Windows 7: Trojaner gefunden: generic5

 defogger_disable by jpshortstuff (23.02.10.1)
Log created at 18:16 on 29/08/2013 (The Sweeties)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-08-2013
Ran by The Sweeties (administrator) on 29-08-2013 13:10:37
Running from C:\Users\The Sweeties\Downloads
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgwdsvc.exe
() C:\Program Files\Comodo\Dragon\dragon_updater.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgemc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgnsx.exe
() C:\Windows\system32\LFXGDIPO.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgcsrvx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgchsvx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgcsrvx.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(hxxp://yourfiledownloader.com) C:\Program Files\YourFileDownloader\YourFileUpdater.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(SweetIM Technologies Ltd.) C:\Program Files\SweetIM\Messenger\SweetIM.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Nikon Corporation) C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTLite.exe
(Dropbox, Inc.) C:\Users\The Sweeties\AppData\Roaming\Dropbox\bin\Dropbox.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgscanx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgcsrvx.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgcfgex.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgscanx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgcsrvx.exe
(Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
(Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
(Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
(Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
(Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
(Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
(Comodo) C:\Program Files\Comodo\Dragon\dragon.exe
(Comodo) C:\Program Files\Comodo\Dragon\dragon.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AVG9_TRAY] - C:\PROGRA~1\AVG\AVG9\avgtray.exe [2077536 2012-01-26] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [UCam_Menu] - C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [SweetIM] - C:\Program Files\SweetIM\Messenger\SweetIM.exe [111928 2010-10-13] (SweetIM Technologies Ltd.)
HKLM\...\Run: [ClamWin] - "G:\ClamWin\bin\ClamTray.exe" --logon [x]
HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [Nikon Message Center 2] - C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Run: [PDFPrint] - C:\Program Files\PDF24\pdf24.exe [162856 2013-06-10] (Geek Software GmbH)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [1305408 2011-01-20] (DT Soft Ltd)
MountPoints2: {e2d59ac3-4d76-11e0-99e2-00245406e7f7} - F:\DieVölker.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\Users\The Sweeties\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\The Sweeties\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=112555&tt=2912_5&babsrc=HP_ss&mntrId=4c056c2a00000000000000fffb3c305f
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
URLSearchHook: (No Name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} -  No File
URLSearchHook: (No Name) - {a51a36e6-31e7-4838-9ff7-76298b527ec0} -  No File
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=390&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=390&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2431245
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=112555&tt=2912_5&babsrc=SP_ss&mntrId=4c056c2a00000000000000fffb3c305f
SearchScopes: HKCU - Plasmoo URL = hxxp://plasmoo.com/index.htm?SearchMashine=true&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=112555&tt=2912_5&babsrc=SP_ss&mntrId=4c056c2a00000000000000fffb3c305f
SearchScopes: HKCU - {1F096B29-E9DA-4D64-8D63-936BE7762CC5} URL = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=4c056c2a0000000000000624d2def6dd&tlver=1.4.19.19&ss=1&affID=17395
SearchScopes: HKCU - {2D723F68-4F55-447D-8FDD-949701FD0285} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {76C616DB-B4BA-4B24-B6EE-5D152C539463} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=4E3A8630-3DBB-40C3-98D2-CBB2565249BB&apn_sauid=6D317A17-1A1C-4143-B826-95AB78565402
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=390&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = hxxp://www.daemon-search.com/search/web?q={searchTerms}
SearchScopes: HKCU - {C3CD744D-2FAE-4640-8297-16B5DA423104} URL = hxxp://search.littlefighter2-toolbar.com/search?p=Q&ts=ne&w={searchTerms}&csrc=search-field
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}
BHO: Conduit Engine  - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SweetIM Toolbar Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM - Conduit Engine  - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM - SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKCU -No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} -  No File
Toolbar: HKCU -No Name - {A51A36E6-31E7-4838-9FF7-76298B527EC0} -  No File
Toolbar: HKCU -No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: ipp - No CLSID Value - 
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler: msdaipp - No CLSID Value - 
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default
FF user.js: detected! => C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\user.js
FF NewTab: hxxp://search.babylon.com/?affID=112555&tt=2912_5&babsrc=NT_ss&mntrId=4c056c2a00000000000000fffb3c305f
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\The Sweeties\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\11-suche.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\daemon-search.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-16.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-17.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-18.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-19.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-20.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-21.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-22.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-23.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-24.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-25.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-26.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\plasmoo.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\The Sweeties\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: No Name - C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\Extensions\nostmp
FF Extension: Microsoft .NET Framework Assistant - C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: A VIO Bar  - C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\Extensions\{4ba58ed5-2614-4e24-9fe9-7938ebfd00c5}
FF Extension: DVDVideoSoftTB Community Toolbar - C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
FF Extension: ST-Germany Community Toolbar - C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\Extensions\{a51a36e6-31e7-4838-9ff7-76298b527ec0}
FF Extension: ST-de3 Community Toolbar - C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\Extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}
FF Extension: DVDVideoSoft Toolbar - C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}
FF Extension: toolbar - C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\Extensions\toolbar@web.de.xpi
FF Extension: No Name - C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\Extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}.xpi
FF Extension: No Name - C:\Users\The Sweeties\AppData\Roaming\Mozilla\Firefox\Profiles\yqvjaq6p.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5

