Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Searchcompletion.com hat mein Google übernommen

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 22.09.2011, 11:51   #1
Chili77
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Hallo liebe Community,

ich bin leider in Sicherheitsfragen nicht sehr befähigt, werde aber mein bestes tun um eure Anweisungen zu befolgen und euch so gut es geht zu unterstützen.
Ich stecke mitten in meiner Diplomarbeit und bin daher etwas im Stress und evtl. ist mein Problem kein großes. Aber google hat leider nicht weitergeholfen und meine Scanner (AVAST, Spybot, Superantispyware, hijack) auch nicht.
Nun zu meinem Problem:
Mein google wurde wohl von searchcompletion.com gehijackt, zumindest laufen alle Suchanfragen darüber. Ist mir erstmal nicht aufgefallen, da ich dachte die Veränderung im Design rühre mit dem Firefox update einher.
Darauf gebracht hat mich aber eine nervige BOX unten links, die mir search suggestions gibt. Beim Blick auf andere Browser (Chrome, IE) zeigte sich das selbe Phänomen. Deshalb bin ich auch endlich skeptisch geworden.
Ich habesowohl den defogger und auch otl laufen lassen. Hier die logfiles (gehört das eigentlich so einfach hier rein?):


defogger
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 10:32 on 22/09/2011 (***)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

otl und extras habe ich als Anhang beigefügt.

Wäre über schnelle Hilfe dankbar. Da ich meine Diplomarbeit in Gefahr sehe...

VG

Kaan

Alt 22.09.2011, 13:32   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Bitte routinemäßig einen Vollscan mit Malwarebytes machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!


Führe danach auch bitte ESET aus, danach sehen wir weiter.


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

n.
__________________

__________________

Alt 22.09.2011, 17:38   #3
Chili77
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Hallo,

danke das das so schnell ging.

Habe die Scans gemacht. Hier erstmal die LOGs

Das sind die Logs von Malwarebytes und ESET (dort scheint etwas gefunden worden zu sein):


Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 6533

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

08.05.2011 22:44:10
mbam-log-2011-05-08 (22-44-10).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 164493
Laufzeit: 1 Minute(n), 35 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)



Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 7766

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

22.09.2011 00:43:46
mbam-log-2011-09-22 (00-43-46).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 190662
Laufzeit: 4 Minute(n), 12 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)


Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 7770

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

22.09.2011 14:09:01
mbam-log-2011-09-22 (14-09-01).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 305523
Laufzeit: 29 Minute(n), 52 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Und hier die Log von ESET


ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=1eed96c58e169d4f9aa46026d7daae7c
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-22 02:14:11
# local_time=2011-09-22 04:14:11 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 184464 68324069 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=125770
# found=1
# cleaned=0
# scan_time=6631
D:\KAAN-PC\Backup Set 2011-06-15 155241\Backup Files 2011-06-15 155241\Backup files 2.zip HTML/ScrInject.B.Gen virus (unable to clean) 00000000000000000000000000000000 I


Hoffentlich reicht das zum Auswerten.
Vielen Dank.

Kaan
__________________

Alt 22.09.2011, 21:16   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Sieht aus als hättest du keinen CustomScan mit OTL gemacht.

CustomScan mit OTL

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
  • Starte bitte die OTL.exe.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Kopiere nun den kompletten Inhalt aus der untenstehenden Codebox in die Textbox von OTL - wenn OTL auf deutsch ist wird sie mit beschriftet
Code:
ATTFilter
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
wininit.exe
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT
         
  • Schliesse bitte nun alle Programme. (Wichtig)
  • Klicke nun bitte auf den Quick Scan Button.
  • Klick auf .
  • Kopiere nun den Inhalt aus OTL.txt hier in Deinen Thread
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 22.09.2011, 21:52   #5
Chili77
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Hallo,

entschuldige Bitte. Das habe ich wohl beim ersten Versuch nicht richtig gelesen.
So, hier nun der hoffentlich richtige Log:
OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 22.09.2011 21:35:48 - Run 2
OTL by OldTimer - Version 3.2.29.1     Folder = C:\Users\Kaan\Desktop
64bit- An unknown product Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,75 Gb Total Physical Memory | 2,38 Gb Available Physical Memory | 63,50% Memory free
7,49 Gb Paging File | 6,13 Gb Available in Paging File | 81,77% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 78,03 Gb Total Space | 40,92 Gb Free Space | 52,44% Space Free | Partition Type: NTFS
Drive D: | 219,96 Gb Total Space | 115,03 Gb Free Space | 52,29% Space Free | Partition Type: NTFS
 
Computer Name: KAAN-PC | User Name: Kaan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2011.09.22 10:25:18 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\Kaan\Desktop\OTL.exe
PRC - [2011.09.06 22:45:30 | 003,722,416 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe
PRC - [2011.09.06 22:45:28 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe
PRC - [2011.03.31 16:08:14 | 000,080,896 | ---- | M] () -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2011.01.17 18:50:34 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
PRC - [2011.01.17 18:50:34 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
PRC - [2009.03.30 15:00:54 | 000,221,184 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files (x86)\Brother\Brmfcmon\BrMfcmon.exe
PRC - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2011.04.15 15:28:53 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
MOD - [2011.04.15 15:28:53 | 000,170,496 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll
MOD - [2009.02.27 16:38:22 | 000,139,264 | R--- | M] () -- C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2011.09.06 22:45:28 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2011.09.06 22:45:27 | 000,127,192 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall)
SRV:64bit: - [2011.08.12 01:38:04 | 000,140,672 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE -- (!SASCORE)
SRV:64bit: - [2010.03.17 04:48:42 | 000,244,736 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\stacsv64.exe -- (STacSV)
SRV:64bit: - [2009.08.18 02:36:20 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2009.03.03 02:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\AESTSr64.exe -- (AESTFilters)
SRV - [2011.06.17 09:34:18 | 000,359,192 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2011.06.02 18:31:42 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011.03.31 16:08:14 | 000,080,896 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2011.09.06 22:39:00 | 000,140,120 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswFW.sys -- (aswFW)
DRV:64bit: - [2011.09.06 22:38:18 | 000,601,944 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2011.09.06 22:38:16 | 000,301,912 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2011.09.06 22:37:45 | 000,258,392 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswNdis2.sys -- (aswNdis2)
DRV:64bit: - [2011.09.06 22:36:41 | 000,058,200 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2011.09.06 22:36:41 | 000,042,328 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr)
DRV:64bit: - [2011.09.06 22:36:30 | 000,065,368 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2011.09.06 22:36:14 | 000,024,408 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2011.07.04 13:12:07 | 000,012,368 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswNdis.sys -- (aswNdis)
DRV:64bit: - [2011.04.30 13:59:22 | 000,066,840 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2011.04.30 13:59:22 | 000,060,184 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2011.04.14 00:57:28 | 003,063,360 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:64bit: - [2011.03.21 13:22:06 | 000,452,200 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010.06.25 16:08:10 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot)
DRV:64bit: - [2010.06.03 19:18:56 | 001,379,376 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2010.03.17 04:48:42 | 000,505,856 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2009.11.01 19:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)
DRV:64bit: - [2009.08.18 03:48:48 | 006,037,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2011.07.22 18:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programme\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
DRV - [2011.07.12 23:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programme\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0C DB 95 58 B4 78 CC 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "mydealz.de"
FF - prefs.js..keyword.URL: "hxxp://www.google.com/search?q="
FF - prefs.js..network.proxy.type: 0
 
FF:64bit: - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: D:\Tools\Picasa\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: D:\Tools\TVUPlayer\npTVUAx.dll (TVU networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011.09.12 13:38:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8AA36F4F-6DC7-4c06-77AF-5035170634FE}: C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2011.08.11 02:06:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.09.08 23:00:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.09.10 15:57:01 | 000,000,000 | ---D | M]
 
