GVU Trojaner 2.07 mit Web-Cam

Bodolino · 11.07.2012, 18:05

Hallo zusammen,

mein Sohn hat sich den GVU-Trojaner eingefangen, laut recherchen müsste es der 2.07 sein. Seit Montag ist der Computer gesperrt.

Hab mittlerweile Malwarebytes laufen lassen, dieser hat auch 2 Trojaner zbot.124.gen und trojan.ransom.gen gefunden, sowie 3 weitere adware.

Der Computer läuft zwar seitdem wieder, ich hab aber die Befürchtung, dass das noch nicht alles war.

Es sind übrigens zwei Benutzer am Computer, einmal Admin und einmal User. Der Suchlauf von Malwarebytes erfolgte über Admin, weil User gesperrt war.

Defogger und OTL hab ich auch schon laufen lassen, ich häng die Dateien mit an.

Herzlichen Dank schon mal im voraus und beste Grüße

Bodolino

t'john · 11.07.2012, 18:45

Fixen mit OTL

Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).

Starte die OTL.exe.
Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:

Code:

ATTFilter

:OTL
PRC - [2012.06.06 09:16:00 | 000,185,856 | ---- | M] () -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe 
SRV - [2012.06.06 09:16:00 | 000,185,856 | ---- | M] () [Auto | Running] -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater) 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox 
IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF 
IE:64bit: - HKLM\..\SearchScopes\{42218EA0-A1A3-4FAE-BBF7-7482498E8022}: "URL" = http://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} 
IE:64bit: - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF 
IE:64bit: - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://de.wikipedia.org/wiki/Special:Search?search={searchTerms} 
IE:64bit: - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=http://shop.ebay.com/?_nkw={searchTerms} 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox 
IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF 
IE - HKLM\..\SearchScopes\{42218EA0-A1A3-4FAE-BBF7-7482498E8022}: "URL" = http://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} 
IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF 
IE - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://de.wikipedia.org/wiki/Special:Search?search={searchTerms} 
IE - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=http://shop.ebay.com/?_nkw={searchTerms} 
IE - HKCU\..\SearchScopes,DefaultScope = {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} 
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox 
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=109992&babsrc=SP_ss&mntrId=88b2be8300000000000060d81951a3a4 
IE - HKCU\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF 
IE - HKCU\..\SearchScopes\{42218EA0-A1A3-4FAE-BBF7-7482498E8022}: "URL" = http://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} 
IE - HKCU\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF 
IE - HKCU\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredibar.com/mb155/?search={searchTerms}&loc=IB_DS&a=6OyG8nVMsR&i=26 
IE - HKCU\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://de.wikipedia.org/wiki/Special:Search?search={searchTerms} 
IE - HKCU\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=http://shop.ebay.com/?_nkw={searchTerms} 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 
FF - prefs.js..browser.search.defaultenginename: "MyStart Search" 
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)" 
FF - prefs.js..browser.search.selectedEngine: "MyStart Search" 
FF - prefs.js..browser.startup.homepage: "http://www.google.de/" 
FF - prefs.js..keyword.URL: "http://mystart.incredibar.com/mb155/?loc=IB_DS&a=6OyG8nVMsR&&i=26&search=" 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll () 
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX [2012.06.26 18:02:45 | 000,000,000 | ---D | M] 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\Web Assistant\Firefox [2012.06.26 18:02:45 | 000,000,000 | ---D | M] 
O2:64bit: - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension64.dll () 
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) 
O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension32.dll () 
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) 
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. 
O4 - HKLM..\Run: [] File not found 
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\Kevin\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc) 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 
O32 - HKLM CDRom: AutoRun - 1 
[2012.06.26 18:02:45 | 000,000,000 | ---D | C] -- C:\Program Files\Web Assistant 
[2012.06.26 18:02:50 | 000,000,684 | ---- | M] () -- C:\user.js 
[2012.07.09 21:27:31 | 004,503,728 | ---- | M] () -- C:\ProgramData\go_0molg.pad 
[2012.07.09 14:21:13 | 004,503,728 | ---- | C] () -- C:\ProgramData\go_0molg.pad 

:Files

C:\Program Files\Web Assistant
C:\ProgramData\go_0molg.pad

:Commands
ipconfig /flushdns /c
[emptytemp]
[emptyflash]
[resethosts]

Schließe alle Programme.
Klicke auf den Fix Button.
Wenn OTL einen Neustart verlangt, bitte zulassen.
Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\

Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!

Bodolino · 11.07.2012, 19:28

Hy t´john,

danke für die schnelle Antwort.
Hab OTL mit dem skript durchlaufen lassen.

Hier ist die log-Datei

Files\Folders moved on Reboot...
File move failed. C:\Users\Kevin\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be moved on reboot.
C:\Windows\System32\drivers\etc\Hosts moved successfully.

PendingFileRenameOperations files...
[2012.02.24 22:00:13 | 000,000,000 | ---- | M] () C:\Users\Kevin\AppData\Local\Temp\FXSAPIDebugLogFile.txt : Unable to obtain MD5
File C:\Windows\System32\drivers\etc\Hosts not found!

Registry entries deleted on Reboot...

t'john · 11.07.2012, 19:43

Das Log ist unvollständig!

Bitte alles posten!

Bodolino · 11.07.2012, 19:56

Hey t´john,

sorry hatte vergessen den Antivir zu deaktivieren.
Hab es jetzt nun nochmal durchlaufen lassen.
Hier nun die komplette log-Datei.