Chrome: 
=======
CHR Extension: (Skype Click to Call) - C:\Users\THESWE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\THESWE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx

========================== Services (Whitelisted) =================

R2 avg9emc; C:\Program Files\AVG\AVG9\avgemc.exe [921952 2010-08-04] (AVG Technologies CZ, s.r.o.)
R2 avg9wd; C:\Program Files\AVG\AVG9\avgwdsvc.exe [308136 2010-08-04] (AVG Technologies CZ, s.r.o.)
R2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [2095808 2013-08-01] ()

==================== Drivers (Whitelisted) ====================

R1 AvgLdx86; C:\Windows\System32\Drivers\avgldx86.sys [226016 2013-01-15] (AVG Technologies CZ, s.r.o.)
R1 AvgMfx86; C:\Windows\System32\Drivers\avgmfx86.sys [29712 2011-09-13] (AVG Technologies CZ, s.r.o.)
R1 AvgTdiX; C:\Windows\System32\Drivers\avgtdix.sys [243152 2011-05-06] (AVG Technologies CZ, s.r.o.)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [218688 2011-03-13] (DT Soft Ltd)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [14736 2009-05-09] (Microsoft Corporation)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [25216 2010-02-25] (The OpenVPN Project)
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-29 13:07 - 2013-08-29 13:07 - 01072975 _____ (Farbar) C:\Users\The Sweeties\Downloads\FRST.exe
2013-08-29 12:53 - 2013-08-29 12:53 - 00000000 ____D C:\Users\THESWE~1\AppData\Local\MFAData
2013-08-29 12:53 - 2013-08-29 12:53 - 00000000 ____D C:\Users\THESWE~1\AppData\Local\Avg2013
2013-08-29 12:32 - 2013-08-29 12:32 - 00000000 ____D C:\ProgramData\SummerSoft
2013-08-29 12:31 - 2013-08-29 12:43 - 00000000 ____D C:\Program Files\EZDownloader
2013-08-29 12:31 - 2013-08-29 12:32 - 00000000 ____D C:\ProgramData\InstallMate
2013-08-29 12:31 - 2013-08-29 12:31 - 00000000 ____D C:\Windows\system32\X86
2013-08-29 12:31 - 2013-08-29 12:31 - 00000000 ____D C:\Windows\system32\AMD64
2013-08-29 12:17 - 2013-08-29 12:43 - 00000000 ____D C:\Program Files\Freedom Download Manager
2013-08-29 12:17 - 2013-08-29 12:17 - 00000000 ____D C:\Users\THESWE~1\AppData\Local\CRE
2013-08-29 12:16 - 2013-08-29 12:16 - 00000000 ____D C:\Users\The Sweeties\AppData\Roaming\SearchProtect
2013-08-29 12:16 - 2013-08-29 12:16 - 00000000 ____D C:\Program Files\SearchProtect
2013-08-29 12:14 - 2013-08-29 12:17 - 00000009 _____ C:\END
2013-08-21 09:59 - 2013-08-21 10:02 - 00000000 ____D C:\Windows\system32\MRT
2013-08-21 09:52 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-21 09:52 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-21 09:52 - 2013-07-26 05:13 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-21 09:52 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-21 09:52 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-21 09:52 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-21 09:52 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-21 09:52 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-21 09:52 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-21 09:52 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-21 09:52 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-21 09:52 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-21 09:52 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-21 09:52 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-21 09:52 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-21 09:52 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-19 09:56 - 2013-08-19 09:57 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-19 09:13 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-19 09:13 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-19 09:13 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-19 09:13 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-19 09:13 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-19 09:13 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-19 09:13 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-19 09:13 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-19 09:13 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-19 09:13 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-19 09:12 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-19 09:12 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-11 21:52 - 2013-08-11 21:52 - 00048392 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2013-08-11 21:52 - 2013-08-11 21:52 - 00001074 _____ C:\Users\Public\Desktop\Comodo Dragon.lnk
2013-08-11 21:52 - 2013-08-11 21:52 - 00000000 ____D C:\Users\THESWE~1\AppData\Local\Comodo
2013-08-11 21:52 - 2013-08-11 21:52 - 00000000 ____D C:\Program Files\Comodo
2013-08-11 21:51 - 2013-08-11 21:51 - 01700352 _____ (Microsoft Corporation) C:\Windows\system32\gdiplus.dll
2013-08-11 21:51 - 2013-08-11 21:51 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\mfc71.dll
2013-08-11 21:51 - 2013-08-11 21:51 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\msvcr71.dll
2013-08-11 21:49 - 2013-08-11 21:50 - 37074160 _____ (COMODO) C:\Users\The Sweeties\Downloads\DragonSetup281.exe
2013-08-04 15:14 - 2013-08-04 15:16 - 00000000 ____D C:\Users\The Sweeties\Desktop\Neuer Ordner
2013-08-03 14:04 - 2013-08-03 14:04 - 00000403 _____ C:\Windows\ODBC.INI
2013-08-03 14:03 - 2013-08-03 14:03 - 00000000 ____D C:\Program Files\Common Files\Designer
2013-08-03 14:02 - 2013-08-03 14:02 - 00000000 ____D C:\Windows\Msagent
2013-08-03 14:01 - 2013-08-03 14:01 - 00000000 ____D C:\Users\The Sweeties\AppData\Roaming\Microsoft Web Folders
2013-08-03 14:01 - 2013-08-03 14:01 - 00000000 ____D C:\Program Files\Microsoft Office