[2011.04.14 02:15:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kaan\AppData\Roaming\mozilla\Extensions
[2011.09.21 22:14:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kaan\AppData\Roaming\mozilla\Firefox\Profiles\1g3uy9i8.default\extensions
[2011.07.29 09:17:51 | 000,000,000 | ---D | M] (BitDefender QuickScan) -- C:\Users\Kaan\AppData\Roaming\mozilla\Firefox\Profiles\1g3uy9i8.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2011.09.18 18:47:30 | 000,000,000 | ---D | M] (TVU Web Player) -- C:\Users\Kaan\AppData\Roaming\mozilla\Firefox\Profiles\1g3uy9i8.default\extensions\firefox@tvunetworks.com
[2011.09.22 00:30:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011.04.15 15:27:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011.04.15 19:08:06 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011.06.15 14:12:20 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011.09.12 13:38:44 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
() (No name found) -- C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
() (No name found) -- C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\EXTENSIONS\{DD05FD3D-18DF-4CE4-AE53-E795339C5F01}.XPI
[2011.09.08 23:00:53 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.05.04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011.09.08 23:00:50 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.09.08 23:00:50 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.09.08 23:00:50 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.09.08 23:00:50 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.09.08 23:00:50 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.09.08 23:00:50 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Kaan\AppData\Local\Google\Chrome\Application\13.0.782.107\gcswf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Chrome NaCl (Disabled) = C:\Users\Kaan\AppData\Local\Google\Chrome\Application\13.0.782.107\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Kaan\AppData\Local\Google\Chrome\Application\13.0.782.107\pdf.dll
CHR - plugin: PDF-XChange Viewer (Enabled) = C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll
CHR - plugin: Picasa (Enabled) = D:\Tools\Picasa\Picasa3\npPicasa3.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: avast! WebRep = C:\Users\Kaan\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1289_0\
CHR - Extension: BitDefender QuickScan = C:\Users\Kaan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.99_0\
 
O1 HOSTS File: ([2011.05.08 22:38:22 | 000,433,994 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1	www.007guard.com
O1 - Hosts: 127.0.0.1	007guard.com
O1 - Hosts: 127.0.0.1	008i.com
O1 - Hosts: 127.0.0.1	www.008k.com
O1 - Hosts: 127.0.0.1	008k.com
O1 - Hosts: 127.0.0.1	www.00hq.com
O1 - Hosts: 127.0.0.1	00hq.com
O1 - Hosts: 127.0.0.1	010402.com
O1 - Hosts: 127.0.0.1	www.032439.com
O1 - Hosts: 127.0.0.1	032439.com
O1 - Hosts: 127.0.0.1	www.0scan.com
O1 - Hosts: 127.0.0.1	0scan.com
O1 - Hosts: 127.0.0.1	1000gratisproben.com
O1 - Hosts: 127.0.0.1	www.1000gratisproben.com
O1 - Hosts: 127.0.0.1	1001namen.com
O1 - Hosts: 127.0.0.1	www.1001namen.com
O1 - Hosts: 127.0.0.1	100888290cs.com
O1 - Hosts: 127.0.0.1	www.100888290cs.com
O1 - Hosts: 127.0.0.1	www.100sexlinks.com
O1 - Hosts: 127.0.0.1	100sexlinks.com
O1 - Hosts: 127.0.0.1	10sek.com
O1 - Hosts: 127.0.0.1	www.10sek.com
O1 - Hosts: 127.0.0.1	www.1-2005-search.com
O1 - Hosts: 127.0.0.1	1-2005-search.com
O1 - Hosts: 127.0.0.1	123fporn.info
O1 - Hosts: 14934 more lines...
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - Startup: C:\Users\Kaan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Kaan\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Kaan\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} hxxp://download.bitdefender.com/resources/scanner/sources/de/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{60E89D9A-B282-4C7F-8244-E180B3C99E12}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Programme\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
 
MsConfig:64bit - StartUpReg: ControlCenter3 - hkey= - key= - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
MsConfig:64bit - StartUpReg: HTC Sync Loader - hkey= - key= - C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()
MsConfig:64bit - StartUpReg: msnmsgr - hkey= - key= - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
MsConfig:64bit - StartUpReg: Steam - hkey= - key= - D:\Games\Steam\Steam.exe (Valve Corporation)
MsConfig:64bit - State: "startup" - Reg Error: Key error.
 
SafeBootMin:64bit: !SASCORE - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com)
SafeBootMin:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet:64bit: !SASCORE - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com)
SafeBootNet:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: Messenger - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.09.22 14:20:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2011.09.22 14:19:42 | 002,322,184 | ---- | C] (ESET) -- C:\Users\Kaan\Desktop\esetsmartinstaller_enu.exe
[2011.09.22 10:25:16 | 000,582,656 | ---- | C] (OldTimer Tools) -- C:\Users\Kaan\Desktop\OTL.exe
[2011.09.22 01:01:25 | 000,000,000 | ---D | C] -- C:\Users\Kaan\AppData\Roaming\SUPERAntiSpyware.com
[2011.09.22 01:00:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2011.09.22 01:00:50 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2011.09.22 01:00:50 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2011.09.22 00:28:23 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2011.09.18 18:47:36 | 000,000,000 | ---D | C] -- C:\Users\Kaan\AppData\Local\TVU Networks
[2011.09.18 18:47:36 | 000,000,000 | ---D | C] -- C:\ProgramData\TVU Networks
[2011.09.18 18:47:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TVUPlayer
[2011.09.16 18:38:10 | 000,000,000 | ---D | C] -- C:\Users\Kaan\Desktop\VOICE
[2011.09.15 14:18:40 | 000,000,000 | ---D | C] -- C:\Users\Kaan\Documents\Handelsblatt
[2011.09.14 00:35:48 | 000,000,000 | ---D | C] -- C:\Users\Kaan\Desktop\Seminararbeit
[2011.09.01 17:22:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
 
========== Files - Modified Within 30 Days ==========
 
[2011.09.22 21:30:38 | 000,018,227 | ---- | M] () -- C:\Users\Kaan\Desktop\Anforderungen an SMM.odt
[2011.09.22 19:30:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.09.22 14:19:50 | 002,322,184 | ---- | M] (ESET) -- C:\Users\Kaan\Desktop\esetsmartinstaller_enu.exe
[2011.09.22 11:49:29 | 000,016,417 | ---- | M] () -- C:\Users\Kaan\Desktop\Desktop.zip
[2011.09.22 11:48:22 | 000,012,217 | ---- | M] () -- C:\Users\Kaan\Desktop\Desktop.7z
[2011.09.22 11:10:35 | 000,022,000 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.09.22 11:10:35 | 000,022,000 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.09.22 11:03:08 | 3017,195,520 | -HS- | M] () -- C:\hiberfil.sys
[2011.09.22 10:32:33 | 000,000,000 | ---- | M] () -- C:\Users\Kaan\defogger_reenable
[2011.09.22 10:25:18 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\Kaan\Desktop\OTL.exe
[2011.09.22 10:24:13 | 000,050,477 | ---- | M] () -- C:\Users\Kaan\Desktop\Defogger.exe
[2011.09.22 10:22:53 | 000,000,432 | ---- | M] () -- C:\Windows\BRWMARK.INI
[2011.09.22 01:00:53 | 000,001,808 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011.09.19 15:04:16 | 000,174,731 | ---- | M] () -- C:\Users\Kaan\Documents\SpringerLink - Fulltext.pdf
[2011.09.19 10:13:16 | 000,012,680 | ---- | M] () -- C:\Users\Kaan\Desktop\Unbenannt 1.odt
[2011.09.18 18:47:30 | 000,000,646 | ---- | M] () -- C:\Users\Public\Desktop\TVUPlayer.lnk
[2011.09.18 17:10:57 | 000,017,323 | ---- | M] () -- C:\Users\Kaan\Desktop\Lebenslauf-Alara.odt
[2011.09.18 01:40:10 | 001,519,874 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.09.18 01:40:10 | 000,654,166 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.09.18 01:40:10 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.09.18 01:40:10 | 000,130,006 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.09.18 01:40:10 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.09.17 00:32:32 | 000,013,932 | ---- | M] () -- C:\Users\Kaan\Desktop\widerspruch.odt
[2011.09.16 10:45:01 | 000,011,618 | ---- | M] () -- C:\Users\Kaan\Desktop\Vollmacht.odt
[2011.09.16 10:44:34 | 000,042,998 | ---- | M] () -- C:\Users\Kaan\Desktop\Vollmacht.pdf
[2011.09.15 14:55:00 | 000,445,189 | ---- | M] () -- C:\Users\Kaan\Desktop\Semesterbescheinigung.jpg
[2011.09.13 01:31:02 | 000,060,878 | ---- | M] () -- C:\Users\Kaan\Desktop\Antrag_auf_Zulassung.pdf
[2011.09.13 00:12:45 | 000,015,133 | ---- | M] () -- C:\Users\Kaan\Documents\SemStart.odt
[2011.09.12 15:26:17 | 000,014,078 | ---- | M] () -- C:\Users\Kaan\Desktop\OpenDocument Text (neu).odt
[2011.09.12 13:38:45 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2011.09.06 22:45:29 | 000,199,304 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2011.09.06 22:45:29 | 000,041,184 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2011.09.06 22:45:17 | 000,254,400 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2011.09.06 22:39:00 | 000,140,120 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFW.sys
[2011.09.06 22:38:18 | 000,601,944 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2011.09.06 22:38:16 | 000,301,912 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2011.09.06 22:37:45 | 000,258,392 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswNdis2.sys
[2011.09.06 22:36:41 | 000,058,200 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2011.09.06 22:36:41 | 000,042,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2011.09.06 22:36:30 | 000,065,368 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011.09.06 22:36:14 | 000,024,408 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011.08.31 17:00:50 | 000,025,416 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.08.26 01:03:14 | 001,383,226 | ---- | M] () -- C:\Users\Kaan\Desktop\Lebenslauf aktuell.pdf
 