Danke schön nochmal
Gruß Bodolino

All processes killed
========== OTL ==========
No active process named ExtensionUpdaterService.exe was found!
Error: No service named Web Assistant Updater was found to stop!
Service\Driver key Web Assistant Updater not found.
File C:\Programme\Web Assistant\ExtensionUpdaterService.exe not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{42218EA0-A1A3-4FAE-BBF7-7482498E8022}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42218EA0-A1A3-4FAE-BBF7-7482498E8022}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d43b3890-80c7-4010-a95d-1e77b5924dc3}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{42218EA0-A1A3-4FAE-BBF7-7482498E8022}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42218EA0-A1A3-4FAE-BBF7-7482498E8022}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d43b3890-80c7-4010-a95d-1e77b5924dc3}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{42218EA0-A1A3-4FAE-BBF7-7482498E8022}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42218EA0-A1A3-4FAE-BBF7-7482498E8022}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d43b3890-80c7-4010-a95d-1e77b5924dc3}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
Prefs.js: "MyStart Search" removed from browser.search.defaultenginename
Prefs.js: "Search the web (Babylon)" removed from browser.search.order.1
Prefs.js: "MyStart Search" removed from browser.search.selectedEngine
Prefs.js: "hxxp://www.google.de/" removed from browser.startup.homepage
Prefs.js: "hxxp://mystart.incredibar.com/mb155/?loc=IB_DS&a=6OyG8nVMsR&&i=26&search=" removed from keyword.URL
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/FlashPlayer\ not found.
File C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll not found.
File HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\Web Assistant\Firefox not found.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}\ not found.
File C:\Programme\Web Assistant\Extension64.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}\ not found.
File C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}\ not found.
File C:\Programme\Web Assistant\Extension32.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ not found.
File C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface not found.
File C:\Users\Kevin\AppData\Local\Akamai\netsession_win.exe not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun not found.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Folder C:\Program Files\Web Assistant\ not found.
File C:\user.js not found.
File C:\ProgramData\go_0molg.pad not found.
File C:\ProgramData\go_0molg.pad not found.
========== FILES ==========
File\Folder C:\Program Files\Web Assistant not found.
File\Folder C:\ProgramData\go_0molg.pad not found.
========== COMMANDS ==========
Error: Unable to interpret <ipconfig /flushdns /c> in the current context!

[EMPTYTEMP]

User: All Users

User: Bodo
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Kevin
->Temp folder emptied: 1531 bytes
->Temporary Internet Files folder emptied: 45776 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 24406627 bytes
->Flash cache emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2682 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 23,00 mb

[EMPTYFLASH]

User: All Users

User: Bodo
->Flash cache emptied: 0 bytes

User: Default

User: Default User

User: Kevin
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb

HOSTS file reset successfully

OTL by OldTimer - Version 3.2.53.1 log created on 07112012_204659

Files\Folders moved on Reboot...
C:\Users\Kevin\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...
File C:\Users\Kevin\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!

Registry entries deleted on Reboot...

t'john · 11.07.2012, 20:03

ok!

1. Schritt

Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Malwarebytes Anti-Malware
- Anwendbar auf Windows 2000, XP, Vista und 7.
- Installiere das Programm in den vorgegebenen Pfad.
- Aktiviere "Komplett Scan durchführen" => Scan.
- Wähle alle verfügbaren Laufwerke (ausser CD/DVD) aus und starte den Scan.
- Funde bitte löschen lassen oder in Quarantäne.
- Wenn der Scan beendet ist, klicke auf "Zeige Resultate".

danach:

Hinweis: ESET zeigt durchaus öfter ein paar Fehlalarme. Deswegen soll auch von ESET immer nur erst das Log gepostet und nichts entfernt werden.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

ATTFilter

 hier steht das Log

Bodolino · 11.07.2012, 20:08

Okay,

ich mach dann mal, wird wohl eine Zeit dauern bis der Scan fertig ist.
Danke für den Tip mit den Code-Tags, wollte gerade danach suchen wie man die erstellt.

Meld mich dann wieder, wenn alles fertig ist.
Herzlichen Dank und bis später

Bodolino

t'john · 11.07.2012, 20:17

CODE Tags lassen sich mit diesem Button

einfuegen

Melde Dich bitte mit dem Logfile wieder.

Bodolino · 11.07.2012, 21:18

Hey t´john

so, malwarebyte ist fertig, hier nun der log

Code:

ATTFilter

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Datenbank Version: v2012.07.11.09

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Kevin :: KEVIN-HP [Administrator]

11.07.2012 21:32:28
mbam-log-2012-07-11 (21-32-28).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 392979
Laufzeit: 38 Minute(n), 51 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

mach jetzt noch eset und meld mich dann gleich wieder.

Danke schön und Gruß
Bodolino

Hy t´john

so eset ist auch fertig.
Anbei die log-datei

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=b0a2a15cd0cd824b995c22144a727f65
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-07-11 09:25:24
# local_time=2012-07-11 11:25:24 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1792 16777215 100 0 11927973 11927973 0 0
# compatibility_mode=3584 16777215 100 0 0 0 0 0
# compatibility_mode=5893 16776573 100 94 3856 93668300 0 0
# compatibility_mode=8192 67108863 100 0 291 291 0 0
# scanned=175222
# found=5
# cleaned=0
# scan_time=3474
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarApp.dll	a variant of Win32/Toolbar.Babylon application (unable to clean)	00000000000000000000000000000000	I
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarEng.dll	Win32/Toolbar.Babylon application (unable to clean)	00000000000000000000000000000000	I
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarsrv.exe	probably a variant of Win32/Toolbar.Babylon application (unable to clean)	00000000000000000000000000000000	I
C:\_OTL\MovedFiles\07112012_195703\C_Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll	Win32/Toolbar.Babylon application (unable to clean)	00000000000000000000000000000000	I
C:\_OTL\MovedFiles\07112012_195703\C_Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll	Win32/Toolbar.Babylon application (unable to clean)	00000000000000000000000000000000	I

Ich schmeis mich jetzt ins Bett. Bin dann morgen abend nach der Arbeit wieder on.
Danke schön nochmal.
Wünsch noch ne gute Nacht.

Schöne Grüße
Bodolino

t'john · 12.07.2012, 00:23

Sehr gut!

Downloade Dir bitte AdwCleaner auf deinen Desktop.

Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Search.
Nach Ende des Suchlaufs öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.

Bodolino · 12.07.2012, 14:51

Hey t´john

bin wieder da.
Hier der log von AdwCleaner

Code:

ATTFilter

# AdwCleaner v1.701 - Logfile created 07/12/2012 at 15:47:45
# Updated 02/07/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Kevin - KEVIN-HP
# Running from : C:\Users\Kevin\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Users\Kevin\AppData\Local\Babylon
Folder Found : C:\Users\Kevin\AppData\Roaming\Babylon
Folder Found : C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\7lycc5i4.default\extensions\ffxtlbr@incredibar.com
Folder Found : C:\ProgramData\Babylon
Folder Found : C:\Program Files (x86)\BabylonToolbar
Folder Found : C:\Program Files (x86)\Incredibar.com
Folder Found : C:\Program Files (x86)\v-Grabber
File Found : C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\7lycc5i4.default\searchplugins\MyStart Search.xml
File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml

***** [Registry] *****

Key Found : HKCU\Software\BabylonToolbar
Key Found : HKCU\Software\IM
Key Found : HKCU\Software\ImInstaller
Key Found : HKCU\Software\Softonic
Key Found : HKLM\SOFTWARE\Babylon
Key Found : HKLM\SOFTWARE\BabylonToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Key Found : HKLM\SOFTWARE\Classes\b
Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Found : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Found : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1
Key Found : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Key Found : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Key Found : HKLM\SOFTWARE\Classes\I
Key Found : HKLM\SOFTWARE\Classes\Incredibar.dskBnd
Key Found : HKLM\SOFTWARE\Classes\Incredibar.dskBnd.1
Key Found : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr
Key Found : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr.1
Key Found : HKLM\SOFTWARE\Classes\IncredibarApp.appCore
Key Found : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1
Key Found : HKLM\SOFTWARE\Conduit
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Key Found : HKLM\SOFTWARE\Incredibar.com
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\incredibar
Key Found : HKLM\SOFTWARE\Web Assistant
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
[x64] Key Found : HKCU\Software\BabylonToolbar
[x64] Key Found : HKCU\Software\IM
[x64] Key Found : HKCU\Software\ImInstaller
[x64] Key Found : HKCU\Software\Softonic
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\b
[x64] Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd
[x64] Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
[x64] Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore
[x64] Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
[x64] Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
[x64] Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
[x64] Key Found : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc
[x64] Key Found : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1
[x64] Key Found : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
[x64] Key Found : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
[x64] Key Found : HKLM\SOFTWARE\Classes\I
[x64] Key Found : HKLM\SOFTWARE\Classes\Incredibar.dskBnd
[x64] Key Found : HKLM\SOFTWARE\Classes\Incredibar.dskBnd.1
[x64] Key Found : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr
[x64] Key Found : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr.1
[x64] Key Found : HKLM\SOFTWARE\Classes\IncredibarApp.appCore
[x64] Key Found : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1
[x64] Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
[x64] Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
[x64] Key Found : HKLM\SOFTWARE\Web Assistant
[x64] Value Found : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]

***** [Registre - GUID] *****

Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Found : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Key Found : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Found : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Found : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Found : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403a-B9D2-65C292C39087}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403a-B9D2-65C292C39087}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403a-B9D2-65C292C39087}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403a-B9D2-65C292C39087}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://mystart.incredibar.com/mb155?a=6OyG8nVMsR&i=26

-\\ Mozilla Firefox v13.0.1 (de)

Profile name : default 
File : C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\7lycc5i4.default\prefs.js

Found : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Found : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb155?a=6OyG8nVMsR&loc=FF_NT");
Found : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Found : user_pref("extensions.BabylonToolbar_i.babExt", "");
Found : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=109992");
Found : user_pref("extensions.BabylonToolbar_i.hardId", "88b2be8300000000000060d81951a3a4");
Found : user_pref("extensions.BabylonToolbar_i.id", "88b2be8300000000000060d81951a3a4");
Found : user_pref("extensions.BabylonToolbar_i.instlDay", "15412");
Found : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Found : user_pref("extensions.BabylonToolbar_i.newTab", true);
Found : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?AF=109992&babsrc=NT_s[...]
Found : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Found : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Found : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Found : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Found : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
Found : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Found : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1717:05:16");
Found : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Found : user_pref("extensions.enabledAddons", "ffxtlbr@incredibar.com:1.5.0,{CAFEEFAC-0016-0000-0033-ABCDEFF[...]
Found : user_pref("extensions.incredibar.admin", false);
Found : user_pref("extensions.incredibar.aflt", "orgnl");
Found : user_pref("extensions.incredibar.cntry", "DE");
Found : user_pref("extensions.incredibar.dfltLng", "");
Found : user_pref("extensions.incredibar.dfltSrch", false);
Found : user_pref("extensions.incredibar.did", "10657");
Found : user_pref("extensions.incredibar.envrmnt", "production");
Found : user_pref("extensions.incredibar.excTlbr", false);
Found : user_pref("extensions.incredibar.hdrMd5", "D8240CD10457DF4A0EF8216C0CFA99BE");
Found : user_pref("extensions.incredibar.hmpg", false);
Found : user_pref("extensions.incredibar.id", "88b2be8300000000000060d81951a3a5");
Found : user_pref("extensions.incredibar.installerproductid", "26");
Found : user_pref("extensions.incredibar.instlDay", "15517");
Found : user_pref("extensions.incredibar.instlRef", "");
Found : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1418:02:49");
Found : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Found : user_pref("extensions.incredibar.newTab", false);
Found : user_pref("extensions.incredibar.noFFXTlbr", false);
Found : user_pref("extensions.incredibar.ppd", "");
Found : user_pref("extensions.incredibar.prdct", "incredibar");
Found : user_pref("extensions.incredibar.productid", "26");
Found : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Found : user_pref("extensions.incredibar.sg", "none");
Found : user_pref("extensions.incredibar.smplGrp", "none");
Found : user_pref("extensions.incredibar.tlbrId", "base");
Found : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyG8nVMsR&loc=IB_T[...]
Found : user_pref("extensions.incredibar.upn2", "6OyG8nVMsR");
Found : user_pref("extensions.incredibar.upn2n", "92261652746021093");
Found : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Found : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1418:02:49");
Found : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Found : user_pref("extensions.incredibar_i.aflt", "orgnl");
Found : user_pref("extensions.incredibar_i.dfltLng", "");
Found : user_pref("extensions.incredibar_i.did", "10657");
Found : user_pref("extensions.incredibar_i.excTlbr", false);
Found : user_pref("extensions.incredibar_i.id", "88b2be8300000000000060d81951a3a5");
Found : user_pref("extensions.incredibar_i.installerproductid", "26");
Found : user_pref("extensions.incredibar_i.instlDay", "15517");
Found : user_pref("extensions.incredibar_i.instlRef", "");
Found : user_pref("extensions.incredibar_i.ms_url_id", "");
Found : user_pref("extensions.incredibar_i.newTab", false);
Found : user_pref("extensions.incredibar_i.ppd", "");
Found : user_pref("extensions.incredibar_i.prdct", "incredibar");
Found : user_pref("extensions.incredibar_i.productid", "26");
Found : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Found : user_pref("extensions.incredibar_i.smplGrp", "none");
Found : user_pref("extensions.incredibar_i.tlbrId", "base");
Found : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyG8nVMsR&loc=IB[...]
Found : user_pref("extensions.incredibar_i.upn2", "6OyG8nVMsR");
Found : user_pref("extensions.incredibar_i.upn2n", "92261652746021093");
Found : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Found : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1418:02:49");
Found : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Found : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...]

