Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: exe datei ist noch offen beim runterfahren seiht 4 tagen!

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 16.12.2013, 13:59   #76
K1ramox
 
exe datei ist noch offen beim runterfahren seiht 4 tagen! - Standard

exe datei ist noch offen beim runterfahren seiht 4 tagen!



Langsam versteh ich nichts mehr eben grade hab ich mich in skype eingelogt und hatte aufeinmal ein anderes profielbild (sehr eklig)

SystemLook 30.07.11 by jpshortstuff
Log created at 13:38 on 16/12/2013 by Kilian
Administrator - Elevation successful

========== regfind ==========

Searching for "dllfixer"
No data found.

========== filefind ==========

Searching for "*dllfixer*"
No files found.

-= EOF =-

Achso heute hab ich nen sreen von nen freund bekomm das ist eine liste von so ein hacker,und auf der liste wa so ein programm was offen war wo alles stand ip,was er grade macht,wie viel cpu ram und so er verbraucht,die pc namen und so

Hilfe! und in meinem skype status stand "ihr seiht alle schwul!! ihr huhren kinder" ich weis langsam nicht was ich machen soll :/

Hier nochmal zwei frische frst logs hoffe es hilft bin langsam wirklich verzweifelt :/
FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-12-2013 02
Ran by Kilian (administrator) on KILIAN-PC on 16-12-2013 13:56:48
Running from C:\Users\Kilian\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccsvchst.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccsvchst.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12921488 2012-07-02] (Realtek Semiconductor)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-04] (Valve Corporation)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\WLanGUI.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-08-13] (Acer Incorporated)
HKU\Default User\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-08-13] (Acer Incorporated)
AppInit_DLLs: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit64.dll [21864 2012-07-25] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll [20328 2012-07-25] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {A3931489-8E38-4D95-81E7-5528AD5A4BFC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {A3931489-8E38-4D95-81E7-5528AD5A4BFC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - DefaultScope {A3931489-8E38-4D95-81E7-5528AD5A4BFC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {A3931489-8E38-4D95-81E7-5528AD5A4BFC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - DefaultScope {A3931489-8E38-4D95-81E7-5528AD5A4BFC} URL = 
SearchScopes: HKCU - {A3931489-8E38-4D95-81E7-5528AD5A4BFC} URL = 
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=20&locale=de_DE&gct=kwd&qsrc=2869
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} hxxp://battlefieldheroes.prosiebengames.de/static/updater/BFHUpdater_5.0.203.0.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Kilian\AppData\Roaming\Mozilla\Firefox\Profiles\y4tshwby.default
FF DefaultSearchEngine: Norton Safe Search
FF SelectedSearchEngine: Norton Safe Search
FF Keyword.URL: hxxp://nortonsafe.search.ask.com/web?o=APN10506&gct=kwd&qsrc=2869&l=dis&prt=NIS&chn=retail&geo=DE&ver=20&q=
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Kilian\AppData\Roaming\Mozilla\Firefox\Profiles\y4tshwby.default\searchplugins\safesearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Kilian\AppData\Roaming\Mozilla\Firefox\Profiles\y4tshwby.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFF
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