==================== One Month Modified Files and Folders =======

2013-08-29 13:09 - 2013-08-29 13:09 - 00000000 ____D C:\FRST
2013-08-29 13:07 - 2013-08-29 13:07 - 01072975 _____ (Farbar) C:\Users\The Sweeties\Downloads\FRST.exe
2013-08-29 13:00 - 2012-05-30 22:48 - 00000000 ____D C:\ProgramData\MFAData
2013-08-29 12:53 - 2013-08-29 12:53 - 00000000 ____D C:\Users\THESWE~1\AppData\Local\MFAData
2013-08-29 12:53 - 2013-08-29 12:53 - 00000000 ____D C:\Users\THESWE~1\AppData\Local\Avg2013
2013-08-29 12:53 - 2009-07-14 06:34 - 00010608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-29 12:53 - 2009-07-14 06:34 - 00010608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-29 12:52 - 2012-08-25 12:32 - 00000000 ____D C:\Users\The Sweeties\AppData\Roaming\Dropbox
2013-08-29 12:51 - 2010-11-14 22:55 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-29 12:51 - 2010-08-04 22:19 - 00000000 ____D C:\Users\The Sweeties
2013-08-29 12:50 - 2010-08-04 23:03 - 00000000 ____D C:\Windows\system32\Drivers\Avg
2013-08-29 12:50 - 2010-08-04 22:29 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-29 12:50 - 2010-08-04 22:05 - 01960237 _____ C:\Windows\WindowsUpdate.log
2013-08-29 12:45 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-29 12:45 - 2009-07-14 06:39 - 00071225 _____ C:\Windows\setupact.log
2013-08-29 12:44 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp
2013-08-29 12:43 - 2013-08-29 12:31 - 00000000 ____D C:\Program Files\EZDownloader
2013-08-29 12:43 - 2013-08-29 12:17 - 00000000 ____D C:\Program Files\Freedom Download Manager
2013-08-29 12:43 - 2012-04-29 18:57 - 00000000 ____D C:\Program Files\Conduit
2013-08-29 12:43 - 2009-07-14 09:48 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-08-29 12:43 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2013-08-29 12:43 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-29 12:32 - 2013-08-29 12:32 - 00000000 ____D C:\ProgramData\SummerSoft
2013-08-29 12:32 - 2013-08-29 12:31 - 00000000 ____D C:\ProgramData\InstallMate
2013-08-29 12:31 - 2013-08-29 12:31 - 00000000 ____D C:\Windows\system32\X86
2013-08-29 12:31 - 2013-08-29 12:31 - 00000000 ____D C:\Windows\system32\AMD64
2013-08-29 12:17 - 2013-08-29 12:17 - 00000000 ____D C:\Users\THESWE~1\AppData\Local\CRE
2013-08-29 12:17 - 2013-08-29 12:14 - 00000009 _____ C:\END
2013-08-29 12:16 - 2013-08-29 12:16 - 00000000 ____D C:\Users\The Sweeties\AppData\Roaming\SearchProtect
2013-08-29 12:16 - 2013-08-29 12:16 - 00000000 ____D C:\Program Files\SearchProtect
2013-08-26 20:55 - 2012-05-03 13:38 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-26 20:55 - 2010-11-14 22:55 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-23 20:10 - 2013-06-10 17:55 - 00000000 ____D C:\Users\The Sweeties\Desktop\Bewerbung
2013-08-23 19:54 - 2012-05-10 21:11 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-08-23 19:53 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-23 18:52 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-08-23 17:24 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-08-21 10:21 - 2012-05-03 13:38 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-21 10:21 - 2011-07-14 14:15 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-21 10:02 - 2013-08-21 09:59 - 00000000 ____D C:\Windows\system32\MRT
2013-08-21 09:59 - 2010-09-22 15:46 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-19 09:57 - 2013-08-19 09:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-19 09:02 - 2009-07-14 06:33 - 00312664 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-11 21:52 - 2013-08-11 21:52 - 00048392 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2013-08-11 21:52 - 2013-08-11 21:52 - 00001074 _____ C:\Users\Public\Desktop\Comodo Dragon.lnk
2013-08-11 21:52 - 2013-08-11 21:52 - 00000000 ____D C:\Users\THESWE~1\AppData\Local\Comodo
2013-08-11 21:52 - 2013-08-11 21:52 - 00000000 ____D C:\Program Files\Comodo
2013-08-11 21:51 - 2013-08-11 21:51 - 01700352 _____ (Microsoft Corporation) C:\Windows\system32\gdiplus.dll
2013-08-11 21:51 - 2013-08-11 21:51 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\mfc71.dll
2013-08-11 21:51 - 2013-08-11 21:51 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\msvcr71.dll
2013-08-11 21:50 - 2013-08-11 21:49 - 37074160 _____ (COMODO) C:\Users\The Sweeties\Downloads\DragonSetup281.exe
2013-08-07 21:19 - 2010-08-06 23:52 - 00068160 _____ C:\Users\THESWE~1\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-04 15:16 - 2013-08-04 15:14 - 00000000 ____D C:\Users\The Sweeties\Desktop\Neuer Ordner
2013-08-03 14:04 - 2013-08-03 14:04 - 00000403 _____ C:\Windows\ODBC.INI
2013-08-03 14:03 - 2013-08-03 14:03 - 00000000 ____D C:\Program Files\Common Files\Designer
2013-08-03 14:03 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-08-03 14:02 - 2013-08-03 14:02 - 00000000 ____D C:\Windows\Msagent
2013-08-03 14:02 - 2009-07-14 09:48 - 00000000 ____D C:\Windows\ShellNew
2013-08-03 14:02 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Help
2013-08-03 14:02 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System
2013-08-03 14:01 - 2013-08-03 14:01 - 00000000 ____D C:\Users\The Sweeties\AppData\Roaming\Microsoft Web Folders
2013-08-03 14:01 - 2013-08-03 14:01 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-03 14:00 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system