Profile name : default 
File : C:\Users\Bodo\AppData\Roaming\Mozilla\Firefox\Profiles\bm7afwh7.default\prefs.js

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [22654 octets] - [12/07/2012 15:47:45]

########## EOF - C:\AdwCleaner[R1].txt - [22783 octets] ##########

Danke und bis dann
Gruß Bodolino

t'john · 12.07.2012, 19:24

Sehr gut!

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Delete.
Bestätige jeweils mit Ok.
Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[S1].txt.

Bodolino · 12.07.2012, 21:42

Hey t´john

hab´s grad durchlaufen lassen, hier wieder der log

Code:

ATTFilter

# AdwCleaner v1.701 - Logfile created 07/12/2012 at 22:34:13
# Updated 02/07/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Kevin - KEVIN-HP
# Running from : C:\Users\Kevin\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Users\Kevin\AppData\Local\Babylon
Folder Deleted : C:\Users\Kevin\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\7lycc5i4.default\extensions\ffxtlbr@incredibar.com
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\Program Files (x86)\BabylonToolbar
Folder Deleted : C:\Program Files (x86)\Incredibar.com
Folder Deleted : C:\Program Files (x86)\v-Grabber
File Deleted : C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\7lycc5i4.default\searchplugins\MyStart Search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml

***** [Registry] *****

Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\SOFTWARE\Babylon
Key Deleted : HKLM\SOFTWARE\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Key Deleted : HKLM\SOFTWARE\Classes\b
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Key Deleted : HKLM\SOFTWARE\Classes\I
Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr
Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Key Deleted : HKLM\SOFTWARE\Incredibar.com
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\incredibar
Key Deleted : HKLM\SOFTWARE\Web Assistant
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
[x64] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
[x64] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
[x64] Key Deleted : HKLM\SOFTWARE\Web Assistant

***** [Registre - GUID] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403a-B9D2-65C292C39087}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403a-B9D2-65C292C39087}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://mystart.incredibar.com/mb155?a=6OyG8nVMsR&i=26 --> hxxp://www.google.com

-\\ Mozilla Firefox v13.0.1 (de)

Profile name : default 
File : C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\7lycc5i4.default\prefs.js

C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\7lycc5i4.default\user.js ... Deleted !

Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Deleted : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb155?a=6OyG8nVMsR&loc=FF_NT");
Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Deleted : user_pref("extensions.BabylonToolbar_i.babExt", "");
Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=109992");
Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "88b2be8300000000000060d81951a3a4");
Deleted : user_pref("extensions.BabylonToolbar_i.id", "88b2be8300000000000060d81951a3a4");
Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15412");
Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Deleted : user_pref("extensions.BabylonToolbar_i.newTab", true);
Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?AF=109992&babsrc=NT_s[...]
Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1717:05:16");
Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Deleted : user_pref("extensions.enabledAddons", "ffxtlbr@incredibar.com:1.5.0,{CAFEEFAC-0016-0000-0033-ABCDEFF[...]
Deleted : user_pref("extensions.incredibar.admin", false);
Deleted : user_pref("extensions.incredibar.aflt", "orgnl");
Deleted : user_pref("extensions.incredibar.cntry", "DE");
Deleted : user_pref("extensions.incredibar.dfltLng", "");
Deleted : user_pref("extensions.incredibar.dfltSrch", false);
Deleted : user_pref("extensions.incredibar.did", "10657");
Deleted : user_pref("extensions.incredibar.envrmnt", "production");
Deleted : user_pref("extensions.incredibar.excTlbr", false);
Deleted : user_pref("extensions.incredibar.hdrMd5", "D8240CD10457DF4A0EF8216C0CFA99BE");
Deleted : user_pref("extensions.incredibar.hmpg", false);
Deleted : user_pref("extensions.incredibar.id", "88b2be8300000000000060d81951a3a5");
Deleted : user_pref("extensions.incredibar.installerproductid", "26");
Deleted : user_pref("extensions.incredibar.instlDay", "15517");
Deleted : user_pref("extensions.incredibar.instlRef", "");
Deleted : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1418:02:49");
Deleted : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Deleted : user_pref("extensions.incredibar.newTab", false);
Deleted : user_pref("extensions.incredibar.noFFXTlbr", false);
Deleted : user_pref("extensions.incredibar.ppd", "");
Deleted : user_pref("extensions.incredibar.prdct", "incredibar");
Deleted : user_pref("extensions.incredibar.productid", "26");
Deleted : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Deleted : user_pref("extensions.incredibar.sg", "none");
Deleted : user_pref("extensions.incredibar.smplGrp", "none");
Deleted : user_pref("extensions.incredibar.tlbrId", "base");
Deleted : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyG8nVMsR&loc=IB_T[...]
Deleted : user_pref("extensions.incredibar.upn2", "6OyG8nVMsR");
Deleted : user_pref("extensions.incredibar.upn2n", "92261652746021093");
Deleted : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Deleted : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1418:02:49");
Deleted : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Deleted : user_pref("extensions.incredibar_i.aflt", "orgnl");
Deleted : user_pref("extensions.incredibar_i.dfltLng", "");
Deleted : user_pref("extensions.incredibar_i.did", "10657");
Deleted : user_pref("extensions.incredibar_i.excTlbr", false);
Deleted : user_pref("extensions.incredibar_i.id", "88b2be8300000000000060d81951a3a5");
Deleted : user_pref("extensions.incredibar_i.installerproductid", "26");
Deleted : user_pref("extensions.incredibar_i.instlDay", "15517");
Deleted : user_pref("extensions.incredibar_i.instlRef", "");
Deleted : user_pref("extensions.incredibar_i.ms_url_id", "");
Deleted : user_pref("extensions.incredibar_i.newTab", false);
Deleted : user_pref("extensions.incredibar_i.ppd", "");
Deleted : user_pref("extensions.incredibar_i.prdct", "incredibar");
Deleted : user_pref("extensions.incredibar_i.productid", "26");
Deleted : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Deleted : user_pref("extensions.incredibar_i.smplGrp", "none");
Deleted : user_pref("extensions.incredibar_i.tlbrId", "base");
Deleted : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyG8nVMsR&loc=IB[...]
Deleted : user_pref("extensions.incredibar_i.upn2", "6OyG8nVMsR");
Deleted : user_pref("extensions.incredibar_i.upn2n", "92261652746021093");
Deleted : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Deleted : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1418:02:49");
Deleted : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Deleted : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...]

Profile name : default 
File : C:\Users\Bodo\AppData\Roaming\Mozilla\Firefox\Profiles\bm7afwh7.default\prefs.js

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [22605 octets] - [12/07/2012 15:47:45]
AdwCleaner[S1].txt - [18596 octets] - [12/07/2012 22:34:13]

########## EOF - C:\AdwCleaner[S1].txt - [18725 octets] ##########

Soviel Scanner hab ich auch noch nie durchlaufen lassen.
Kann man die eigentlich auf jeden PC laufen lassen oder nur spezifisch?

Danke und bis gleich
Gruß Bodolino

t'john · 13.07.2012, 12:25

Sehr gut!

Wie laeuft der Rechner?

Lasse SuperAntiSysware laufen: http://www.trojaner-board.de/51871-a...tispyware.html

Zitat:

Kann man die eigentlich auf jeden PC laufen lassen oder nur spezifisch?

Jajn. Manche Tools koennen ein Windows kaputt machen, wenn man nicht weiss, was man genau macht...

Bodolino · 13.07.2012, 17:28

Hey t´john,

Rechner läuft meiner Meinung nach stabil und auch wieder flotter.
Superantispyware ist jetzt fertig.
Hier der log

Code:

ATTFilter

SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 07/13/2012 at 06:07 PM

Application Version : 5.5.1006

Core Rules Database Version : 8894
Trace Rules Database Version: 6706

Scan type       : Complete Scan
Total Scan Time : 01:19:02

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Administrator

Memory items scanned      : 688
Memory threats detected   : 0
Registry items scanned    : 65582
Registry threats detected : 0
File items scanned        : 159440
File threats detected     : 641