========== Files Created - No Company Name ==========
 
[2011.09.22 21:30:36 | 000,018,227 | ---- | C] () -- C:\Users\Kaan\Desktop\Anforderungen an SMM.odt
[2011.09.22 11:49:29 | 000,016,417 | ---- | C] () -- C:\Users\Kaan\Desktop\Desktop.zip
[2011.09.22 11:48:22 | 000,012,217 | ---- | C] () -- C:\Users\Kaan\Desktop\Desktop.7z
[2011.09.22 10:32:33 | 000,000,000 | ---- | C] () -- C:\Users\Kaan\defogger_reenable
[2011.09.22 10:24:13 | 000,050,477 | ---- | C] () -- C:\Users\Kaan\Desktop\Defogger.exe
[2011.09.22 01:00:53 | 000,001,808 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011.09.19 15:04:15 | 000,174,731 | ---- | C] () -- C:\Users\Kaan\Documents\SpringerLink - Fulltext.pdf
[2011.09.19 10:13:14 | 000,012,680 | ---- | C] () -- C:\Users\Kaan\Desktop\Unbenannt 1.odt
[2011.09.18 18:47:30 | 000,000,646 | ---- | C] () -- C:\Users\Public\Desktop\TVUPlayer.lnk
[2011.09.18 17:10:55 | 000,017,323 | ---- | C] () -- C:\Users\Kaan\Desktop\Lebenslauf-Alara.odt
[2011.09.17 00:32:26 | 000,013,932 | ---- | C] () -- C:\Users\Kaan\Desktop\widerspruch.odt
[2011.09.16 10:44:59 | 000,011,618 | ---- | C] () -- C:\Users\Kaan\Desktop\Vollmacht.odt
[2011.09.16 10:44:32 | 000,042,998 | ---- | C] () -- C:\Users\Kaan\Desktop\Vollmacht.pdf
[2011.09.15 14:55:00 | 000,445,189 | ---- | C] () -- C:\Users\Kaan\Desktop\Semesterbescheinigung.jpg
[2011.09.13 01:31:02 | 000,060,878 | ---- | C] () -- C:\Users\Kaan\Desktop\Antrag_auf_Zulassung.pdf
[2011.08.26 00:53:42 | 001,383,226 | ---- | C] () -- C:\Users\Kaan\Desktop\Lebenslauf aktuell.pdf
[2011.06.23 14:30:39 | 000,000,034 | ---- | C] () -- C:\Windows\SysWow64\BD2030.DAT
[2011.04.15 15:49:21 | 000,000,432 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2011.04.15 15:49:21 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI
[2011.04.14 01:06:07 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2009.01.05 14:44:10 | 000,053,248 | ---- | C] () -- C:\Windows\bdoscandel.exe
[2009.01.05 14:44:10 | 000,000,483 | ---- | C] () -- C:\Windows\bdoscandellang.ini
 
========== LOP Check ==========
 
[2011.05.18 17:27:19 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\DVDVideoSoftIEHelpers
[2011.08.08 18:02:47 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\HTC
[2011.08.08 18:03:37 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2011.07.21 14:21:03 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Leadertech
[2011.04.15 16:16:03 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\OpenOffice.org
[2011.09.22 10:05:14 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\QuickScan
[2011.08.11 02:24:39 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Swiss Academic Software
[2011.09.06 22:07:56 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2011.08.08 17:59:26 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Adobe
[2011.04.15 16:35:08 | 000,000,000 | R--D | M] -- C:\Users\Kaan\AppData\Roaming\Brother
[2011.05.18 17:27:19 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\DVDVideoSoftIEHelpers
[2011.08.08 18:02:47 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\HTC
[2011.08.08 18:03:37 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2011.04.14 00:43:53 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Identities
[2011.04.15 15:46:43 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\InstallShield
[2011.07.21 14:21:03 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Leadertech
[2011.07.21 14:18:32 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Logishrd
[2011.07.21 14:21:56 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Logitech
[2011.04.14 02:24:44 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Macromedia
[2011.05.08 22:41:38 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Malwarebytes
[2010.11.21 09:00:36 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Media Center Programs
[2011.07.21 14:21:02 | 000,000,000 | --SD | M] -- C:\Users\Kaan\AppData\Roaming\Microsoft
[2011.04.14 02:15:36 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Mozilla
[2011.04.15 16:16:03 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\OpenOffice.org
[2011.09.22 10:05:14 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\QuickScan
[2011.09.01 23:48:20 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Skype
[2011.09.22 01:01:25 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\SUPERAntiSpyware.com
[2011.08.11 02:24:39 | 000,000,000 | ---D | M] -- C:\Users\Kaan\AppData\Roaming\Swiss Academic Software
 
< %APPDATA%\*.exe /s >
[2011.07.21 14:21:02 | 000,053,248 | R--- | M] (Acresso Software Inc.) -- C:\Users\Kaan\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
 
< %SYSTEMDRIVE%\*.exe >
 
 
< MD5 for: AGP440.SYS  >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: IASTORV.SYS  >
[2010.11.21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2010.11.21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2011.03.11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010.11.21 05:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll
[2010.11.21 05:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2010.11.21 05:24:09 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll
[2010.11.21 05:24:09 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >

< End of report >
         
--- --- ---

Danke nochmals.


Alt 22.09.2011, 22:02   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:
ATTFilter
:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0C DB 95 58 B4 78 CC 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - prefs.js..browser.startup.homepage: "mydealz.de"
FF - prefs.js..keyword.URL: "http://www.google.com/search?q="
:Commands
[emptytemp]
[resethosts]
         
Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.
__________________
--> Searchcompletion.com hat mein Google übernommen

Alt 22.09.2011, 22:16   #7
Chili77
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



So, bitte schön. Das ist der Log:


All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache AcceptLangs| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP| /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Prefs.js: "mydealz.de" removed from browser.startup.homepage
Prefs.js: "hxxp://www.google.com/search?q=" removed from keyword.URL
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Kaan
->Temp folder emptied: 716908 bytes
->Temporary Internet Files folder emptied: 112009396 bytes
->Java cache emptied: 146237167 bytes
->FireFox cache emptied: 256471302 bytes
->Google Chrome cache emptied: 361970765 bytes
->Flash cache emptied: 44236 bytes

User: Public

User: Ümran
->Temp folder emptied: 32799 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->FireFox cache emptied: 45793071 bytes
->Flash cache emptied: 611 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 90870107 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50568 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 967,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.29.1 log created on 09222011_220805

Files\Folders moved on Reboot...
C:\Users\Kaan\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Windows\temp\_avast_\Webshlock.txt not found!

Registry entries deleted on Reboot...

Alt 22.09.2011, 22:23   #8
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html

Das Tool so einstellen wie unten im Bild angegeben - also beide Haken setzen, auf Start scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.




Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, Verknüpfungen auf dem Desktop oder im Startmenü unter "alle Programme" fehlen, bitte unhide ausführen:
Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop.
Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )
Windows-Vista und Windows-7-User müssen das Tool per Rechtsklick als Administrator ausführen!
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 22.09.2011, 22:40   #9
Chili77
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Ich glaube, da ist nichts als Bedrohung erkannt worden.