Chrome: 
=======
CHR HomePage: hxxp://acer13.msn.com/
CHR DefaultSearchKeyword: ask
CHR DefaultSearchProvider: Norton Safe Search
CHR DefaultSearchURL: hxxp://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=20&locale=de_DE&gct=sb&qsrc=2869
CHR DefaultNewTabURL: 
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Nexon Game Controller) - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\Kilian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Kilian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Kilian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Kilian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\Kilian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Norton Identity Protection) - C:\Users\Kilian\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0
CHR Extension: (Google Wallet) - C:\Users\Kilian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Better Pop Up Blocker) - C:\Users\Kilian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmpeeekfhbmikbdhlpjbfmnpgcbeggic\2.1.6_0
CHR Extension: (Gmail) - C:\Users\Kilian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2435728 2012-08-23] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-19] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-04] (AVM Berlin)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20131203.001\BHDrvx64.sys [1526488 2013-12-03] (Symantec Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c63x64.sys [498032 2012-07-12] (Intel Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
R3 fwlanusb4; C:\Windows\system32\DRIVERS\fwlanusb4.sys [1293824 2010-10-04] (AVM GmbH)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20131213.001\IDSvia64.sys [521944 2013-12-13] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20131215.005\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20131215.005\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-06-20] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]
S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [x]
S3 X6va013; \??\C:\Windows\SysWOW64\Drivers\X6va013 [x]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-16 13:56 - 2013-12-16 13:56 - 01927940 _____ (Farbar) C:\Users\Kilian\Downloads\FRST64.exe
2013-12-16 13:56 - 2013-12-16 13:56 - 00017088 _____ C:\Users\Kilian\Downloads\FRST.txt
2013-12-16 13:56 - 2013-12-16 13:56 - 00000000 ____D C:\FRST
2013-12-16 13:38 - 2013-12-16 13:40 - 00000580 _____ C:\Users\Kilian\Desktop\SystemLook.txt
2013-12-13 17:14 - 2013-12-13 17:14 - 00281248 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-13 14:43 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2013-12-13 14:43 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2013-12-13 14:43 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2013-12-13 14:43 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2013-12-13 14:43 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2013-12-13 14:43 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2013-12-13 14:43 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2013-12-13 14:43 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-12-13 14:43 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-12-13 14:43 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-12-13 14:43 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-12-12 15:37 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 15:37 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 15:37 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 15:37 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-12 15:37 - 2013-10-19 06:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 15:37 - 2013-10-19 05:04 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 15:36 - 2013-11-23 07:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 15:36 - 2013-11-23 06:05 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 15:36 - 2013-11-07 00:18 - 04036608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 15:36 - 2013-11-01 06:38 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 15:36 - 2013-11-01 04:49 - 00273408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 15:36 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 15:36 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 15:36 - 2013-10-25 07:19 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-12-12 15:36 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 15:36 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-12 15:36 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 15:36 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-12 15:36 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-12 15:36 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 15:36 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-12 15:36 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-12 15:36 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-12 15:36 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-12 15:36 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-12 15:36 - 2013-10-10 10:32 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 15:36 - 2013-10-10 10:30 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll
2013-12-12 15:36 - 2013-10-10 10:30 - 00156160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 15:36 - 2013-10-10 10:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 15:36 - 2013-10-10 10:23 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 15:36 - 2013-10-10 10:22 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2013-12-12 15:36 - 2013-10-10 10:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 15:36 - 2013-10-09 02:33 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-12-12 15:36 - 2013-10-08 23:30 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-12-12 15:36 - 2013-10-08 23:30 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-12-12 15:36 - 2013-10-08 23:30 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-12-12 15:36 - 2013-10-08 23:30 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-12-12 15:36 - 2013-10-08 23:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-12-12 15:36 - 2013-10-08 23:27 - 03279872 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-12-12 15:36 - 2013-10-08 23:27 - 01622016 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-12-12 15:36 - 2013-10-08 23:27 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-12-12 15:36 - 2013-10-08 23:27 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2013-12-12 15:36 - 2013-10-08 23:27 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2013-12-12 15:36 - 2013-10-08 23:27 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-12-12 15:36 - 2013-10-08 23:27 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-12-12 15:36 - 2013-10-05 07:10 - 00285016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2013-12-12 15:36 - 2013-10-03 23:09 - 00385528 _____ C:\Windows\system32\ApnDatabase.xml
2013-12-12 15:36 - 2013-10-02 03:50 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2013-12-12 15:36 - 2013-09-28 06:48 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-12-12 15:36 - 2013-09-28 04:58 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-12-12 15:36 - 2013-09-28 04:35 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-12 15:36 - 2013-09-19 08:32 - 01455448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-12-12 15:36 - 2013-08-30 06:19 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2013-12-12 15:36 - 2013-08-30 06:18 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2013-12-12 15:36 - 2013-08-30 00:48 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2013-12-12 15:36 - 2013-08-30 00:47 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2013-12-11 14:36 - 2013-12-11 15:01 - 00000000 ____D C:\Users\Kilian\Downloads\IDChanger
2013-12-10 15:46 - 2013-12-15 11:32 - 00000911 _____ C:\Windows\ItemConf.ini
2013-12-09 15:43 - 2013-12-15 11:29 - 00000220 _____ C:\Windows\ChangerConf.ini
2013-12-08 13:51 - 2013-12-08 13:51 - 00000000 ____D C:\Users\Kilian\Desktop\Brick Force Money Hack v.1.0
2013-12-08 12:36 - 2013-12-08 12:36 - 00000000 ____D C:\Users\Kilian\AppData\Roaming\TechSmith
2013-12-08 12:35 - 2013-12-08 13:00 - 00000000 ____D C:\Users\Kilian\Documents\Camtasia Studio
2013-12-08 12:31 - 2013-12-08 12:31 - 00001132 _____ C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2013-12-08 12:31 - 2013-12-08 12:31 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2013-12-08 12:31 - 2013-12-08 12:31 - 00000000 ____D C:\Program Files (x86)\TechSmith
2013-12-08 12:31 - 2013-12-08 12:31 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-12-07 16:22 - 2013-12-07 16:22 - 00000000 ____D C:\Users\Kilian\Desktop\S4 League GC Hack v.1.0
2013-12-06 15:57 - 2013-12-08 11:45 - 00007597 _____ C:\Users\Kilian\AppData\Local\Resmon.ResmonCfg
2013-12-05 16:36 - 2013-12-05 16:38 - 00000000 ____D C:\Users\Kilian\Documents\GTA San Andreas User Files
2013-12-05 12:08 - 2013-12-05 12:08 - 00000221 _____ C:\Users\Kilian\Desktop\Grand Theft Auto San Andreas.url
2013-12-04 17:10 - 2013-12-04 17:10 - 00003562 _____ C:\Users\Kilian\Desktop\Class1.txt
2013-12-04 16:52 - 2013-12-04 16:53 - 05412963 _____ C:\Users\Kilian\Desktop\SourceCode.zip
2013-12-03 16:12 - 2013-12-03 16:12 - 00000000 ____D C:\Users\Kilian\AppData\Local\Howei
2013-11-26 15:18 - 2013-12-14 11:45 - 00000616 _____ C:\Users\Kilian\Desktop\s4 acc.txt
2013-11-23 11:47 - 2013-11-23 11:47 - 00000000 ____D C:\Users\Kilian\Desktop\S4 ws trainer
2013-11-22 18:49 - 2013-11-22 18:49 - 00000000 ____D C:\Users\Kilian\Desktop\S4L consol trainer by mrsnow
2013-11-22 18:45 - 2013-11-22 18:45 - 00000000 ____D C:\Users\Kilian\AppData\Roaming\Microsoft Corporation
2013-11-17 16:43 - 2013-12-04 17:51 - 00000000 ____D C:\Users\Kilian\Desktop\C#
2013-11-17 16:15 - 2013-11-15 20:21 - 01103339 _____ C:\Users\Kilian\Desktop\Siktor source code.zip
2013-11-16 12:57 - 2013-11-16 13:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2013-12-16 13:56 - 2013-12-16 13:56 - 01927940 _____ (Farbar) C:\Users\Kilian\Downloads\FRST64.exe
2013-12-16 13:56 - 2013-12-16 13:56 - 00017088 _____ C:\Users\Kilian\Downloads\FRST.txt
2013-12-16 13:56 - 2013-12-16 13:56 - 00000000 ____D C:\FRST
2013-12-16 13:56 - 2013-05-05 17:55 - 00000000 ____D C:\Users\Kilian\AppData\Roaming\Skype
2013-12-16 13:41 - 2013-03-11 17:52 - 01485012 _____ C:\Windows\WindowsUpdate.log
2013-12-16 13:40 - 2013-12-16 13:38 - 00000580 _____ C:\Users\Kilian\Desktop\SystemLook.txt
2013-12-16 13:35 - 2013-04-14 10:50 - 00003590 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-518502797-51431035-576840780-1001
2013-12-16 13:34 - 2013-03-08 04:52 - 00751892 _____ C:\Windows\system32\perfh007.dat
2013-12-16 13:34 - 2013-03-08 04:52 - 00155620 _____ C:\Windows\system32\perfc007.dat
2013-12-16 13:34 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-16 13:30 - 2013-06-02 13:05 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-16 13:30 - 2013-03-11 18:05 - 00000868 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-12-16 13:30 - 2013-03-11 18:02 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-16 13:30 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-15 17:27 - 2013-06-02 13:05 - 00001130 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-15 17:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2013-12-15 13:52 - 2013-05-03 13:16 - 00000000 ____D C:\Users\Kilian\AppData\Local\clear.fi