Adware.Tracking Cookie
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\UYLRJK3Z.txt [ /media6degrees.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\AT2UROG2.txt [ /ad.adc-serv.net ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\2GYJILU7.txt [ /tracking.quisma.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\MJANLXHE.txt [ /ad4.adfarm1.adition.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\HHQ55S4A.txt [ /track.adform.net ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\7HR3UUAD.txt [ /atdmt.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\EH8TLMI2.txt [ /zanox.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\FR1GMPRT.txt [ /adfarm1.adition.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\YZWA58N2.txt [ /adbrite.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\1287OPFS.txt [ /serving-sys.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\D192JO47.txt [ /bs.serving-sys.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\R9E0NFEA.txt [ /ru4.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\2KJ8QJ3G.txt [ /smartadserver.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\LS3G02HF.txt [ /ad3.adfarm1.adition.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\MC49B6CN.txt [ /adformdsp.net ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\JTMSGK97.txt [ /dyntracker.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\FWB5YR0E.txt [ /apmebf.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\F671SOF8.txt [ /adform.net ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\1LESFE7D.txt [ /mediaplex.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\LDJD80BR.txt [ /webmasterplan.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\E7PWWA3J.txt [ /fastclick.net ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\6CN4ELXX.txt [ /tradedoubler.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\SW81FOZK.txt [ /server.adformdsp.net ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\3QN1RS7S.txt [ /imrworldwide.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\6K6V7N77.txt [ /ad1.adfarm1.adition.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\90Q4H231.txt [ /www.zanox-affiliate.de ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\6300TW6Q.txt [ /c.atdmt.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\KPQRV5H1.txt [ /zanox-affiliate.de ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\POS31A1G.txt [ /ad.zanox.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\4F2Q2VE1.txt [ /lucidmedia.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\ZFTYXM63.txt [ /ad.yieldmanager.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\HW8MO1KH.txt [ /ad2.adfarm1.adition.com ]
	C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Cookies\G251PPOE.txt [ /doubleclick.net ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\bodo@ru4[1].txt [ Cookie:bodo@ru4.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\bodo@media6degrees[2].txt [ Cookie:bodo@media6degrees.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\bodo@atdmt[1].txt [ Cookie:bodo@atdmt.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\bodo@doubleclick[1].txt [ Cookie:bodo@doubleclick.net/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\bodo@lucidmedia[1].txt [ Cookie:bodo@lucidmedia.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\bodo@adbrite[2].txt [ Cookie:bodo@adbrite.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\bodo@ad2.adfarm1.adition[1].txt [ Cookie:bodo@ad2.adfarm1.adition.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\bodo@c.atdmt[2].txt [ Cookie:bodo@c.atdmt.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\bodo@2o7[1].txt [ Cookie:bodo@2o7.net/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@imrworldwide[2].txt [ Cookie:bodo@imrworldwide.com/cgi-bin ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@ru4[1].txt [ Cookie:bodo@ru4.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@fastclick[1].txt [ Cookie:bodo@fastclick.net/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@conrad.122.2o7[1].txt [ Cookie:bodo@conrad.122.2o7.net/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@media6degrees[1].txt [ Cookie:bodo@media6degrees.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@msnportal.112.2o7[1].txt [ Cookie:bodo@msnportal.112.2o7.net/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@revsci[2].txt [ Cookie:bodo@revsci.net/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@traffictrack[1].txt [ Cookie:bodo@traffictrack.de/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@atdmt[2].txt [ Cookie:bodo@atdmt.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@doubleclick[1].txt [ Cookie:bodo@doubleclick.net/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@amazon-adsystem[1].txt [ Cookie:bodo@amazon-adsystem.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\5QU8JJLI.txt [ Cookie:bodo@tradedoubler.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@apmebf[1].txt [ Cookie:bodo@apmebf.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@zanox[1].txt [ Cookie:bodo@zanox.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@ad2.adfarm1.adition[2].txt [ Cookie:bodo@ad2.adfarm1.adition.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@bs.serving-sys[1].txt [ Cookie:bodo@bs.serving-sys.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\5D3IKNSA.txt [ Cookie:bodo@statse.webtrendslive.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@www.zanox-affiliate[1].txt [ Cookie:bodo@www.zanox-affiliate.de/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@www.etracker[2].txt [ Cookie:bodo@www.etracker.de/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\1NQC5O52.txt [ Cookie:bodo@adtech.de/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@unitymedia[2].txt [ Cookie:bodo@unitymedia.de/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@c.atdmt[2].txt [ Cookie:bodo@c.atdmt.com/ ]
	C:\USERS\BODO\AppData\Roaming\Microsoft\Windows\Cookies\Low\bodo@2o7[1].txt [ Cookie:bodo@2o7.net/ ]
	C:\USERS\BODO\Cookies\bodo@ru4[1].txt [ Cookie:bodo@ru4.com/ ]
	C:\USERS\BODO\Cookies\bodo@media6degrees[2].txt [ Cookie:bodo@media6degrees.com/ ]
	C:\USERS\BODO\Cookies\bodo@atdmt[1].txt [ Cookie:bodo@atdmt.com/ ]
	C:\USERS\BODO\Cookies\bodo@doubleclick[1].txt [ Cookie:bodo@doubleclick.net/ ]
	C:\USERS\BODO\Cookies\bodo@lucidmedia[1].txt [ Cookie:bodo@lucidmedia.com/ ]
	C:\USERS\BODO\Cookies\bodo@adbrite[2].txt [ Cookie:bodo@adbrite.com/ ]
	C:\USERS\BODO\Cookies\bodo@ad2.adfarm1.adition[1].txt [ Cookie:bodo@ad2.adfarm1.adition.com/ ]
	C:\USERS\BODO\Cookies\bodo@c.atdmt[2].txt [ Cookie:bodo@c.atdmt.com/ ]
	C:\USERS\BODO\Cookies\bodo@2o7[1].txt [ Cookie:bodo@2o7.net/ ]
	C:\USERS\KEVIN\AppData\Roaming\Microsoft\Windows\Cookies\9R7FRQ6P.txt [ Cookie:kevin@clkads.com/adServe/banners ]
	C:\USERS\KEVIN\AppData\Roaming\Microsoft\Windows\Cookies\BZ7DM5V7.txt [ Cookie:kevin@clkads.com/adServe ]
	C:\USERS\KEVIN\AppData\Roaming\Microsoft\Windows\Cookies\Low\kevin@mynortonaccount[2].txt [ Cookie:kevin@mynortonaccount.com/ ]
	C:\USERS\KEVIN\AppData\Roaming\Microsoft\Windows\Cookies\Low\OQ0Z6O16.txt [ Cookie:kevin@account.live.com/ ]
	C:\USERS\KEVIN\AppData\Roaming\Microsoft\Windows\Cookies\Low\VICHUWF3.txt [ Cookie:kevin@atdmt.com/ ]
	C:\USERS\KEVIN\AppData\Roaming\Microsoft\Windows\Cookies\Low\kevin@account.norton[1].txt [ Cookie:kevin@account.norton.com/ ]
	C:\USERS\KEVIN\AppData\Roaming\Microsoft\Windows\Cookies\Low\AGZHORTZ.txt [ Cookie:kevin@h.atdmt.com/ ]
	C:\USERS\KEVIN\AppData\Roaming\Microsoft\Windows\Cookies\Low\QHMDCKPN.txt [ Cookie:kevin@c.atdmt.com/ ]
	C:\USERS\KEVIN\AppData\Roaming\Microsoft\Windows\Cookies\Low\P8EFBYZE.txt [ Cookie:kevin@doubleclick.net/ ]
	C:\USERS\KEVIN\Cookies\2GYJILU7.txt [ Cookie:kevin@tracking.quisma.com/ ]
	C:\USERS\KEVIN\Cookies\MJANLXHE.txt [ Cookie:kevin@ad4.adfarm1.adition.com/ ]
	C:\USERS\KEVIN\Cookies\HHQ55S4A.txt [ Cookie:kevin@track.adform.net/ ]
	C:\USERS\KEVIN\Cookies\7HR3UUAD.txt [ Cookie:kevin@atdmt.com/ ]
	C:\USERS\KEVIN\Cookies\EH8TLMI2.txt [ Cookie:kevin@zanox.com/ ]
	C:\USERS\KEVIN\Cookies\FR1GMPRT.txt [ Cookie:kevin@adfarm1.adition.com/ ]
	C:\USERS\KEVIN\Cookies\1287OPFS.txt [ Cookie:kevin@serving-sys.com/ ]
	C:\USERS\KEVIN\Cookies\D192JO47.txt [ Cookie:kevin@bs.serving-sys.com/ ]
	C:\USERS\KEVIN\Cookies\R9E0NFEA.txt [ Cookie:kevin@ru4.com/ ]
	C:\USERS\KEVIN\Cookies\2KJ8QJ3G.txt [ Cookie:kevin@smartadserver.com/ ]
	C:\USERS\KEVIN\Cookies\LS3G02HF.txt [ Cookie:kevin@ad3.adfarm1.adition.com/ ]
	C:\USERS\KEVIN\Cookies\MC49B6CN.txt [ Cookie:kevin@adformdsp.net/ ]
	C:\USERS\KEVIN\Cookies\JTMSGK97.txt [ Cookie:kevin@dyntracker.com/ ]
	C:\USERS\KEVIN\Cookies\9R7FRQ6P.txt [ Cookie:kevin@clkads.com/adServe/banners ]
	C:\USERS\KEVIN\Cookies\FWB5YR0E.txt [ Cookie:kevin@apmebf.com/ ]
	C:\USERS\KEVIN\Cookies\F671SOF8.txt [ Cookie:kevin@adform.net/ ]
	C:\USERS\KEVIN\Cookies\1LESFE7D.txt [ Cookie:kevin@mediaplex.com/ ]
	C:\USERS\KEVIN\Cookies\6CN4ELXX.txt [ Cookie:kevin@tradedoubler.com/ ]
	C:\USERS\KEVIN\Cookies\SW81FOZK.txt [ Cookie:kevin@server.adformdsp.net/ ]
	C:\USERS\KEVIN\Cookies\3QN1RS7S.txt [ Cookie:kevin@imrworldwide.com/cgi-bin ]
	C:\USERS\KEVIN\Cookies\6K6V7N77.txt [ Cookie:kevin@ad1.adfarm1.adition.com/ ]
	C:\USERS\KEVIN\Cookies\90Q4H231.txt [ Cookie:kevin@www.zanox-affiliate.de/ ]
	C:\USERS\KEVIN\Cookies\6300TW6Q.txt [ Cookie:kevin@c.atdmt.com/ ]
	C:\USERS\KEVIN\Cookies\KPQRV5H1.txt [ Cookie:kevin@zanox-affiliate.de/ ]
	C:\USERS\KEVIN\Cookies\4F2Q2VE1.txt [ Cookie:kevin@lucidmedia.com/ ]
	C:\USERS\KEVIN\Cookies\ZFTYXM63.txt [ Cookie:kevin@ad.yieldmanager.com/ ]
	C:\USERS\KEVIN\Cookies\HW8MO1KH.txt [ Cookie:kevin@ad2.adfarm1.adition.com/ ]
	C:\USERS\KEVIN\Cookies\G251PPOE.txt [ Cookie:kevin@doubleclick.net/ ]
	C:\USERS\KEVIN\Cookies\BZ7DM5V7.txt [ Cookie:kevin@clkads.com/adServe ]
	C:\USERS\BODO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\BODO@AD.YIELDMANAGER[2].TXT [ /AD.YIELDMANAGER ]
	C:\USERS\BODO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\BODO@ADFARM1.ADITION[1].TXT [ /ADFARM1.ADITION ]
	C:\USERS\BODO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\BODO@C1.ATDMT[1].TXT [ /C1.ATDMT ]
	C:\USERS\BODO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\BODO@AD.ZANOX[1].TXT [ /AD.ZANOX ]
	C:\USERS\BODO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\BODO@MEDIAPLEX[1].TXT [ /MEDIAPLEX ]
	C:\USERS\BODO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\BODO@ADFARM1.ADITION[2].TXT [ /ADFARM1.ADITION ]
	C:\USERS\BODO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\BODO@CLICKFUSE[2].TXT [ /CLICKFUSE ]
	C:\USERS\BODO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\BODO@MICROSOFTWINDOWS.112.2O7[1].TXT [ /MICROSOFTWINDOWS.112.2O7 ]
	C:\USERS\BODO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\BODO@INVITEMEDIA[2].TXT [ /INVITEMEDIA ]
	C:\USERS\BODO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\BODO@SERVING-SYS[2].TXT [ /SERVING-SYS ]
	C:\USERS\BODO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\BODO@TRACKING.QUISMA[2].TXT [ /TRACKING.QUISMA ]
	C:\USERS\BODO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\BODO@WEBMASTERPLAN[2].TXT [ /WEBMASTERPLAN ]
	.revsci.net [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	a.visualrevenue.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	ad4.adfarm1.adition.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.xiti.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.c.atdmt.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.c.atdmt.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.c.atdmt.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.c.atdmt.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.traffictrack.de [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	ad2.adfarm1.adition.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	ww251.smartadserver.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	ad.zanox.com [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.blogads.de [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.blogads.de [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\BODO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BM7AFWH7.DEFAULT\COOKIES.SQLITE ]
	C:\USERS\KEVIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KEVIN@WWW.MYNORTONACCOUNT[2].TXT [ /WWW.MYNORTONACCOUNT ]
