)

Description: Der Server "Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (03/14/2021 08:49:42 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "MessagingService_aec2a" wurde mit folgendem Fehler beendet: 

Das Gerät ist nicht bereit.
 

Error: (03/14/2021 08:49:33 PM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: NT-AUTORITÄT)

Description: Fehler "126" beim Laden der Kennwortbenachrichtigungs-DLL "C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll". Stellen Sie sicher, dass der in der Registrierung definierte DLL-Pfad "HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages" sich auf einen korrekten und absoluten Pfad (<Laufwerk>:\<Pfad>\<Dateiname>.<Erw.>) bezieht und nicht auf einen relativen oder ungültigen Pfad. Wenn der DLL-Pfad falsch ist, stellen Sie sicher, dass sich alle Hilfsdateien im gleichen Verzeichnis befinden und dass das Systemkonto sowohl auf den DLL-Pfad als auch die Hilfsdateien Lesezugriff hat.  Wenden Sie sich an den Anbieter der Benachrichtigungs-DLL, um weitere Unterstützung zu erhalten. Weitere Informationen finden Sie im Internet unter "hxxp://go.microsoft.com/fwlink/?LinkId=245898".
 

Error: (03/14/2021 08:49:01 PM) (Source: DCOM) (EventID: 10010) (User: USER-PC)

Description: Der Server "{9AA46009-3CE0-458A-A354-715610A075E6}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (03/14/2021 08:49:00 PM) (Source: DCOM) (EventID: 10010) (User: USER-PC)

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (03/14/2021 08:49:00 PM) (Source: DCOM) (EventID: 10010) (User: USER-PC)

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (03/14/2021 08:49:00 PM) (Source: DCOM) (EventID: 10010) (User: USER-PC)

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (03/14/2021 08:49:00 PM) (Source: DCOM) (EventID: 10010) (User: USER-PC)

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 
 

==================== Speicherinformationen =========================== 
 

BIOS: Hewlett-Packard 68IAV Ver. F.41 05/20/2013

Hauptplatine: Hewlett-Packard 176B

Prozessor: Intel(R) Core(TM) i7-3820QM CPU @ 2.70GHz

Prozentuale Nutzung des RAM: 28%

Installierter physikalischer RAM: 16315.4 MB

Verfügbarer physikalischer RAM: 11612.57 MB

Summe virtueller Speicher: 32699.4 MB

Verfügbarer virtueller Speicher: 27177.47 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:931.51 GB) (Free:566.58 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
 
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 001331B2)

Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt =======================

--- --- ---

Entfernungsergebnis von Farbar Recovery Scan Tool (x64) Version: 14-03-2021
durchgeführt von user (14-03-2021 20:48:41) Run:2
Gestartet von C:\Users\user\Downloads
Geladene Profile: user & Gast
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
CloseProcesses:
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
HKLM\Software\...\Authentication\Credential Providers: [{D28973E5-8630-41af-8831-50A15FEB396B}] ->
Task: {10171100-89B4-44D6-866F-19D10ECAFC02} - \Microsoft\Windows\Setup\EOSNotify2 -> Keine Datei <==== ACHTUNG
Task: {345935BB-EE8E-4524-A704-0381C1879C10} - System32\Tasks\{040F56A4-A09C-4078-965C-3468BC0AA3B2} => C:\Windows\system32\pcalua.exe -a "C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JE5XIBXH\sp61429[1].exe" -d C:\Users\user\Desktop
Task: {5A83F260-612C-4B09-B72D-A29ABBD99640} - System32\Tasks\{71995872-6FE3-4985-814D-9568EC05913E} => C:\Windows\system32\pcalua.exe -a C:\Users\user\Downloads\sp69072.exe -d C:\Users\user\Downloads
Task: {F5F54F0F-379B-41B6-8609-6F9E1EED6693} - \Microsoft\Windows\Setup\EOSNotify -> Keine Datei <==== ACHTUNG
Zip: C:\ProgramData\Desktop\updatepush.com.lnk
2021-03-12 21:57 - 2021-03-12 21:57 - 000000408 _____ C:\ProgramData\Desktop\updatepush.com.lnk
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
CMD: ipconfig /flushdns
CMD: netsh winsock reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: Bitsadmin /Reset /Allusers
Hosts:
RemoveProxy:
SystemRestore: On
EmptyTemp:

*****************

Prozesse erfolgreich geschlossen.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{503739d0-4c5e-4cfd-b3ba-d881334f0df2} => erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{D28973E5-8630-41af-8831-50A15FEB396B} => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{10171100-89B4-44D6-866F-19D10ECAFC02}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10171100-89B4-44D6-866F-19D10ECAFC02}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOSNotify2" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{345935BB-EE8E-4524-A704-0381C1879C10}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{345935BB-EE8E-4524-A704-0381C1879C10}" => erfolgreich entfernt
"C:\WINDOWS\System32\Tasks\{040F56A4-A09C-4078-965C-3468BC0AA3B2}" => nicht gefunden
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{040F56A4-A09C-4078-965C-3468BC0AA3B2}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5A83F260-612C-4B09-B72D-A29ABBD99640}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A83F260-612C-4B09-B72D-A29ABBD99640}" => erfolgreich entfernt
"C:\WINDOWS\System32\Tasks\{71995872-6FE3-4985-814D-9568EC05913E}" => nicht gefunden
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{71995872-6FE3-4985-814D-9568EC05913E}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F5F54F0F-379B-41B6-8609-6F9E1EED6693}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5F54F0F-379B-41B6-8609-6F9E1EED6693}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOSNotify" => erfolgreich entfernt
================== Zip: ===================
C:\ProgramData\Desktop\updatepush.com.lnk -> Konnte nicht kopiert werden
=========== Zip: Ende ===========
Konnte nicht verschoben werden "C:\ProgramData\Desktop\updatepush.com.lnk" => ist geplant bei Neustart verschoben zu werden.
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets => erfolgreich entfernt
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => erfolgreich entfernt

========= ipconfig /flushdns =========

Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

========= Ende von CMD: =========

========= netsh winsock reset =========

Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.

========= Ende von CMD: =========

========= netsh advfirewall reset =========

OK.

========= Ende von CMD: =========

========= netsh advfirewall set allprofiles state ON =========

OK.

========= Ende von CMD: =========

========= Bitsadmin /Reset /Allusers =========

BITSADMIN version 3.0
BITS administration utility.
(C) Copyright Microsoft Corp.

0 out of 0 jobs canceled.

========= Ende von CMD: =========

C:\Windows\System32\Drivers\etc\hosts => erfolgreich verschoben
Hosts erfolgreich wiederhergestellt.

========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKU\S-1-5-21-2636535521-2909126409-823621586-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\S-1-5-21-2636535521-2909126409-823621586-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKU\S-1-5-21-2636535521-2909126409-823621586-501\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\S-1-5-21-2636535521-2909126409-823621586-501\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt

========= Ende von RemoveProxy: =========

SystemRestore: On => abgeschlossen

=========== EmptyTemp: ==========

BITS transfer queue => 10248192 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 25899652 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 329686 B
Edge => 4409 B
Chrome => 139264 B
Firefox => 25474517 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 33058 B
ProgramData => 33058 B
Public => 33058 B
systemprofile => 33058 B
systemprofile32 => 33058 B
LocalService => 69102 B
NetworkService => 69102 B
user => 5711943 B
Gast => 5785601 B

RecycleBin => 0 B
EmptyTemp: => 70.5 MB temporäre Dateien entfernt.

================================

Ergebnis der geplanten Datei-Verschiebungen (Start-Modus: Normal) (Datum&Uhrzeit: 14-03-2021 20:49:46)

C:\ProgramData\Desktop\updatepush.com.lnk => ist erfolgreich verschoben

==== Ende vom Fixlog 20:49:46 ====