2011/09/22 22:35:17.0007 2424 TDSS rootkit removing tool 2.5.23.0 Sep 20 2011 08:53:10
2011/09/22 22:35:17.0022 2424 ================================================================================
2011/09/22 22:35:17.0022 2424 SystemInfo:
2011/09/22 22:35:17.0022 2424
2011/09/22 22:35:17.0022 2424 OS Version: 6.1.7601 ServicePack: 1.0
2011/09/22 22:35:17.0022 2424 Product type: Workstation
2011/09/22 22:35:17.0022 2424 ComputerName: KAAN-PC
2011/09/22 22:35:17.0022 2424 UserName: Kaan
2011/09/22 22:35:17.0022 2424 Windows directory: C:\Windows
2011/09/22 22:35:17.0022 2424 System windows directory: C:\Windows
2011/09/22 22:35:17.0022 2424 Running under WOW64
2011/09/22 22:35:17.0022 2424 Processor architecture: Intel x64
2011/09/22 22:35:17.0022 2424 Number of processors: 2
2011/09/22 22:35:17.0022 2424 Page size: 0x1000
2011/09/22 22:35:17.0022 2424 Boot type: Normal boot
2011/09/22 22:35:17.0022 2424 ================================================================================
2011/09/22 22:35:18.0161 2424 Initialize success
2011/09/22 22:35:23.0824 4972 ================================================================================
2011/09/22 22:35:23.0824 4972 Scan started
2011/09/22 22:35:23.0824 4972 Mode: Manual;
2011/09/22 22:35:23.0824 4972 ================================================================================
2011/09/22 22:35:24.0947 4972 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
2011/09/22 22:35:25.0072 4972 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
2011/09/22 22:35:25.0197 4972 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
2011/09/22 22:35:25.0337 4972 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\drivers\adp94xx.sys
2011/09/22 22:35:25.0477 4972 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\drivers\adpahci.sys
2011/09/22 22:35:25.0524 4972 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\drivers\adpu320.sys
2011/09/22 22:35:25.0665 4972 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
2011/09/22 22:35:25.0727 4972 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
2011/09/22 22:35:25.0836 4972 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
2011/09/22 22:35:25.0945 4972 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
2011/09/22 22:35:26.0070 4972 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\drivers\amdk8.sys
2011/09/22 22:35:26.0179 4972 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
2011/09/22 22:35:26.0304 4972 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
2011/09/22 22:35:26.0429 4972 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\drivers\amdsbs.sys
2011/09/22 22:35:26.0538 4972 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
2011/09/22 22:35:26.0679 4972 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
2011/09/22 22:35:26.0819 4972 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\drivers\arc.sys
2011/09/22 22:35:26.0850 4972 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\drivers\arcsas.sys
2011/09/22 22:35:27.0271 4972 aswFsBlk (5a68b880c16ad5a6aa20b49a47ffff24) C:\Windows\system32\drivers\aswFsBlk.sys
2011/09/22 22:35:27.0427 4972 aswFW (7f39d983a635f998b9b77595c0e26de6) C:\Windows\system32\drivers\aswFW.sys
2011/09/22 22:35:27.0552 4972 aswMonFlt (230613be2d3da8053879be5ed2848f2d) C:\Windows\system32\drivers\aswMonFlt.sys
2011/09/22 22:35:27.0693 4972 aswNdis (518b8d447a1975ab46da093a2e743256) C:\Windows\system32\DRIVERS\aswNdis.sys
2011/09/22 22:35:27.0817 4972 aswNdis2 (3ee92a414e103d0018f42494d9d0772d) C:\Windows\system32\drivers\aswNdis2.sys
2011/09/22 22:35:27.0942 4972 aswRdr (0dc1996ae4178d7d14744ef6b3082313) C:\Windows\system32\drivers\aswRdr.sys
2011/09/22 22:35:28.0129 4972 aswSnx (b6ff911c23775cdfdd49612d92637af4) C:\Windows\system32\drivers\aswSnx.sys
2011/09/22 22:35:28.0207 4972 aswSP (5a590d8516376aed1829fc07d3bdaa4b) C:\Windows\system32\drivers\aswSP.sys
2011/09/22 22:35:28.0379 4972 aswTdi (3239c0082fb0c1c4ee323730b85690a5) C:\Windows\system32\drivers\aswTdi.sys
2011/09/22 22:35:28.0473 4972 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
2011/09/22 22:35:28.0597 4972 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
2011/09/22 22:35:28.0863 4972 atikmdag (52bd95caa9cae8977fe043e9ad6d2d0e) C:\Windows\system32\DRIVERS\atikmdag.sys
2011/09/22 22:35:29.0143 4972 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\drivers\bxvbda.sys
2011/09/22 22:35:29.0284 4972 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
2011/09/22 22:35:29.0487 4972 BCM43XX (810be94a9e42309b3f74217ac28bc6ac) C:\Windows\system32\DRIVERS\bcmwl664.sys
2011/09/22 22:35:29.0658 4972 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
2011/09/22 22:35:29.0814 4972 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
2011/09/22 22:35:29.0955 4972 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
2011/09/22 22:35:30.0079 4972 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\BrFiltLo.sys
2011/09/22 22:35:30.0157 4972 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\BrFiltUp.sys
2011/09/22 22:35:30.0235 4972 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
2011/09/22 22:35:30.0267 4972 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
2011/09/22 22:35:30.0376 4972 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
2011/09/22 22:35:30.0438 4972 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
2011/09/22 22:35:30.0547 4972 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys
2011/09/22 22:35:30.0610 4972 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\drivers\bthmodem.sys
2011/09/22 22:35:30.0719 4972 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
2011/09/22 22:35:30.0844 4972 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\Windows\System32\Drivers\BTHport.sys
2011/09/22 22:35:30.0984 4972 BTHUSB (f188b7394d81010767b6df3178519a37) C:\Windows\System32\Drivers\BTHUSB.sys
2011/09/22 22:35:31.0109 4972 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
2011/09/22 22:35:31.0234 4972 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
2011/09/22 22:35:31.0374 4972 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\drivers\circlass.sys
2011/09/22 22:35:31.0499 4972 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
2011/09/22 22:35:31.0686 4972 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
2011/09/22 22:35:31.0717 4972 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
2011/09/22 22:35:31.0827 4972 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys
2011/09/22 22:35:31.0858 4972 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
2011/09/22 22:35:31.0967 4972 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\DRIVERS\CompositeBus.sys
2011/09/22 22:35:32.0061 4972 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\drivers\crcdisk.sys
2011/09/22 22:35:32.0201 4972 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
2011/09/22 22:35:32.0575 4972 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
2011/09/22 22:35:32.0653 4972 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
2011/09/22 22:35:32.0763 4972 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\drivers\disk.sys
2011/09/22 22:35:32.0887 4972 dmvsc (5db085a8a6600be6401f2b24eecb5415) C:\Windows\system32\drivers\dmvsc.sys
2011/09/22 22:35:33.0043 4972 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
2011/09/22 22:35:33.0121 4972 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
2011/09/22 22:35:33.0293 4972 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\drivers\evbda.sys
2011/09/22 22:35:33.0496 4972 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\drivers\elxstor.sys
2011/09/22 22:35:33.0543 4972 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
2011/09/22 22:35:33.0605 4972 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
2011/09/22 22:35:33.0636 4972 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
2011/09/22 22:35:33.0730 4972 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\drivers\fdc.sys
2011/09/22 22:35:33.0792 4972 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
2011/09/22 22:35:33.0823 4972 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
2011/09/22 22:35:33.0886 4972 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\drivers\flpydisk.sys
2011/09/22 22:35:33.0979 4972 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
2011/09/22 22:35:34.0089 4972 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
2011/09/22 22:35:34.0167 4972 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
2011/09/22 22:35:34.0260 4972 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
2011/09/22 22:35:34.0385 4972 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\drivers\gagp30kx.sys
2011/09/22 22:35:34.0572 4972 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
2011/09/22 22:35:34.0728 4972 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
2011/09/22 22:35:34.0869 4972 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\DRIVERS\HDAudBus.sys
2011/09/22 22:35:34.0915 4972 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\drivers\HidBatt.sys
2011/09/22 22:35:34.0931 4972 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\drivers\hidbth.sys
2011/09/22 22:35:34.0947 4972 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\drivers\hidir.sys
2011/09/22 22:35:35.0009 4972 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
2011/09/22 22:35:35.0071 4972 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
2011/09/22 22:35:35.0212 4972 HTCAND64 (f47cec45fb85791d4ab237563ad0fa8f) C:\Windows\system32\Drivers\ANDROIDUSB.sys
2011/09/22 22:35:35.0368 4972 htcnprot (b8b1b284362e1d8135112573395d5da5) C:\Windows\system32\DRIVERS\htcnprot.sys
2011/09/22 22:35:35.0461 4972 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
2011/09/22 22:35:35.0633 4972 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
2011/09/22 22:35:35.0773 4972 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
2011/09/22 22:35:35.0914 4972 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
2011/09/22 22:35:36.0023 4972 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\drivers\iirsp.sys
2011/09/22 22:35:36.0179 4972 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
2011/09/22 22:35:36.0288 4972 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\drivers\intelppm.sys
2011/09/22 22:35:36.0351 4972 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2011/09/22 22:35:36.0382 4972 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
2011/09/22 22:35:36.0413 4972 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
2011/09/22 22:35:36.0538 4972 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
2011/09/22 22:35:36.0678 4972 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
2011/09/22 22:35:36.0819 4972 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
2011/09/22 22:35:36.0959 4972 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
2011/09/22 22:35:37.0115 4972 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
2011/09/22 22:35:37.0271 4972 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys
2011/09/22 22:35:37.0411 4972 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys
2011/09/22 22:35:37.0661 4972 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
2011/09/22 22:35:37.0848 4972 LHidFilt (1074c77a47835e03c15bf92452f9a750) C:\Windows\system32\DRIVERS\LHidFilt.Sys
2011/09/22 22:35:38.0004 4972 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
2011/09/22 22:35:38.0191 4972 LMouFilt (96999c364c649e2866a268f7420a304a) C:\Windows\system32\DRIVERS\LMouFilt.Sys
2011/09/22 22:35:38.0316 4972 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\drivers\lsi_fc.sys
2011/09/22 22:35:38.0472 4972 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\drivers\lsi_sas.sys
2011/09/22 22:35:38.0628 4972 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\drivers\lsi_sas2.sys
2011/09/22 22:35:38.0800 4972 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\drivers\lsi_scsi.sys
2011/09/22 22:35:38.0940 4972 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
2011/09/22 22:35:39.0003 4972 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\drivers\megasas.sys
2011/09/22 22:35:39.0081 4972 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\drivers\MegaSR.sys
2011/09/22 22:35:39.0205 4972 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
2011/09/22 22:35:39.0315 4972 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
2011/09/22 22:35:39.0471 4972 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
2011/09/22 22:35:39.0564 4972 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
2011/09/22 22:35:39.0642 4972 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
2011/09/22 22:35:39.0689 4972 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
2011/09/22 22:35:39.0720 4972 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
2011/09/22 22:35:39.0814 4972 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
2011/09/22 22:35:39.0892 4972 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