Files to move or delete:
====================
C:\Users\THESWE~1\AppData\Local\Temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Users\THESWE~1\AppData\Local\Temp\abd2bca3e572e998a09f73c81b93454a.exe
C:\Users\THESWE~1\AppData\Local\Temp\APNStub.exe
C:\Users\THESWE~1\AppData\Local\Temp\binkw32.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_1137037822071119129.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_1858152139425998485.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_2452555261011155436.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_2983308543553348367.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_4864147640321903470.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_4916645824711556522.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_5015584383275430587.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_5560328130013597431.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_6632781712935220023.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_6848310315621695711.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_7867778163365106370.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_871307968726540053.dll
C:\Users\THESWE~1\AppData\Local\Temp\clipstreamsa_8764651462698843958.dll
C:\Users\THESWE~1\AppData\Local\Temp\d2l_Install.exe
C:\Users\THESWE~1\AppData\Local\Temp\DivXSetup.exe
C:\Users\THESWE~1\AppData\Local\Temp\EBU2A7D.exe
C:\Users\THESWE~1\AppData\Local\Temp\EBU3E7A.DLL
C:\Users\THESWE~1\AppData\Local\Temp\FileSystemView.dll
C:\Users\THESWE~1\AppData\Local\Temp\g377_sf_de.exe
C:\Users\THESWE~1\AppData\Local\Temp\GLF55D6.tmp.ConduitEngineSetup.exe
C:\Users\THESWE~1\AppData\Local\Temp\GLF567F.tmp.tbDVDV.dll
C:\Users\THESWE~1\AppData\Local\Temp\htmlayout.dll
C:\Users\THESWE~1\AppData\Local\Temp\installhelper.dll
C:\Users\THESWE~1\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\THESWE~1\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\THESWE~1\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe
C:\Users\THESWE~1\AppData\Local\Temp\jre-6u32-windows-i586-iftw.exe
C:\Users\THESWE~1\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\THESWE~1\AppData\Local\Temp\jre-7u5-windows-i586-iftw.exe
C:\Users\THESWE~1\AppData\Local\Temp\MSN9293.exe
C:\Users\THESWE~1\AppData\Local\Temp\MyBabylonTB.exe
C:\Users\THESWE~1\AppData\Local\Temp\nsdDE6.tmp.ConduitEngineEmbbed.exe
C:\Users\THESWE~1\AppData\Local\Temp\SetupDataMngr_Searchqu.exe
C:\Users\THESWE~1\AppData\Local\Temp\SkypeSetup.exe
C:\Users\THESWE~1\AppData\Local\Temp\softonic-de3.exe
C:\Users\THESWE~1\AppData\Local\Temp\softonic-Germany.exe
C:\Users\THESWE~1\AppData\Local\Temp\softonic_s_Germany.exe
C:\Users\THESWE~1\AppData\Local\Temp\SRAssetsHelper.dll
C:\Users\THESWE~1\AppData\Local\Temp\SweetimPack_CloseChromePrompt.exe
C:\Users\THESWE~1\AppData\Local\Temp\tbDVD1.dll
C:\Users\THESWE~1\AppData\Local\Temp\tbsof0.dll
C:\Users\THESWE~1\AppData\Local\Temp\toolbar472721686.exe
C:\Users\THESWE~1\AppData\Local\Temp\{}\toolbar\components\RadioWMPCore.dll
C:\Users\THESWE~1\AppData\Local\Temp\{}\toolbar\components\RadioWMPCoreGecko19.dll
C:\Users\THESWE~1\AppData\Local\Temp\{}\conduitengine\components\RadioWMPCore.dll
C:\Users\THESWE~1\AppData\Local\Temp\{}\conduitengine\components\RadioWMPCoreGecko19.dll
C:\Users\THESWE~1\AppData\Local\Temp\{E64C137C-D0B7-467A-B47F-460AAB30F0A3}\MCARecLib2.dll
C:\Users\THESWE~1\AppData\Local\Temp\{B014EE44-9197-4513-9613-71E6EB1B514E}\MCARecLib2.dll