2013-12-15 13:12 - 2013-06-03 14:54 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-15 12:52 - 2013-08-14 13:10 - 00000893 _____ C:\Users\Kilian\SciTE.session
2013-12-15 12:52 - 2013-08-13 13:12 - 00000000 ____D C:\Users\Kilian\Desktop\S4L Hacks
2013-12-15 11:32 - 2013-12-10 15:46 - 00000911 _____ C:\Windows\ItemConf.ini
2013-12-15 11:29 - 2013-12-09 15:43 - 00000220 _____ C:\Windows\ChangerConf.ini
2013-12-14 18:14 - 2013-05-03 15:06 - 00000000 ____D C:\Users\Kilian\AppData\Local\CrashDumps
2013-12-14 11:45 - 2013-11-26 15:18 - 00000616 _____ C:\Users\Kilian\Desktop\s4 acc.txt
2013-12-14 11:11 - 2013-03-11 18:05 - 00000870 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-12-13 17:14 - 2013-12-13 17:14 - 00281248 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-13 14:47 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\SecureBootUpdates
2013-12-13 14:46 - 2013-08-18 14:10 - 00000000 ____D C:\Windows\system32\MRT
2013-12-13 14:45 - 2013-04-20 17:59 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 14:44 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\oobe
2013-12-12 16:54 - 2013-06-10 13:27 - 00000247 _____ C:\Users\Kilian\Desktop\e-mail.txt
2013-12-11 20:53 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-12-11 20:10 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-12-11 15:01 - 2013-12-11 14:36 - 00000000 ____D C:\Users\Kilian\Downloads\IDChanger
2013-12-11 14:00 - 2013-09-21 11:14 - 00001380 _____ C:\Users\Kilian\Desktop\css cheats.txt
2013-12-11 13:29 - 2013-05-04 12:02 - 00000000 ____D C:\Users\Kilian\AppData\Roaming\.minecraft
2013-12-11 13:12 - 2012-08-02 11:05 - 00092456 _____ C:\Windows\PFRO.log
2013-12-11 13:12 - 2012-07-26 09:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-12-09 14:15 - 2013-05-01 19:05 - 00004608 _____ C:\Users\Kilian\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-08 13:51 - 2013-12-08 13:51 - 00000000 ____D C:\Users\Kilian\Desktop\Brick Force Money Hack v.1.0
2013-12-08 13:00 - 2013-12-08 12:35 - 00000000 ____D C:\Users\Kilian\Documents\Camtasia Studio
2013-12-08 12:41 - 2013-11-01 15:23 - 00000000 ____D C:\Users\Kilian\Documents\Bandicam
2013-12-08 12:36 - 2013-12-08 12:36 - 00000000 ____D C:\Users\Kilian\AppData\Roaming\TechSmith
2013-12-08 12:31 - 2013-12-08 12:31 - 00001132 _____ C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2013-12-08 12:31 - 2013-12-08 12:31 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2013-12-08 12:31 - 2013-12-08 12:31 - 00000000 ____D C:\Program Files (x86)\TechSmith
2013-12-08 12:31 - 2013-12-08 12:31 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-12-08 12:31 - 2013-06-24 13:29 - 00000000 ____D C:\ProgramData\TechSmith
2013-12-08 12:31 - 2013-04-14 10:42 - 00000000 ____D C:\Users\Kilian
2013-12-08 11:45 - 2013-12-06 15:57 - 00007597 _____ C:\Users\Kilian\AppData\Local\Resmon.ResmonCfg
2013-12-07 16:22 - 2013-12-07 16:22 - 00000000 ____D C:\Users\Kilian\Desktop\S4 League GC Hack v.1.0
2013-12-05 16:38 - 2013-12-05 16:36 - 00000000 ____D C:\Users\Kilian\Documents\GTA San Andreas User Files
2013-12-05 12:08 - 2013-12-05 12:08 - 00000221 _____ C:\Users\Kilian\Desktop\Grand Theft Auto San Andreas.url
2013-12-05 10:28 - 2013-06-02 13:05 - 00002139 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-04 17:51 - 2013-11-17 16:43 - 00000000 ____D C:\Users\Kilian\Desktop\C#
2013-12-04 17:10 - 2013-12-04 17:10 - 00003562 _____ C:\Users\Kilian\Desktop\Class1.txt
2013-12-04 16:53 - 2013-12-04 16:52 - 05412963 _____ C:\Users\Kilian\Desktop\SourceCode.zip
2013-12-04 01:53 - 2012-07-26 09:14 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-04 01:53 - 2012-07-26 09:14 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-03 16:12 - 2013-12-03 16:12 - 00000000 ____D C:\Users\Kilian\AppData\Local\Howei
2013-12-03 15:36 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-12-01 16:48 - 2013-05-05 12:38 - 00000000 ____D C:\Users\Kilian\Documents\Visual Studio 2010
2013-11-29 13:21 - 2013-09-04 14:37 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-29 13:21 - 2013-05-05 17:54 - 00000000 ____D C:\ProgramData\Skype
2013-11-28 16:52 - 2013-05-10 12:37 - 00000000 ____D C:\Users\Kilian\AppData\Local\Unity
2013-11-28 15:22 - 2013-06-02 13:05 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-28 15:22 - 2013-06-02 13:05 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-23 11:47 - 2013-11-23 11:47 - 00000000 ____D C:\Users\Kilian\Desktop\S4 ws trainer
2013-11-23 07:43 - 2013-12-12 15:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-23 06:05 - 2013-12-12 15:36 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-11-22 18:49 - 2013-11-22 18:49 - 00000000 ____D C:\Users\Kilian\Desktop\S4L consol trainer by mrsnow
2013-11-22 18:45 - 2013-11-22 18:45 - 00000000 ____D C:\Users\Kilian\AppData\Roaming\Microsoft Corporation
2013-11-17 16:26 - 2013-05-05 12:36 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 10.0
2013-11-17 13:16 - 2013-03-11 18:23 - 00000000 ____D C:\ProgramData\Norton
2013-11-17 13:13 - 2013-05-15 18:06 - 00000000 ____D C:\Users\Public\Downloads\Norton
2013-11-16 19:26 - 2013-10-03 16:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-16 13:22 - 2013-11-16 12:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-16 12:36 - 2012-08-02 11:11 - 00000000 ____D C:\Program Files (x86)\MSBuild