2011/09/22 22:35:39.0954 4972 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2011/09/22 22:35:40.0001 4972 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2011/09/22 22:35:40.0048 4972 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
2011/09/22 22:35:40.0079 4972 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
2011/09/22 22:35:40.0110 4972 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
2011/09/22 22:35:40.0141 4972 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
2011/09/22 22:35:40.0173 4972 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
2011/09/22 22:35:40.0344 4972 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
2011/09/22 22:35:40.0516 4972 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
2011/09/22 22:35:40.0703 4972 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
2011/09/22 22:35:40.0875 4972 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
2011/09/22 22:35:41.0077 4972 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
2011/09/22 22:35:41.0249 4972 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
2011/09/22 22:35:41.0421 4972 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\drivers\MTConfig.sys
2011/09/22 22:35:41.0577 4972 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
2011/09/22 22:35:41.0811 4972 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
2011/09/22 22:35:42.0013 4972 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
2011/09/22 22:35:42.0247 4972 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
2011/09/22 22:35:42.0419 4972 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
2011/09/22 22:35:42.0622 4972 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
2011/09/22 22:35:42.0793 4972 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
2011/09/22 22:35:42.0965 4972 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
2011/09/22 22:35:43.0168 4972 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
2011/09/22 22:35:43.0371 4972 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
2011/09/22 22:35:43.0605 4972 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\drivers\nfrd960.sys
2011/09/22 22:35:43.0792 4972 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
2011/09/22 22:35:43.0963 4972 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
2011/09/22 22:35:44.0182 4972 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
2011/09/22 22:35:44.0369 4972 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
2011/09/22 22:35:44.0525 4972 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
2011/09/22 22:35:44.0681 4972 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
2011/09/22 22:35:44.0884 4972 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
2011/09/22 22:35:45.0055 4972 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
2011/09/22 22:35:45.0243 4972 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\drivers\parport.sys
2011/09/22 22:35:45.0414 4972 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
2011/09/22 22:35:45.0617 4972 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
2011/09/22 22:35:45.0820 4972 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
2011/09/22 22:35:46.0007 4972 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\drivers\pcmcia.sys
2011/09/22 22:35:46.0194 4972 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
2011/09/22 22:35:46.0350 4972 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
2011/09/22 22:35:46.0600 4972 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
2011/09/22 22:35:46.0771 4972 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\drivers\processr.sys
2011/09/22 22:35:46.0959 4972 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
2011/09/22 22:35:47.0146 4972 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\drivers\ql2300.sys
2011/09/22 22:35:47.0317 4972 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\drivers\ql40xx.sys
2011/09/22 22:35:47.0489 4972 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
2011/09/22 22:35:47.0661 4972 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
2011/09/22 22:35:47.0817 4972 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
2011/09/22 22:35:47.0988 4972 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
2011/09/22 22:35:48.0160 4972 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
2011/09/22 22:35:48.0316 4972 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
2011/09/22 22:35:48.0503 4972 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
2011/09/22 22:35:48.0643 4972 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
2011/09/22 22:35:48.0799 4972 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
2011/09/22 22:35:48.0940 4972 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
2011/09/22 22:35:49.0096 4972 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
2011/09/22 22:35:49.0267 4972 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
2011/09/22 22:35:49.0423 4972 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
2011/09/22 22:35:49.0595 4972 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
2011/09/22 22:35:49.0767 4972 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
2011/09/22 22:35:49.0954 4972 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
2011/09/22 22:35:50.0125 4972 RTL8167 (16d4e350420baa7e63e16e3fc033e1f5) C:\Windows\system32\DRIVERS\Rt64win7.sys
2011/09/22 22:35:50.0297 4972 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
2011/09/22 22:35:50.0422 4972 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
2011/09/22 22:35:50.0453 4972 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
2011/09/22 22:35:50.0593 4972 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
2011/09/22 22:35:50.0796 4972 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
2011/09/22 22:35:50.0983 4972 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
2011/09/22 22:35:51.0155 4972 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\drivers\serenum.sys
2011/09/22 22:35:51.0342 4972 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\drivers\serial.sys
2011/09/22 22:35:51.0514 4972 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\drivers\sermouse.sys
2011/09/22 22:35:51.0717 4972 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
2011/09/22 22:35:51.0873 4972 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
2011/09/22 22:35:52.0029 4972 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
2011/09/22 22:35:52.0185 4972 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\drivers\sfloppy.sys
2011/09/22 22:35:52.0356 4972 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\drivers\SiSRaid2.sys
2011/09/22 22:35:52.0528 4972 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\drivers\sisraid4.sys
2011/09/22 22:35:52.0699 4972 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
2011/09/22 22:35:52.0902 4972 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
2011/09/22 22:35:53.0105 4972 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
2011/09/22 22:35:53.0277 4972 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
2011/09/22 22:35:53.0448 4972 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
2011/09/22 22:35:53.0682 4972 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\drivers\stexstor.sys
2011/09/22 22:35:53.0869 4972 STHDA (4a9d087c9a97071b9d06db38567da906) C:\Windows\system32\DRIVERS\stwrt64.sys
2011/09/22 22:35:54.0057 4972 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
2011/09/22 22:35:54.0244 4972 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
2011/09/22 22:35:54.0400 4972 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
2011/09/22 22:35:54.0618 4972 SynTP (d268d2a0db2a2bbe963e688d0b039267) C:\Windows\system32\DRIVERS\SynTP.sys
2011/09/22 22:35:54.0852 4972 Tcpip (f0e98c00a09fdf791525829a1d14240f) C:\Windows\system32\drivers\tcpip.sys
2011/09/22 22:35:55.0086 4972 TCPIP6 (f0e98c00a09fdf791525829a1d14240f) C:\Windows\system32\DRIVERS\tcpip.sys
2011/09/22 22:35:55.0258 4972 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
2011/09/22 22:35:55.0414 4972 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
2011/09/22 22:35:55.0570 4972 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
2011/09/22 22:35:55.0742 4972 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
2011/09/22 22:35:55.0898 4972 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\DRIVERS\termdd.sys
2011/09/22 22:35:56.0100 4972 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
2011/09/22 22:35:56.0272 4972 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
2011/09/22 22:35:56.0444 4972 TsUsbGD (9cc2ccae8a84820eaecb886d477cbcb8) C:\Windows\system32\drivers\TsUsbGD.sys
2011/09/22 22:35:56.0600 4972 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
2011/09/22 22:35:56.0756 4972 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\drivers\uagp35.sys
2011/09/22 22:35:56.0912 4972 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
2011/09/22 22:35:57.0099 4972 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
2011/09/22 22:35:57.0270 4972 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys
2011/09/22 22:35:57.0426 4972 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\drivers\umpass.sys
2011/09/22 22:35:57.0614 4972 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
2011/09/22 22:35:57.0785 4972 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
2011/09/22 22:35:57.0941 4972 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
2011/09/22 22:35:58.0284 4972 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
2011/09/22 22:35:58.0347 4972 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
2011/09/22 22:35:58.0518 4972 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
2011/09/22 22:35:58.0690 4972 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
2011/09/22 22:35:58.0830 4972 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
2011/09/22 22:35:59.0018 4972 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
2011/09/22 22:35:59.0205 4972 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\system32\Drivers\usbvideo.sys
2011/09/22 22:35:59.0392 4972 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
2011/09/22 22:35:59.0548 4972 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
2011/09/22 22:35:59.0720 4972 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
2011/09/22 22:35:59.0876 4972 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
2011/09/22 22:36:00.0047 4972 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
2011/09/22 22:36:00.0219 4972 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
2011/09/22 22:36:00.0375 4972 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
2011/09/22 22:36:00.0531 4972 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
2011/09/22 22:36:00.0702 4972 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
2011/09/22 22:36:00.0858 4972 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
2011/09/22 22:36:01.0139 4972 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\drivers\vsmraid.sys
2011/09/22 22:36:01.0311 4972 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
2011/09/22 22:36:01.0467 4972 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
2011/09/22 22:36:01.0654 4972 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\drivers\wacompen.sys
2011/09/22 22:36:01.0810 4972 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
2011/09/22 22:36:01.0841 4972 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
2011/09/22 22:36:02.0028 4972 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\drivers\wd.sys
2011/09/22 22:36:02.0200 4972 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
2011/09/22 22:36:02.0418 4972 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
2011/09/22 22:36:02.0574 4972 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
2011/09/22 22:36:02.0808 4972 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
2011/09/22 22:36:02.0980 4972 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
2011/09/22 22:36:03.0183 4972 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
2011/09/22 22:36:03.0370 4972 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
2011/09/22 22:36:03.0573 4972 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
2011/09/22 22:36:03.0682 4972 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
2011/09/22 22:36:03.0698 4972 Boot (0x1200) (9870457a11d10cde51d3d6652d92e89c) \Device\Harddisk0\DR0\Partition0
2011/09/22 22:36:03.0729 4972 Boot (0x1200) (4b28668da013927ef61360ea2d657aa0) \Device\Harddisk0\DR0\Partition1
2011/09/22 22:36:03.0744 4972 ================================================================================
2011/09/22 22:36:03.0744 4972 Scan finished
2011/09/22 22:36:03.0744 4972 ================================================================================
2011/09/22 22:36:03.0744 4836 Detected object count: 0
2011/09/22 22:36:03.0744 4836 Actual detected object count: 0