C:\Users\THESWE~1\AppData\Local\Temp\{9366C36C-516D-4427-9218-1176A73D93C9}\{3272057B-D3C3-4EAF-B023-15E4CA91046D}\MCARecLib2.dll
C:\Users\THESWE~1\AppData\Local\Temp\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}\MCARecLib2.dll
C:\Users\THESWE~1\AppData\Local\Temp\YouCam\Tutorial\youcam-tutorial.exe
C:\Users\THESWE~1\AppData\Local\Temp\UnityWebPlayer\UnityWebPlayerUpdate.exe
C:\Users\THESWE~1\AppData\Local\Temp\UnityWebPlayer\UnityWebPluginUpdate-27a0614cb239a748bff00ae81dea3e01\webplayer_win.dll
C:\Users\THESWE~1\AppData\Local\Temp\UnityWebPlayer\UnityWebPluginUpdate-27a0614cb239a748bff00ae81dea3e01\wrap_oal.dll
C:\Users\THESWE~1\AppData\Local\Temp\UnityWebPlayer\UnityWebPluginUpdate-27a0614cb239a748bff00ae81dea3e01\Data\lib\CrossDomainPolicyParser.dll
C:\Users\THESWE~1\AppData\Local\Temp\UnityWebPlayer\UnityWebPluginUpdate-27a0614cb239a748bff00ae81dea3e01\Data\lib\UnityEngine.dll
C:\Users\THESWE~1\AppData\Local\Temp\Temp1_hexedit602.zip\setup.exe
C:\Users\THESWE~1\AppData\Local\Temp\Temp1_flash1018276.zip\install_flash_player_10_active_x.exe
C:\Users\THESWE~1\AppData\Local\Temp\Temp1_CGWebInstall452.zip\CGWebInstall.exe
C:\Users\THESWE~1\AppData\Local\Temp\SweetIMReinstall\SweetImSetup.exe
C:\Users\THESWE~1\AppData\Local\Temp\SweetimPack\SweetIESetup.exe
C:\Users\THESWE~1\AppData\Local\Temp\SweetimPack\SweetimConfirm.exe
C:\Users\THESWE~1\AppData\Local\Temp\SweetimPack\SweetIMSetup.exe
C:\Users\THESWE~1\AppData\Local\Temp\nsoB680.tmp\Time.dll
C:\Users\THESWE~1\AppData\Local\Temp\nsg36CA.tmp\DropboxNSISTools.dll
C:\Users\THESWE~1\AppData\Local\Temp\nsdAE46.tmp\Time.dll
C:\Users\THESWE~1\AppData\Local\Temp\nsc3564.tmp\DropboxNSISTools.dll
C:\Users\THESWE~1\AppData\Local\Temp\nsbFF85.tmp\DropboxNSISTools.dll
C:\Users\THESWE~1\AppData\Local\Temp\nsbFF85.tmp\UAC.dll
C:\Users\THESWE~1\AppData\Local\Temp\nsb1131.tmp\DropboxNSISTools.dll
C:\Users\THESWE~1\AppData\Local\Temp\Low\UnityWebPlayer\UnityWebPlayerUpdate.exe
C:\Users\THESWE~1\AppData\Local\Temp\is87173921\ezLooker-S-Setup_Suite1.exe
C:\Users\THESWE~1\AppData\Local\Temp\is87173921\IminentSetup{2.uD5j8sVP.1}.exe
C:\Users\THESWE~1\AppData\Local\Temp\is87173921\IWantThis_IC_V3_ROW.exe
C:\Users\THESWE~1\AppData\Local\Temp\ct2269050\ffLogic.exe
C:\Users\THESWE~1\AppData\Local\Temp\ct2269050\ieLogic.exe
C:\Users\THESWE~1\AppData\Local\Temp\ct2269050\statisticsStub.exe
C:\Users\THESWE~1\AppData\Local\Temp\be29e7f1-71ae-4703-50cb-1d52be512f51\twapi-be29e7f1-71ae-4703-50cb-1d52be512f51.dll
C:\Users\THESWE~1\AppData\Local\Temp\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbar4ffx.exe
C:\Users\THESWE~1\AppData\Local\Temp\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbar4ie.exe
C:\Users\THESWE~1\AppData\Local\Temp\45281193.Uninstall\Uninstall.exe
C:\Users\THESWE~1\AppData\Local\Temp\3449.dir\InstallFlashPlayer.exe
C:\Users\THESWE~1\AppData\Local\Temp\._msigeplugin61\GoogleEarth.exe
C:\Users\THESWE~1\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\earthps.dll
C:\Users\THESWE~1\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\geplugin.exe
C:\Users\THESWE~1\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\ge_expat.dll
C:\Users\THESWE~1\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\googleearth_free.dll
C:\Users\THESWE~1\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcp100.dll
C:\Users\THESWE~1\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcr100.dll
C:\Users\THESWE~1\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\npgeplugin.dll
C:\Users\THESWE~1\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\plugin_ax.dll