Some content of TEMP:
====================
C:\Users\Kilian\AppData\Local\Temp\ibvdueqa.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-01 11:14

==================== End Of Log ============================
         
--- --- ---

--- --- ---
FRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-12-2013 02
Ran by Kilian at 2013-12-16 13:57:11
Running from C:\Users\Kilian\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

 clear.fi SDK - Video 2 (x32 Version: 2.1.1925)
 clear.fi SDK- Movie 2 (x32 Version: 2.1.2008)
Acer Power Management (Version: 7.00.3006)
Acer Recovery Management (Version: 6.00.3011)
AcerCloud (x32 Version: 2.01.3115)
AcerCloud Docs (x32 Version: 1.00.3201)
AutoIt v3.3.8.1 (x32)
AVM FRITZ!WLAN (x32)
Bandicam (x32 Version: 1.9.1.419)
Bandisoft MPEG-1 Decoder (x32)
Brick-Force (x32 Version: 2.12.256.51.62)
Camtasia Studio 8 (x32 Version: 8.1.2.1344)
clear.fi Media (x32 Version: 2.01.3108)
clear.fi Photo (x32 Version: 2.01.3108)
Counter-Strike: Source (x32)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3103_44819)
D3DX10 (x32 Version: 15.4.2368.0902)
eBay Worldwide (x32 Version: 2.3.0630)
Fotogalerie (x32 Version: 16.4.3508.0205)
Google Chrome (x32 Version: 31.0.1650.63)
Google Update Helper (x32 Version: 1.3.22.3)
Grand Theft Auto: San Andreas (x32)
Hotkey Utility (x32 Version: 3.00.3001)
Identity Card (x32 Version: 2.00.3004)
Intel(R) Control Center (x32 Version: 1.2.1.1008)
Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.36354)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1281)
Intel(R) Network Connections 17.2.153.0 (Version: 17.2.153.0)
Intel(R) Rapid Storage Technology (x32 Version: 11.5.0.1207)
Intel® Trusted Connect Service Client (Version: 1.24.738.1)
Java 7 Update 21 (x32 Version: 7.0.210)
Java Auto Updater (x32 Version: 2.1.9.5)
Live Updater (x32 Version: 2.00.3003)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000)
Microsoft Help Viewer 1.0 (Version: 1.0.30319)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319)
Microsoft Office (x32 Version: 14.0.6120.5004)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.50.1447.4)
Microsoft SQL Server Compact 3.5 SP2 DEU (x32 Version: 3.5.8080.0)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (Version: 3.5.8080.0)
Microsoft SQL Server System CLR Types (x32 Version: 10.50.1447.4)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319)
Microsoft Visual C# 2010 Express - DEU (x32 Version: 10.0.30319)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (x32 Version: 9.0.30729.4974)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.30319)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (x32 Version: 10.0.30319)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (Version: 10.0.30319)
Movie Maker (x32 Version: 16.4.3508.0205)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 25.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MyWinLocker (Version: 4.0.14.35)
MyWinLocker 4 (x32 Version: 4.0.14.35)
MyWinLocker Suite (x32 Version: 4.0.14.24)
Nero 12 Essentials OEM.a01 (x32 Version: 12.5.00000)
Nero ControlCenter (x32 Version: 11.0.14500.0.45)
Nero ControlCenter Help (CHM) (x32 Version: 12.0.0003)
Nero Core Components (x32 Version: 11.0.16900.1.27)
Nero Express (x32 Version: 12.0.16001)
Nero Express Help (CHM) (x32 Version: 12.0.1000)
Nero Launcher (x32 Version: 12.0.3000)
Nero Update (x32 Version: 11.0.11500.28.0)
Norton Internet Security (x32 Version: 20.4.0.40)
Norton Online Backup (x32 Version: 2.2.3.51)
Norton Online Backup ARA (x32 Version: 4.1.0.14)
NVIDIA 3D Vision Controller-Treiber 305.29 (Version: 305.29)
NVIDIA 3D Vision Treiber 305.29 (Version: 305.29)
NVIDIA Grafiktreiber 305.29 (Version: 305.29)
NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.82.513)
NVIDIA PhysX (x32 Version: 9.12.0213)
NVIDIA PhysX-Systemsoftware 9.12.0213 (Version: 9.12.0213)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.0529)
NVIDIA Systemsteuerung 305.29 (Version: 305.29)
Office Addin (x32 Version: 2.01.3200)
Photo Common (x32 Version: 16.4.3508.0205)
Photo Gallery (x32 Version: 16.4.3508.0205)
Prerequisite installer (x32 Version: 12.0.0002)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6680)
Realtek USB 2.0 Card Reader (x32 Version: 6.2.8400.30137)
S4 League_EU (x32 Version: 1.00.0000)
Shared C Run-time for x64 (Version: 10.0.0)
Shredder (Version: 2.0.8.9)
Shredder (x32 Version: 2.0.8.9)
Skype™ 6.11 (x32 Version: 6.11.102)
Spotify (x32 Version: 0.8.4.99.ga249b5f1)
Star Wars Battlefront II (x32 Version: 1.0)
Steam (x32 Version: 1.0.0.0)
TeamSpeak 3 Client (HKCU Version: 3.0.13)
Visual Studio 2005 Tools for Office Second Edition Runtime (x32)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (x32 Version: 4.0.8080.0)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729)
Visual Studio Tools for the Office system 3.0 Runtime (x32)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (x32 Version: 1)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205)
Windows Live Essentials (x32 Version: 16.4.3508.0205)
Windows Live Installer (x32 Version: 16.4.3508.0205)
Windows Live Photo Common (x32 Version: 16.4.3508.0205)
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205)
Windows Live SOXE (x32 Version: 16.4.3508.0205)
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205)
Windows Live UX Platform (x32 Version: 16.4.3508.0205)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)

==================== Restore Points  =========================

09-11-2013 13:43:12 Ende der Bereinigung
15-11-2013 14:48:26 Windows Update
21-11-2013 14:32:34 Windows Update
08-12-2013 11:30:44 Camtasia Studio 8 wird installiert
13-12-2013 13:43:50 Windows Update