	.doubleclick.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	m1.webstats.motigo.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.ad.adnet.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ads4.net2day.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ads2.net2day.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ads4.net2day.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.imrworldwide.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.imrworldwide.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ads2.net2day.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	counter.f-thies.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.rambler.ru [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	tracking.mlsat02.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ads4.net2day.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.ad.adnet.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.ad.adnet.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.game-advertising-online.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.kontera.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.legolas-media.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.legolas-media.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.legolas-media.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.legolas-media.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.legolas-media.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	tracking.sim-technik.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	adserver2.clipkit.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	eas4.emediate.eu [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	eas4.emediate.eu [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ww251.smartadserver.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mm.chitika.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.xiti.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	tracking.oe24.at [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.a.revenuemax.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.elitepvpers.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.elitepvpers.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	dc.tremormedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adscendmedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.guj.122.2o7.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	adserver.ip-phone-forum.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ads2.net2day.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ads4.net2day.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ads3.net2day.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.bs.serving-sys.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.ru4.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	e2.emediate.se [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	adserver.adreactor.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.quartermedia.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.quartermedia.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	srv.clickfuse.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	srv.clickfuse.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.clickfuse.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tribalfusion.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adserver.adtechus.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.pro-market.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.pro-market.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.dyntracker.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	tracking.affiliates.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	server.adform.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adlegend.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adlegend.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ads.saymedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.game-clicks.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ads.saymedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.specificclick.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	de.sitestat.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.usenext.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.e-2dj6wjlokidjceo.stats.esomniture.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.paypal.112.2o7.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	tracking.oe24.at [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	tracking.oe24.at [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	a.visualrevenue.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	server.adformdsp.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adformdsp.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adform.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adxpose.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	e2.emediate.se [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	e2.emediate.se [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	partners.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.dyntracker.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	adx2.chip.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.bs.serving-sys.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	track.adform.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediafire.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.dyntracker.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	server.adform.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.traffictrack.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.elitepvpers.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.elitepvpers.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.elitepvpers.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.elitepvpers.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.elitepvpers.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.traveladvertising.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.traveladvertising.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.traveladvertising.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.traveladvertising.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.traveladvertising.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.traveladvertising.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.traveladvertising.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.unister-adservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.unister-adservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.statcounter.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.adserver01.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	tags.toolbarsmedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	tags.toolbarsmedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediacdn.disqus.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediacdn.disqus.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediacdn.disqus.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	accounts.google.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.view.atdmt.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.view.atdmt.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.view.atdmt.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.lucidmedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.trackmill.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.trackmill.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.trackmill.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.fastclick.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.atrack.allposters.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.zanox.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	statse.webtrendslive.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.weborama.fr [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.weborama.fr [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.weboramapublishertrackinguk.solution.weborama.fr [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.weboramapublishertrackinguk.solution.weborama.fr [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.weborama.fr [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.cdn.aimfar.solution.weborama.fr [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.cdn.aimfar.solution.weborama.fr [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.cdn.aimfar.solution.weborama.fr [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.ru4.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.at.atwola.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad4.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.stats.ilivid.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.bwincom.122.2o7.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.valueclickmedia.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.valueclickmedia.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.valueclickmedia.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.zanox-affiliate.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.dyntracker.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.zanox-affiliate.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.zanox.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adx.chip.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adx.chip.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adx.chip.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	track.adform.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adform.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.active-tracking.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.active-tracking.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.active-tracking.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediang.gameswelt.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediang.gameswelt.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediang.gameswelt.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.yadro.ru [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.content.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	wstat.wibiya.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.game-advertising-online.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.game-advertising-online.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.game-advertising-online.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad2.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.zanox.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.yieldmanager.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.pixel.invitemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.pixel.invitemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.pixel.invitemedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad1.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.track.pubmatic.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.track.pubmatic.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.track.pubmatic.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adserver.mmo-champion.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adserver.mmo-champion.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adserver.mmo-champion.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.mediafire.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.mediafire.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	www.mediafire.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.cdn.mediafire.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.cdn.mediafire.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.cdn.mediafire.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediafire.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediafire.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.mediafire.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	ad3.adfarm1.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.imagesrv.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.imagesrv.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.imagesrv.adition.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.c.atdmt.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.c.atdmt.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	tags.toolbarsmedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	tags.toolbarsmedia.com [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7LYCC5I4.DEFAULT\COOKIES.SQLITE ]