In dem von dir verlinkten Thread steht, dass man danach nochmal Malwarebytes drüber laufen lassen sollte. Ist jetzt wohl aber nicht so wichtig bei mir!?!

Alt 23.09.2011, 09:41   #10
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 23.09.2011, 10:50   #11
Chili77
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Hallo, guten Morgen.

Also, habe den ComboFix ausgeführt. Weder die Updates noch die Wiederherstellung wurden ausgeführt.
Hier ist der Log


Combofix Logfile:
Code:
ATTFilter
ComboFix 11-09-22.04 - Kaan 23.09.2011  10:39:16.1.2 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.3837.2558 [GMT 2:00]
ausgeführt von:: c:\users\Kaan\Desktop\ComboFix.exe
AV: avast! Internet Security *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Internet Security *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2011-08-23 bis 2011-09-23  ))))))))))))))))))))))))))))))
.
.
2011-09-23 08:43 . 2011-09-23 08:43	--------	d-----w-	c:\users\Ümran\AppData\Local\temp
2011-09-23 08:43 . 2011-09-23 08:43	--------	d-----w-	c:\users\Default\AppData\Local\temp
2011-09-23 08:18 . 2011-09-23 08:18	69000	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{D984AE22-AB75-42DE-B7AA-8615625997B9}\offreg.dll
2011-09-23 08:18 . 2011-09-13 00:26	9049936	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{D984AE22-AB75-42DE-B7AA-8615625997B9}\mpengine.dll
2011-09-22 20:08 . 2011-09-22 20:08	--------	d-----w-	C:\_OTL
2011-09-22 12:20 . 2011-09-22 12:20	--------	d-----w-	c:\program files (x86)\ESET
2011-09-21 23:01 . 2011-09-21 23:01	--------	d-----w-	c:\users\Kaan\AppData\Roaming\SUPERAntiSpyware.com
2011-09-21 23:00 . 2011-09-21 23:01	--------	d-----w-	c:\program files\SUPERAntiSpyware
2011-09-21 23:00 . 2011-09-21 23:00	--------	d-----w-	c:\programdata\SUPERAntiSpyware.com
2011-09-21 22:28 . 2011-09-21 22:28	--------	d-----w-	c:\windows\system32\appmgmt
2011-09-18 16:47 . 2011-09-18 16:47	--------	d-----w-	c:\users\Kaan\AppData\Local\TVU Networks
2011-09-18 16:47 . 2011-09-18 16:47	--------	d-----w-	c:\programdata\TVU Networks
2011-08-24 10:29 . 2011-07-09 05:26	2048	----a-w-	c:\windows\system32\tzres.dll
2011-08-24 10:29 . 2011-07-09 04:29	2048	----a-w-	c:\windows\SysWow64\tzres.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-21 19:45 . 2011-08-10 00:28	404640	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-09-06 20:45 . 2011-07-18 21:33	41184	----a-w-	c:\windows\avastSS.scr
2011-09-06 20:45 . 2011-07-18 21:33	199304	----a-w-	c:\windows\SysWow64\aswBoot.exe
2011-09-06 20:45 . 2011-04-14 00:05	254400	----a-w-	c:\windows\system32\aswBoot.exe
2011-09-06 20:39 . 2011-07-18 21:34	140120	----a-w-	c:\windows\system32\drivers\aswFW.sys
2011-09-06 20:38 . 2011-07-18 21:33	601944	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2011-09-06 20:38 . 2011-07-18 21:34	301912	----a-w-	c:\windows\system32\drivers\aswSP.sys
2011-09-06 20:37 . 2011-07-18 21:33	258392	----a-w-	c:\windows\system32\drivers\aswNdis2.sys
2011-09-06 20:36 . 2011-07-18 21:33	42328	----a-w-	c:\windows\system32\drivers\aswRdr.sys
2011-09-06 20:36 . 2011-07-18 21:33	58200	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2011-09-06 20:36 . 2011-07-18 21:33	65368	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2011-09-06 20:36 . 2011-07-18 21:34	24408	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2011-08-31 15:00 . 2011-05-08 20:41	25416	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-08-13 20:34 . 2011-06-05 17:18	18328	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-08-04 14:43 . 2011-07-21 12:20	18960	----a-w-	c:\windows\system32\drivers\LNonPnP.sys
2011-07-22 05:42 . 2011-08-11 19:26	2303488	----a-w-	c:\windows\system32\jscript9.dll
2011-07-22 05:36 . 2011-08-11 19:26	1389056	----a-w-	c:\windows\system32\wininet.dll
2011-07-22 05:32 . 2011-08-11 19:26	2382848	----a-w-	c:\windows\system32\mshtml.tlb
2011-07-22 02:54 . 2011-08-11 19:26	1797632	----a-w-	c:\windows\SysWow64\jscript9.dll
2011-07-22 02:48 . 2011-08-11 19:26	1126912	----a-w-	c:\windows\SysWow64\wininet.dll
2011-07-22 02:44 . 2011-08-11 19:26	2382848	----a-w-	c:\windows\SysWow64\mshtml.tlb
2011-07-21 12:21 . 2011-07-21 12:21	53248	----a-r-	c:\users\Kaan\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2011-07-16 05:41 . 2011-08-11 08:31	362496	----a-w-	c:\windows\system32\wow64win.dll
2011-07-16 05:41 . 2011-08-11 08:31	243200	----a-w-	c:\windows\system32\wow64.dll
2011-07-16 05:41 . 2011-08-11 08:31	13312	----a-w-	c:\windows\system32\wow64cpu.dll
2011-07-16 05:39 . 2011-08-11 08:31	16384	----a-w-	c:\windows\system32\ntvdm64.dll
2011-07-16 05:37 . 2011-08-11 08:31	421888	----a-w-	c:\windows\system32\KernelBase.dll
2011-07-16 05:21 . 2011-08-11 08:31	6144	---ha-w-	c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	4608	---ha-w-	c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	4096	---ha-w-	c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	4096	---ha-w-	c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	4608	---ha-w-	c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	4096	---ha-w-	c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	4096	---ha-w-	c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	5120	---ha-w-	c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-16 04:29 . 2011-08-11 08:31	14336	----a-w-	c:\windows\SysWow64\ntvdm64.dll
2011-07-16 04:26 . 2011-08-11 08:31	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2011-07-16 04:25 . 2011-08-11 08:31	25600	----a-w-	c:\windows\SysWow64\setup16.exe
2011-07-16 04:24 . 2011-08-11 08:31	5120	----a-w-	c:\windows\SysWow64\wow32.dll
2011-07-16 04:24 . 2011-08-11 08:31	272384	----a-w-	c:\windows\SysWow64\KernelBase.dll
2011-07-16 04:15 . 2011-08-11 08:31	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	5120	---ha-w-	c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	4608	---ha-w-	c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
2011-07-16 02:21 . 2011-08-11 08:31	7680	----a-w-	c:\windows\SysWow64\instnm.exe
2011-07-16 02:21 . 2011-08-11 08:31	2048	----a-w-	c:\windows\SysWow64\user.exe
2011-07-16 02:17 . 2011-08-11 08:31	6144	---ha-w-	c:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2011-07-16 02:17 . 2011-08-11 08:31	4608	---ha-w-	c:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 02:17 . 2011-08-11 08:31	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 02:17 . 2011-08-11 08:31	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2011-07-09 02:46 . 2011-08-11 08:31	288768	----a-w-	c:\windows\system32\drivers\mrxsmb10.sys
2011-07-04 11:12 . 2011-07-18 21:33	12368	----a-w-	c:\windows\system32\drivers\aswNdis.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-08-12 5471104]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BrMfcWnd"="c:\program files (x86)\Brother\Brmfcmon\BrMfcWnd.exe" [2009-05-26 1159168]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]
.
c:\users\Kaan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
R2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2011-09-06 127192]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [x]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
S0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\aswNdis.sys [x]
S0 aswNdis2;avast! Firewall Core Firewall Service; [x]
S1 aswFW;avast! TDI Firewall driver; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\AESTSr64.exe [2009-03-03 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2011-03-31 80896]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45	134384	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-03-17 487424]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-06-23 1744152]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = 
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Free YouTube to MP3 Converter - c:\users\Kaan\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Kaan\AppData\Roaming\Mozilla\Firefox\Profiles\1g3uy9i8.default\
FF - prefs.js: browser.startup.homepage - 
FF - prefs.js: network.proxy.type - 0
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-ARIS Express 2.3 - c:\windows\system32\javaws.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{8E5E2654-AD2D-48BF-AC2D-D17F00898D06}"=hex:51,66,7a,6c,4c,1d,38,12,3a,25,4d,
   8a,1f,e3,d1,0d,d3,3b,92,3f,05,d7,c9,12
"{53707962-6F74-2D53-2644-206D7942484F}"=hex:51,66,7a,6c,4c,1d,38,12,0c,7a,63,
   57,46,21,3d,68,59,52,63,2d,7c,1c,0c,5b
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
   94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
   df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
@Denied: (2) (LocalSystem)
"Timestamp"=hex:d4,c0,12,53,ba,57,cc,01
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
   d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,8f,93,ef,7b,4a,41,6a,4a,8d,dd,c5,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
   d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,8f,93,ef,7b,4a,41,6a,4a,8d,dd,c5,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2011-09-23  10:45:52
ComboFix-quarantined-files.txt  2011-09-23 08:45
.
Vor Suchlauf: 9 Verzeichnis(se), 47.132.712.960 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 46.844.260.352 Bytes frei
.
- - End Of File - - 96313F5FFC00166B215CCD5A784EA44A
         