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-23 18:44

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 28-08-2013
Ran by The Sweeties at 2013-08-29 13:17:30
Running from C:\Users\The Sweeties\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)
Apple Application Support (Version: 1.4.1)
Apple Software Update (Version: 2.1.3.127)
AVG Free 9.0
Comodo Dragon (Version: 28.1.0.0)
Conduit Engine  (Version: 6.3.3.3)
Content Manager 2 (Version: 2.0.4.62)
CyberLink YouCam (Version: 2.0.2706)
DAEMON Tools Lite (Version: 4.40.2.0131)
DivX-Setup (Version: 2.5.0.8)
Dropbox (HKCU Version: 2.0.22)
ElsterFormular (Version: 14.0.0.10899)
Free Audio CD Burner version 1.4.8
Free YouTube to MP3 Converter version 3.11.20.423 (Version: 3.11.20.423)
Google Chrome (Version: 29.0.1547.57)
Google Update Helper (Version: 1.3.21.153)
Hex-Editor MX (Version: 6.0)
HP Officejet 6500 E710a-f - Grundlegende Software für das Gerät (Version: 22.50.231.0)
HP Officejet 6500 E710a-f Hilfe (Version: 140.0.2.2)
HP Update (Version: 5.002.006.003)
I.R.I.S. OCR (Version: 12.3.4.0)
Java 7 Update 17 (Version: 7.0.170)
Java Auto Updater (Version: 2.1.9.0)
Marketsplash Schnellzugriffe (Version: 1.0.1.7)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Office 2000 Small Business (Version: 9.00.2816)
Microsoft Silverlight (Version: 4.0.50401.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1)
Mozilla Maintenance Service (Version: 23.0.1)
Mozilla Thunderbird 14.0 (x86 de) (Version: 14.0)
MSVC80_x86_v2 (Version: 1.0.3.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML4 Parser (Version: 1.0.0)
Nikon Message Center 2 (Version: 2.1.0)
Nikon Movie Editor (Version: 2.5.0)
OpenOffice.org 3.2 (Version: 3.2.9502)
PDF24 Creator 5.6.0
Picture Control Utility (Version: 1.4.6)
QuickTime (Version: 7.69.80.9)
Skype Click to Call (Version: 5.9.9216)
Skype™ 5.8 (Version: 5.8.158)
Studie zur Verbesserung von HP Officejet 6500 E710a-f Produkten (Version: 22.50.231.0)
SweetIM for Messenger 3.3 (Version: 3.3.0007)
SweetIM Toolbar for Internet Explorer 4.0 (Version: 4.0.0004)
TreeSize Free V2.7 (Version: 2.7)
Uninstall 1.0.0.1
Unity Web Player (HKCU Version: 2.6.1f3_31223)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
ViewNX 2 (Version: 2.5.1)
VLC media player 1.1.5 (Version: 1.1.5)
WinRAR
YourFileDownloader (HKCU Version: 1.0.1)
 