==================== Hosts content: ==========================

2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0442344E-EDB9-42BD-BADA-EEC396D5D486} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\wscstub.exe [2013-06-04] (Symantec Corporation)
Task: {0AA8BFCF-89AA-4A3C-B090-619836769F44} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {115A30F5-9629-4E2E-993E-F2EF77734558} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => Rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2CC9B11E-2D12-40DD-9BB2-136D2903D956} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\System32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {307D8C75-FDA3-49D3-AA9F-DB79F405FB59} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => Rundll32.exe /d acproxy.dll,PerformAutochkOperations
Task: {32B78076-2ACA-4F04-8F35-FD1D856ED254} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-02] (Google Inc.)
Task: {36C04580-9878-478C-8F24-CA46081C15D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-02] (Google Inc.)
Task: {400FEF10-A53C-467C-87B0-FD78416A5F0E} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {47CDCD7A-4357-40D6-9096-A1EA23C507ED} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PmmUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {4E5CAE8F-A493-40A1-B31D-035096B3C752} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {67229DF8-B971-4F31-933D-0FD466D45DE1} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe aepdu.dll,AePduRunUpdate
Task: {678E8988-E472-4937-B703-B47C15A56442} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-07-04] (CyberLink)
Task: {79F13922-99E2-466D-8A04-B41AB219843B} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\symerr.exe [2013-06-04] (Symantec Corporation)
Task: {7D1C259F-4649-422C-9688-59A52BF2B634} - System32\Tasks\Hotkey Utility => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [2012-07-05] (Acer Incorporated)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {D2AD380E-CE4F-4A9B-9128-BB3547CAD364} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-08-22] (Acer Incorporated)
Task: {DEDADF75-876B-43AC-AC9D-B9D287D07022} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\symerr.exe [2013-06-04] (Symantec Corporation)
Task: {E2828DDE-1C36-4192-B82D-A0E6E147D331} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-22] ()
Task: {E71F73BB-EF7A-4467-9E89-FBC5A92394CC} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-08-24] ()
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F64ED41B-18B4-4F36-959D-0F00EC7E1136} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => Rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe

==================== Loaded Modules (whitelisted) =============

2012-06-22 02:12 - 2012-06-22 02:12 - 01407568 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2013-06-13 14:03 - 2012-05-30 07:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll
2011-08-15 20:12 - 2011-08-15 20:12 - 02603520 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtCore4.dll
2012-04-16 11:42 - 2012-04-16 11:42 - 00015872 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\featureController.dll
2011-08-15 20:12 - 2011-08-15 20:12 - 01006592 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtNetwork4.dll
2011-08-15 20:15 - 2011-08-15 20:15 - 00382464 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtXml4.dll
2011-08-17 16:41 - 2011-08-17 16:41 - 00400384 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\sqlite3.dll
2011-08-17 16:48 - 2011-08-17 16:48 - 00322048 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\log4cplus.dll
2011-08-17 16:48 - 2011-08-17 16:48 - 00195584 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\libgsoap.dll
2011-08-15 19:23 - 2011-08-15 19:23 - 00062464 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\zlib1.dll
2012-04-16 11:41 - 2012-04-16 11:41 - 00484864 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\DeviceProfile.dll
2012-04-16 11:56 - 2012-04-16 11:56 - 00500032 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\plugin\PServerPlugin.dll
2012-04-16 11:38 - 2012-04-16 11:38 - 00013824 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\eventsSender.dll
2011-07-19 16:05 - 2011-07-19 16:05 - 14978048 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtWebKit4.dll
2011-08-15 20:17 - 2011-08-15 20:17 - 09224704 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtGui4.dll
2011-07-19 16:04 - 2011-07-19 16:04 - 00317952 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\phonon4.dll
2013-03-11 18:03 - 2012-07-18 19:55 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-11-16 12:57 - 2013-11-16 12:57 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2012-07-25 21:39 - 2012-07-25 21:39 - 00373608 _____ () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
2013-06-13 14:03 - 2012-05-30 07:51 - 00699280 ____R () C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\wincfi39.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/14/2013 06:14:43 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: S4Client.exe, Version: 0.8.32.8511, Zeitstempel: 0x527ae862
Name des fehlerhaften Moduls: Item Manager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a2159b
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000095c0
ID des fehlerhaften Prozesses: 0x870
Startzeit der fehlerhaften Anwendung: 0xS4Client.exe0
Pfad der fehlerhaften Anwendung: S4Client.exe1
Pfad des fehlerhaften Moduls: S4Client.exe2
Berichtskennung: S4Client.exe3
Vollständiger Name des fehlerhaften Pakets: S4Client.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: S4Client.exe5

Error: (12/14/2013 00:25:45 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: S4Client.exe, Version: 0.8.32.8511, Zeitstempel: 0x527ae862
Name des fehlerhaften Moduls: Item Manager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a2159b
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000095c0
ID des fehlerhaften Prozesses: 0x870
Startzeit der fehlerhaften Anwendung: 0xS4Client.exe0
Pfad der fehlerhaften Anwendung: S4Client.exe1
Pfad des fehlerhaften Moduls: S4Client.exe2
Berichtskennung: S4Client.exe3
Vollständiger Name des fehlerhaften Pakets: S4Client.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: S4Client.exe5

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "select * from __InstanceModificationEvent where targetinstance isa '__ArbitratorConfiguration'" konnte im Namespace "//./root" aufgrund des Fehlers "0x80041033" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __TimerEvent" zu registrieren, deren Zielklasse "__TimerEvent" im Namespace "//./root/subscription" nicht vorhanden ist. Die Abfrage wird ignoriert.