--- --- ---

Alt 23.09.2011, 12:11   #12
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung) Vista und Win7 User mit Rechtsklick "als Admininstartor starten"
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 23.09.2011, 12:25   #13
Chili77
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Hallo nochmal,

Avast ist jetzt ausgeführt, jedoch wurde ich nicht nach aktuellen Virendefinitionen gefragt. Ein download solcher hat m.E. auch nicht stattgefunden. Hier die Log:

aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-09-23 12:16:06
-----------------------------
12:16:06.349 OS Version: Windows x64 6.1.7601 Service Pack 1
12:16:06.349 Number of processors: 2 586 0x603
12:16:06.349 ComputerName: KAAN-PC UserName: Kaan
12:16:07.425 Initialize success
12:16:07.799 AVAST engine defs: 11092201
12:16:20.279 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
12:16:20.295 Disk 0 Vendor: WDC_WD3200BEVT-60A23T0 02.01A02 Size: 305245MB BusType: 11
12:16:22.339 Disk 0 MBR read successfully
12:16:22.339 Disk 0 MBR scan
12:16:22.354 Disk 0 Windows 7 default MBR code
12:16:22.354 Service scanning
12:16:24.195 Modules scanning
12:16:24.195 Disk 0 trace - called modules:
12:16:24.242 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
12:16:24.242 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004c95060]
12:16:24.257 3 CLASSPNP.SYS[fffff8800160143f] -> nt!IofCallDriver -> [0xfffffa8004758520]
12:16:24.257 5 ACPI.sys[fffff88000f3d7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8004754680]
12:16:25.022 AVAST engine scan C:\Windows
12:16:27.034 AVAST engine scan C:\Windows\system32
12:17:37.063 AVAST engine scan C:\Windows\system32\drivers
12:17:44.613 AVAST engine scan C:\Users\Kaan
12:19:43.033 AVAST engine scan C:\ProgramData
12:20:48.319 Scan finished successfully
12:21:19.254 Disk 0 MBR has been saved successfully to "C:\Users\Kaan\Desktop\MBR.dat"
12:21:19.254 The log file has been saved successfully to "C:\Users\Kaan\Desktop\aswMBR.txt"

Alt 23.09.2011, 12:39   #14
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!


Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 23.09.2011, 14:51   #15
Chili77
 
Searchcompletion.com hat mein Google übernommen - Standard

Searchcompletion.com hat mein Google übernommen



Hey,

also Malwarebytes war wohl unauffällig, superantispyware hat 528 Bedrohungen festgestellt. Würdest du mir bitte nochmal erklären, Wie ich mit denen verfahren soll bevor ich eset ausführe?


SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 09/23/2011 at 02:47 PM

Application Version : 5.0.1118

Core Rules Database Version : 7719
Trace Rules Database Version: 5531

Scan type : Complete Scan
Total Scan Time : 01:07:05

Operating System Information
Windows 7 Professional 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned : 545
Memory threats detected : 0
Registry items scanned : 70212
Registry threats detected : 0
File items scanned : 170003
File threats detected : 528