==================== Restore Points  =========================

15-06-2013 03:18:32 Windows Update
16-06-2013 17:30:31 Windows-Sicherung
16-06-2013 17:31:11 Windows Modules Installer
24-06-2013 07:19:18 Windows-Sicherung
26-06-2013 07:32:08 Avg Update
30-06-2013 17:00:21 Windows-Sicherung
01-07-2013 18:59:49 Windows Update
07-07-2013 17:00:22 Windows-Sicherung
10-07-2013 17:01:29 Windows-Sicherung
14-07-2013 18:49:12 Windows Update
14-07-2013 18:55:12 Windows-Sicherung
24-07-2013 17:06:16 Avg Update
29-07-2013 18:55:04 Windows-Sicherung
03-08-2013 12:00:28 Microsoft Office 2000 Small Business wird installiert
06-08-2013 14:16:10 Windows-Sicherung
10-08-2013 09:13:50 Avg Update
11-08-2013 19:45:14 Windows-Sicherung
19-08-2013 07:15:49 Windows-Sicherung
21-08-2013 07:51:39 Windows Update
22-08-2013 15:32:29 Windows Update
26-08-2013 18:55:49 Windows-Sicherung
29-08-2013 10:39:33 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05EE699F-AB25-42D8-8781-558C5D1D2FAD} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation)
Task: {0E12083C-0335-49DB-9542-BA1EC6D83ECC} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation)
Task: {18E6D428-D26C-4169-BEDF-3B5BDDC952F6} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\System32\aepdu.dll [2010-11-20] (Microsoft Corporation)
Task: {1EC9510D-A439-4950-9399-B6399EDF9EA7} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => C:\Windows\System32\acproxy.dll [2009-07-14] (Microsoft Corporation)
Task: {217B0B18-60BD-4814-8727-2FA9A39B0B81} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {39001E91-A58B-466F-80FB-8A4DB938519E} - System32\Tasks\{F27543BC-44FA-4262-B61C-0BD903D52947} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-19] (Mozilla Corporation)
Task: {5C2C622F-70E9-4194-A7DA-033E827365AD} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => C:\Windows\System32\bfe.dll [2010-11-20] (Microsoft Corporation)
Task: {68BDC443-79D1-4B32-86C7-44AC42D294DC} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {71F9102E-362A-4FD1-B3C8-7ED2ACF2123D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-21] (Adobe Systems Incorporated)
Task: {8ABC832B-D1BC-4D5A-8197-914089BE8238} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {9334C323-F100-4656-9BA0-E4AA69C0F9C2} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\System32\srrstr.dll [2010-11-20] (Microsoft Corporation)
Task: {93D9D419-51E7-46B8-B42A-467109D6A3BA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-14] (Google Inc.)
Task: {962E6315-7046-4A08-A5EE-27BF760D433A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: {9B12BAD2-E6C5-4A33-B633-128FE75FFE52} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-14] (Google Inc.)
Task: {A89A907B-9FBB-416C-87A1-10A48D9FC345} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => C:\Windows\System32\dfdts.dll [2009-07-14] (Microsoft Corporation)
Task: {B72EFDE1-58CA-4753-BCC2-DE46C7C256BF} - System32\Tasks\{F8A45877-FAB8-4316-AAC6-2D9DCDDD2CCD} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-19] (Mozilla Corporation)
Task: {C468E0F1-7F0A-443A-8AC9-6AF7689252DC} - System32\Tasks\HPCustParticipation HP Officejet 6500 E710a-f => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.)
Task: {D3912B32-DEEE-416E-8B4C-78FBBEB56293} - System32\Tasks\Your File Updater => C:\Program Files\YourFileDownloader\YourFileUpdater.exe [2012-07-19] (hxxp://yourfiledownloader.com)
Task: {E711A476-CA0B-48CD-8078-45D211DEC7D2} - System32\Tasks\{54B8428B-0171-4580-A843-1B7CAB64E17C} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-19] (Mozilla Corporation)
Task: {EDA12443-1112-49B0-BF1E-A4136CA1F5E2} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {F21667EC-2AA8-4C18-BC82-7421EF808C5C} - System32\Tasks\WPD\SqmUpload_S-1-5-21-3875547548-886145427-2263735370-1000 => C:\Windows\System32\portabledeviceapi.dll [2010-11-20] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==========

AlternateDataStreams: C:\ProgramData\Temp:DBC416F8
AlternateDataStreams: C:\Users\The Sweeties\Documents\Thumbs.db:encryptable

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/29/2013 00:20:24 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 10.0.9200.16660 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1e7c

Startzeit: 01cea4a1522a2acf

Endzeit: 12

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:

Error: (08/29/2013 00:17:27 PM) (Source: CltMngSvc) (User: )
Description: CltMngSvcServiceInstall: Fail to Start serviceSearch Protect by Conduit Updater (Error: 1056)

Error: (08/29/2013 00:17:06 PM) (Source: CltMngSvc) (User: )
Description: CltMngSvcServiceInstall: Fail to Start serviceSearch Protect by Conduit Updater (Error: 1056)

Error: (08/21/2013 00:45:27 PM) (Source: MsiInstaller) (User: THESWEETIES-PC)
Description: Produkt: Microsoft Office 2000 Small Business -- Fehler 1706. Es wurde keine gültige Quelle für das Produkt "Microsoft Office 2000 Small Business" gefunden. Die Installation kann nicht fortgesetzt werden.

Error: (08/11/2013 09:47:59 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 10.0.9200.16635 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1270

Startzeit: 01ce96cb56c337f1

Endzeit: 20

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID: eafe774e-02be-11e3-a18e-00245406e7f7

Error: (08/10/2013 00:28:55 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 10.0.9200.16635 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1eb8

Startzeit: 01ce95b444e1807c

Endzeit: 20

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:

Error: (08/10/2013 11:13:50 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {42b9df30-cb5e-4638-86e1-f10e4c907bdd}

Error: (08/06/2013 05:50:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: wbengine.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce78f3a
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b60
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003224d
ID des fehlerhaften Prozesses: 0x1bd4
Startzeit der fehlerhaften Anwendung: 0xwbengine.exe0
Pfad der fehlerhaften Anwendung: wbengine.exe1
Pfad des fehlerhaften Moduls: wbengine.exe2
Berichtskennung: wbengine.exe3

Error: (08/04/2013 03:15:09 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Dropbox.exe, Version: 2.0.22.0, Zeitstempel: 0x515f37bb
Name des fehlerhaften Moduls: libcef.dll, Version: 1.1364.1123.0, Zeitstempel: 0x513530d7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0005fba7
ID des fehlerhaften Prozesses: 0xd48
Startzeit der fehlerhaften Anwendung: 0xDropbox.exe0
Pfad der fehlerhaften Anwendung: Dropbox.exe1
Pfad des fehlerhaften Moduls: Dropbox.exe2
Berichtskennung: Dropbox.exe3

Error: (07/24/2013 07:06:15 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {2f71b31d-7f4a-4ccb-a0f4-b4152ac0f503}


System errors:
=============
Error: (08/29/2013 00:37:02 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎29.‎08.‎2013 um 12:34:44 unerwartet heruntergefahren.