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __TimerEvent" zu registrieren, deren Zielklasse "__TimerEvent" im Namespace "//./root/CIMV2" nicht vorhanden ist. Die Abfrage wird ignoriert.

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __TimerEvent" zu registrieren, deren Zielklasse "__TimerEvent" im Namespace "//./root" nicht vorhanden ist. Die Abfrage wird ignoriert.

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __SystemEvent" zu registrieren, deren Zielklasse "__SystemEvent" im Namespace "//./root/subscription" nicht vorhanden ist. Die Abfrage wird ignoriert.

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __SystemEvent" zu registrieren, deren Zielklasse "__SystemEvent" im Namespace "//./root/CIMV2" nicht vorhanden ist. Die Abfrage wird ignoriert.

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __SystemEvent" zu registrieren, deren Zielklasse "__SystemEvent" im Namespace "//./root" nicht vorhanden ist. Die Abfrage wird ignoriert.

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __NamespaceOperationEvent" zu registrieren, deren Zielklasse "__NamespaceOperationEvent" im Namespace "//./root/subscription" nicht vorhanden ist. Die Abfrage wird ignoriert.


System errors:
=============
Error: (12/14/2013 07:19:24 PM) (Source: DCOM) (User: Kilian-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (12/14/2013 07:19:24 PM) (Source: DCOM) (User: Kilian-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (12/14/2013 07:19:24 PM) (Source: DCOM) (User: Kilian-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (12/14/2013 07:19:24 PM) (Source: DCOM) (User: Kilian-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (12/08/2013 03:51:22 PM) (Source: DCOM) (User: Kilian-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (12/08/2013 03:51:22 PM) (Source: DCOM) (User: Kilian-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (12/08/2013 03:51:19 PM) (Source: DCOM) (User: Kilian-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (12/08/2013 03:51:19 PM) (Source: DCOM) (User: Kilian-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (12/08/2013 03:51:19 PM) (Source: DCOM) (User: Kilian-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (12/08/2013 03:51:19 PM) (Source: DCOM) (User: Kilian-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}


Microsoft Office Sessions:
=========================
Error: (12/14/2013 06:14:43 PM) (Source: Application Error)(User: )
Description: S4Client.exe0.8.32.8511527ae862Item Manager.dll0.0.0.052a2159bc0000409000095c087001cef8ef1978045eC:\Program Files (x86)\alaplaya\S4League\S4Client.exeC:\Users\Kilian\Downloads\IDChanger\Item Manager.dll3912d3f4-64e3-11e3-bfe1-246511c0e890

Error: (12/14/2013 00:25:45 PM) (Source: Application Error)(User: )
Description: S4Client.exe0.8.32.8511527ae862Item Manager.dll0.0.0.052a2159bc0000409000095c087001cef8bce856401dC:\Program Files (x86)\alaplaya\S4League\S4Client.exeC:\Users\Kilian\Downloads\IDChanger\Item Manager.dll78954c05-64b2-11e3-bfdf-246511c0e890

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: //./rootselect * from __InstanceModificationEvent where targetinstance isa '__ArbitratorConfiguration'0x80041033

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: $Coreselect * from __TimerEvent__TimerEvent//./root/subscription

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: $Coreselect * from __TimerEvent__TimerEvent//./root/CIMV2

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: $Coreselect * from __TimerEvent__TimerEvent//./root

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: $Coreselect * from __SystemEvent__SystemEvent//./root/subscription

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: $Coreselect * from __SystemEvent__SystemEvent//./root/CIMV2

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: $Coreselect * from __SystemEvent__SystemEvent//./root

Error: (12/13/2013 05:16:28 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: $Coreselect * from __NamespaceOperationEvent__NamespaceOperationEvent//./root/subscription


==================== Memory info =========================== 

Percentage of memory in use: 43%
Total physical RAM: 4036.46 MB
Available physical RAM: 2290.5 MB
Total Pagefile: 4740.46 MB
Available Pagefile: 2945.55 MB
Total Virtual: 8192 MB
Available Virtual: 8191.76 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:452.1 GB) (Free:385.74 GB) NTFS
Drive d: (DATA) (Fixed) (Total:452.61 GB) (Free:452.46 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 2CEA2CF8)

Partition: GPT Partition Type
==================== End Of Log ============================
         
--- --- ---
__________________
Mfg K1ramox

Alt 16.12.2013, 16:18   #77
K1ramox
 
exe datei ist noch offen beim runterfahren seiht 4 tagen! - Standard

exe datei ist noch offen beim runterfahren seiht 4 tagen!



Hier hab noch nen sreen hochgeladen das ist der sreen von diesem hacker von seinem trojaner
Angehängte Grafiken
Dateityp: jpg liste.jpg (202,1 KB, 182x aufgerufen)
__________________

__________________

Alt 17.12.2013, 09:59   #78
schrauber
/// the machine
/// TB-Ausbilder
 

exe datei ist noch offen beim runterfahren seiht 4 tagen! - Standard

exe datei ist noch offen beim runterfahren seiht 4 tagen!