Adware.Tracking Cookie
C:\Users\Kaan\AppData\Roaming\Microsoft\Windows\Cookies\kaan-pc$@2o7[1].txt
C:\Users\Kaan\AppData\Roaming\Microsoft\Windows\Cookies\kaan@adtech[1].txt
C:\Users\Kaan\AppData\Roaming\Microsoft\Windows\Cookies\kaan@questionmarket[2].txt
C:\Users\Kaan\AppData\Roaming\Microsoft\Windows\Cookies\UA9F2YNT.txt
C:\Users\Kaan\AppData\Roaming\Microsoft\Windows\Cookies\XYFCV374.txt
C:\Users\Kaan\AppData\Roaming\Microsoft\Windows\Cookies\5B0BTLCK.txt
C:\Users\Kaan\AppData\Roaming\Microsoft\Windows\Cookies\M4D6O53M.txt
de.sitestat.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
tracking.tchibo.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tracking.quisma.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
tracking.quisma.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
tracking.quisma.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.effiliation.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.specificclick.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bs.serving-sys.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tracking.mindshare.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.emeraldinsight.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.emeraldinsight.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.emeraldinsight.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adxpose.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.dyntracker.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.imrworldwide.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.imrworldwide.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.premiumtv.122.2o7.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.interclick.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.interclick.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.im.banner.t-online.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.olympiaverlag.122.2o7.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.adform.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
eas.apm.emediate.eu [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.googleadservices.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.opodo.122.2o7.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.zanox-affiliate.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.yieldmanager.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ltur.112.2o7.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.socialmediaexaminer.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.socialmediaexaminer.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.www.socialmediaexaminer.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
wstat.wibiya.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
marketingsocialmedia.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
marketingsocialmedia.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
marketingsocialmedia.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.socialmediaexaminer.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tracking.quisma.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
finden.nationallizenzen.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
finden.nationallizenzen.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
finden.nationallizenzen.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.socialmediaexaminer.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ad.adnet.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ad.adnet.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.stepstone.112.2o7.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rambler.ru [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.yadro.ru [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
banners.victor.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.content.yieldmanager.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
banners.victor.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.banners.victor.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
counters.gigya.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tracking.quisma.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
tracking.quisma.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.2o7.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.adition.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
audit.median.hu [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
tracking.quisma.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.xiti.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.sonyeurope.112.2o7.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.quartermedia.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
airfrance.bannerfactory.fr [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adbrite.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adbrite.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adbrite.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.paypal.112.2o7.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
accounts.youtube.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adbrite.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adbrite.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.doubleclick.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.liveperson.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
server.iad.liveperson.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.liveperson.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.kontera.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adx.chip.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rambler.ru [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tradedoubler.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.zanox.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.e-2dj6wjkownczclo.stats.esomniture.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.apmebf.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mediaplex.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tracking.quisma.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.unitymedia.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.unitymedia.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tracking.quisma.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
media.gan-online.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.a.revenuemax.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ad.adnet.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.im.banner.t-online.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fastclick.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.effiliation.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.effiliation.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.effiliation.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.effiliation.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.googleadservices.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tracking.quisma.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
eas.apm.emediate.eu [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.euros4click.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad1.adfarm1.adition.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tracking.quisma.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bs.serving-sys.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.quartermedia.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.questionmarket.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.questionmarket.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad3.adfarm1.adition.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.adserver01.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.traffictrack.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.quartermedia.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.zanox-affiliate.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zanox-affiliate.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zanox.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.quartermedia.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.quartermedia.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.e-2dj6aekycgd5ihq.stats.esomniture.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tradedoubler.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tradedoubler.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tradedoubler.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.e-2dj6wnmiuhcpsho.stats.esomniture.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.adform.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adform.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
eas.apm.emediate.eu [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.histats.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.histats.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
zbox.zanox.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.zanox.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
statse.webtrendslive.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
server.lon.liveperson.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.liveperson.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
partners.webmasterplan.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.socialmediaexaminer.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adfarm1.adition.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adfarm1.adition.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adfarm1.adition.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad4.adfarm1.adition.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.socialmediaexaminer.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adfarm1.adition.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.im.banner.t-online.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.clickfuse.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adfarm1.adition.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad2.adfarm1.adition.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adfarm1.adition.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.socialmediaexaminer.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.socialmediaexaminer.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.socialmediaexaminer.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.socialmediaexaminer.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.socialmediaexaminer.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
accounts.google.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ww251.smartadserver.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fastclick.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.www.burstnet.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tribalfusion.com [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net [ C:\USERS\KAAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
secure-uk.imrworldwide.com [ C:\USERS\KAAN\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\UASWC6RV ]
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@MEDIAPLEX[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@AD2.ADFARM1.ADITION[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@ADFARM1.ADITION[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@AD.AD-SRV[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@WWW.ROBERT-HALF-MEDIA[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@TRADEDOUBLER[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@WEBMASTERPLAN[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@APMEBF[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@BS.SERVING-SYS[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@TRACK.EFFILIATION[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@TRACK.EFFILIATION[3].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@WWW.USENEXT[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@ADX.CHIP[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@MICROSOFTINTERNETEXPLORER.112.2O7[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@2O7[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@AD.YIELDMANAGER[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@AD.ZANOX[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@AD1.ADFARM1.ADITION[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@AD3.ADFARM1.ADITION[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@ADFORM[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@ATDMT[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@CONTENT.YIELDMANAGER[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@EAS.APM.EMEDIATE[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@KASPERSKY.122.2O7[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@MM.CHITIKA[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@QUESTIONMARKET[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@SEVENONEINTERMEDIA.112.2O7[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@TRACK.ADFORM[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@TRAFFICTRACK[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@YADRO[2].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@ZANOX-AFFILIATE[1].TXT
C:\USERS\KAAN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\KAAN@ZANOX[1].TXT
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.msnportal.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.sevenoneintermedia.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.opodo.122.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.xiti.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.mediamarkt.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
in.getclicky.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.rambler.ru [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
audit.median.hu [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.ncp.imrworldwide.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.paypal.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.guj.122.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
fr.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
fr.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.dealtime.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
tracking.tchibo.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.deutschepostag.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.olympiaverlag.122.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
medianac.nacamar.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.conrad.122.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.ltur.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.surveymonkey.122.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.moviepilot.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.moviepilot.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.stepstone.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.multimedia.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.multimedia.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.jobscanner.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.jobscanner.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
int.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
int.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wnloupajago.stats.esomniture.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.estat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.getclicky.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.static.getclicky.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.cmp.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.mediamarkt.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.centaurpublications.122.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.trackalyzer.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.gmeurope.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
stat.aldi.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.siemens.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.philips.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
tracking.mobile.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.partnersearchmetrics.sbx1.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.e-2dj6aekiogazmko.stats.esomniture.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
tracker.softgarden.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.yadro.ru [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.de.partypoker.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
tracking.sim-technik.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.premiumtv.122.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
stats.o2more.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
tracking.klicktel.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
tracking.klicktel.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.dealtime.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.dealtime.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
stat.dealtime.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.dealtime.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.autoscout24.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
stats.bmw.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
stats.bmw.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.socialmediaakademie.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.socialmediaakademie.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.social-media-seminare.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.social-media-seminare.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.sportdiscount.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.sportdiscount.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.sportdiscount.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.sportdiscount.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.sportdiscount.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.sportdiscount.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.sportdiscount.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.sportdiscount.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.sportdiscount.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.online-marketing-insights.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.media-treff.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.media-treff.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.generaltracking.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.chilimedia.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.chilimedia.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.adlegend.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.adlegend.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.wilson.122.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.bizrate.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.bizrate.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.bizrate.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.bizrate.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.bizrate.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.bizrate.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.bizrate.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.bizrate.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.bizrate.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.bizrate.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.mediaforge.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.mediaforge.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.hansenet.122.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.112.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.find.keywordblocks.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.clickaider.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
accounts.google.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.twittercounter.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.twittercounter.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.twittercounter.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.twittercounter.com [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.online-marketing-insights.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.online-marketing-insights.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.online-marketing-insights.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.online-marketing-insights.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.trafficmaxx.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
sales.liveperson.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\USERS\KAAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1G3UY9I8.DEFAULT\COOKIES.SQLITE ]

Antwort

Themen zu Searchcompletion.com hat mein Google übernommen
.com, anhang, autostart, avast, browser, design, diplomarbeit, einfach, firefox, gefahr, google, hijack, laufen, links, logfiles, nervige, problem, scan, scanner, schnelle, schnelle hilfe, spybot, stress, superantispyware, update



Ähnliche Themen: Searchcompletion.com hat mein Google übernommen


  1. isearch.searchcompletion.com (Search Completion) entfernen
    Anleitungen, FAQs & Links - 03.08.2014 (2)
  2. Pc schon 3 übernommen und nichts half.
    Log-Analyse und Auswertung - 04.03.2014 (1)
  3. Gebrauchten PC übernommen, ist der sauber und gut genug geschützt?
    Plagegeister aller Art und deren Bekämpfung - 14.02.2014 (42)
  4. Bankautomaten per USB-Stick übernommen
    Nachrichten - 03.01.2014 (0)
  5. Search.searchcompletion.com übernimmt Google Suchmaschine
    Plagegeister aller Art und deren Bekämpfung - 11.09.2012 (29)
  6. search.searchcompletion.com hat meinen Firefox
    Plagegeister aller Art und deren Bekämpfung - 30.08.2012 (27)
  7. Android- und Nokia-Smartphones per NFC übernommen
    Nachrichten - 26.07.2012 (0)
  8. Umleitung auf searchcompletion.com
    Log-Analyse und Auswertung - 17.04.2012 (36)
  9. Searchcompletion hat Firefoxsuche übernommen
    Log-Analyse und Auswertung - 01.03.2012 (35)
  10. Trojaner - 50 € zahlen + http://search.searchcompletion.com
    Log-Analyse und Auswertung - 15.01.2012 (3)
  11. Google wurde durch searchcompletion ersetzt
    Plagegeister aller Art und deren Bekämpfung - 07.11.2011 (26)
  12. searchcompletion.com hat Firefox übernommen
    Log-Analyse und Auswertung - 11.10.2011 (33)
  13. Searchcompletion.com tritt sporadisch auf
    Log-Analyse und Auswertung - 24.09.2011 (11)
  14. Festplatte übernommen. Nun geht die Virenjagt los..
    Log-Analyse und Auswertung - 04.05.2011 (8)
  15. PC übernommen und einige Probleme
    Log-Analyse und Auswertung - 28.06.2007 (8)
  16. Verseuchter Laptop übernommen :/
    Log-Analyse und Auswertung - 04.11.2006 (2)
  17. systemeinstellungen werden nicht übernommen
    Alles rund um Windows - 12.01.2006 (2)

Zum Thema Searchcompletion.com hat mein Google übernommen - Hallo liebe Community, ich bin leider in Sicherheitsfragen nicht sehr befähigt, werde aber mein bestes tun um eure Anweisungen zu befolgen und euch so gut es geht zu unterstützen. Ich - Searchcompletion.com hat mein Google übernommen...
Archiv
Du betrachtest: Searchcompletion.com hat mein Google übernommen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.