Soll ich im SUPERAntiSpyware jetzt irgendwie weitermachen?

Danke und bis dann
Gruß Bodolino

11.07.2012, 19:43	#4
t'john /// Helfer-Team	GVU Trojaner 2.07 mit Web-Cam Das Log ist unvollständig! Bitte alles posten! __________________ Mfg, t'john Das TB unterstützen

11.07.2012, 20:17	#8
t'john /// Helfer-Team	GVU Trojaner 2.07 mit Web-Cam CODE Tags lassen sich mit diesem Button einfuegen Melde Dich bitte mit dem Logfile wieder. __________________ Mfg, t'john Das TB unterstützen

12.07.2012, 00:23	#10
t'john /// Helfer-Team	GVU Trojaner 2.07 mit Web-Cam Sehr gut! Downloade Dir bitte AdwCleaner auf deinen Desktop. Starte die adwcleaner.exe mit einem Doppelklick. Klicke auf Search. Nach Ende des Suchlaufs öffnet sich eine Textdatei. Poste mir den Inhalt mit deiner nächsten Antwort. Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt. __________________ Mfg, t'john Das TB unterstützen

11.07.2012, 20:08	#7
Bodolino	GVU Trojaner 2.07 mit Web-Cam Okay, ich mach dann mal, wird wohl eine Zeit dauern bis der Scan fertig ist. Danke für den Tip mit den Code-Tags, wollte gerade danach suchen wie man die erstellt. Meld mich dann wieder, wenn alles fertig ist. Herzlichen Dank und bis später Bodolino

GVU Trojaner 2.07 mit Web-Cam

Plagegeister aller Art und deren Bekämpfung: GVU Trojaner 2.07 mit Web-Cam