So ein Account wird Online gehackt. Darf ich mal fragen wie alt du bist?
__________________
__________________

Alt 17.12.2013, 12:38   #79
K1ramox
 
exe datei ist noch offen beim runterfahren seiht 4 tagen! - Standard

exe datei ist noch offen beim runterfahren seiht 4 tagen!



13 wieso? der sreen kommt übrings von nen freund der das teil erwischt hat
__________________
Mfg K1ramox

Alt 18.12.2013, 09:38   #80
schrauber
/// the machine
/// TB-Ausbilder
 

exe datei ist noch offen beim runterfahren seiht 4 tagen! - Standard

exe datei ist noch offen beim runterfahren seiht 4 tagen!



Sorry, aber merkt man

Ich würd aufhören nach Sachen zu suchen oder In sachen rum zu fingern, wenn

a) gar keine Probleme da sind
b) man nicht weiß was man macht


Und unbedingt das Surfverhalten überdenken.

Ich kann Dir bei keinem deiner "Probleme" helfen, die Du auf den letzten 3 Seiten gepostet hast.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 18.12.2013, 15:20   #81
K1ramox
 
exe datei ist noch offen beim runterfahren seiht 4 tagen! - Standard

exe datei ist noch offen beim runterfahren seiht 4 tagen!



Ja ist egal die probleme stören mich sowieso nicht werde anfang dieses jahres wahrscheinlich den rechner neue aufsetzten aber trotzdem danke das sie sich die zeit genomen haben
__________________
--> exe datei ist noch offen beim runterfahren seiht 4 tagen!

Alt 19.12.2013, 10:46   #82
schrauber
/// the machine
/// TB-Ausbilder
 

exe datei ist noch offen beim runterfahren seiht 4 tagen! - Standard

exe datei ist noch offen beim runterfahren seiht 4 tagen!



Gern Geschehen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu exe datei ist noch offen beim runterfahren seiht 4 tagen!
64-bit, bereits, datei, daten, erstell, erstellt, exe, exe datei, helft, länger, meldung, offen, programe, programm, runterfahren, tagen, thema, verschoben, videos, win




Ähnliche Themen: exe datei ist noch offen beim runterfahren seiht 4 tagen!


  1. Debian: Rechner läßt sich nur noch per shutdown runterfahren.
    Alles rund um Mac OSX & Linux - 14.05.2015 (1)
  2. WIN XP bleibt beim Runterfahren hängen
    Alles rund um Windows - 08.04.2013 (9)
  3. Kritische Lücke in McAfee-Produkten nach über 180 Tagen noch offen
    Nachrichten - 16.01.2012 (0)
  4. Bluscreen beim runterfahren von Win7
    Log-Analyse und Auswertung - 29.11.2010 (0)
  5. Zieldatei wird von BAT-Datei nicht erstellt und DOS Shell bleibt offen
    Alles rund um Windows - 27.08.2010 (2)
  6. svchost.exe und services.exe fehler beim runterfahren
    Log-Analyse und Auswertung - 18.11.2009 (4)
  7. avguard.exe - Fehler in Anwendung (beim Runterfahren)
    Antiviren-, Firewall- und andere Schutzprogramme - 30.01.2009 (16)
  8. Pc hat Probleme beim runterfahren !
    Log-Analyse und Auswertung - 07.10.2008 (9)
  9. explorer hängt oft und absturz der dwwin.exe beim runterfahren
    Log-Analyse und Auswertung - 28.08.2008 (0)
  10. Fehler beim Runterfahren!
    Alles rund um Windows - 08.06.2008 (5)
  11. Computer startet beim runterfahren neu
    Alles rund um Windows - 02.12.2007 (1)
  12. explorer.exe problem beim runterfahren!
    Log-Analyse und Auswertung - 14.08.2007 (8)
  13. Probleme beim starten und runterfahren...
    Plagegeister aller Art und deren Bekämpfung - 23.05.2006 (15)
  14. Beim hochfahren und runterfahren fehler meldungen
    Log-Analyse und Auswertung - 31.03.2006 (8)
  15. Habe probleme beim runterfahren des PCs
    Plagegeister aller Art und deren Bekämpfung - 13.11.2004 (1)
  16. pv.exe und cmd.exe- Fehler beim Runterfahren
    Plagegeister aller Art und deren Bekämpfung - 26.09.2004 (7)
  17. Fehlermeldung beim runterfahren
    Alles rund um Mac OSX & Linux - 27.10.2002 (8)

Zum Thema exe datei ist noch offen beim runterfahren seiht 4 tagen! - Langsam versteh ich nichts mehr eben grade hab ich mich in skype eingelogt und hatte aufeinmal ein anderes profielbild (sehr eklig) SystemLook 30.07.11 by jpshortstuff Log created at 13:38 on - exe datei ist noch offen beim runterfahren seiht 4 tagen!...
Archiv
Du betrachtest: exe datei ist noch offen beim runterfahren seiht 4 tagen! auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.