Error: (08/28/2013 09:15:24 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JÜRGEN-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{7E424730-DAD5-437D-B923-935BF637-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (08/28/2013 09:03:08 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎26.‎08.‎2013 um 21:08:53 unerwartet heruntergefahren.

Error: (08/21/2013 07:00:56 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JÜRGEN-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{7E424730-DAD5-437D-B923-935BF637-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (08/21/2013 05:59:02 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JÜRGEN-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{7E424730-DAD5-437D-B923-935BF637-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (08/21/2013 05:23:02 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JÜRGEN-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{7E424730-DAD5-437D-B923-935BF637-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (08/21/2013 02:14:11 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JÜRGEN-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{7E424730-DAD5-437D-B923-935BF637-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (08/21/2013 01:50:10 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JÜRGEN-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{7E424730-DAD5-437D-B923-935BF637-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (08/21/2013 01:14:11 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JÜRGEN-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{7E424730-DAD5-437D-B923-935BF637-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (08/21/2013 00:38:13 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JÜRGEN-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{7E424730-DAD5-437D-B923-935BF637-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.


Microsoft Office Sessions:
=========================
Error: (08/29/2013 00:20:24 PM) (Source: Application Hang)(User: )
Description: iexplore.exe10.0.9200.166601e7c01cea4a1522a2acf12C:\Program Files\Internet Explorer\iexplore.exe

Error: (08/29/2013 00:17:27 PM) (Source: CltMngSvc)(User: )
Description: CltMngSvcServiceInstall: Fail to Start serviceSearch Protect by Conduit Updater (Error: 1056)

Error: (08/29/2013 00:17:06 PM) (Source: CltMngSvc)(User: )
Description: CltMngSvcServiceInstall: Fail to Start serviceSearch Protect by Conduit Updater (Error: 1056)

Error: (08/21/2013 00:45:27 PM) (Source: MsiInstaller)(User: THESWEETIES-PC)
Description: Produkt: Microsoft Office 2000 Small Business -- Fehler 1706. Es wurde keine gültige Quelle für das Produkt "Microsoft Office 2000 Small Business" gefunden. Die Installation kann nicht fortgesetzt werden.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (08/11/2013 09:47:59 PM) (Source: Application Hang)(User: )
Description: iexplore.exe10.0.9200.16635127001ce96cb56c337f120C:\Program Files\Internet Explorer\iexplore.exeeafe774e-02be-11e3-a18e-00245406e7f7

Error: (08/10/2013 00:28:55 PM) (Source: Application Hang)(User: )
Description: iexplore.exe10.0.9200.166351eb801ce95b444e1807c20C:\Program Files\Internet Explorer\iexplore.exe

Error: (08/10/2013 11:13:50 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {42b9df30-cb5e-4638-86e1-f10e4c907bdd}

Error: (08/06/2013 05:50:41 PM) (Source: Application Error)(User: )
Description: wbengine.exe6.1.7601.175144ce78f3antdll.dll6.1.7601.177254ec49b60c00000050003224d1bd401ce92b26c1c2fe1C:\Windows\system32\wbengine.exeC:\Windows\SYSTEM32\ntdll.dllf1e609d1-feaf-11e2-a18e-00245406e7f7

Error: (08/04/2013 03:15:09 PM) (Source: Application Error)(User: )
Description: Dropbox.exe2.0.22.0515f37bblibcef.dll1.1364.1123.0513530d7c00000050005fba7d4801ce8d415d835b2fC:\Users\The Sweeties\AppData\Roaming\Dropbox\bin\Dropbox.exeC:\Users\The Sweeties\AppData\Roaming\Dropbox\bin\libcef.dlle2c7d03f-fd07-11e2-a18e-00245406e7f7

Error: (07/24/2013 07:06:15 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {2f71b31d-7f4a-4ccb-a0f4-b4152ac0f503}


==================== Memory info =========================== 

Percentage of memory in use: 61%
Total physical RAM: 3004.61 MB
Available physical RAM: 1154.41 MB
Total Pagefile: 6005.46 MB
Available Pagefile: 4184.41 MB
Total Virtual: 2047.88 MB
Available Virtual: 1906.49 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:142.09 GB) (Free:54.69 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:143 GB) (Free:29.2 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 5A246469)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=142 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=143 GB) - (Type=07 NTFS)

==================== End Of Log ============================