| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Ordner werden nur noch als verknüpungen angezeigtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
28.09.2011, 19:29
| #16 |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  Ordner werden nur noch als verknüpungen angezeigt Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet, Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.  Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, Verknüpfungen auf dem Desktop oder im Startmenü unter "alle Programme" fehlen, bitte unhide ausführen: Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop. Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )  Windows-Vista und Windows-7-User müssen das Tool per Rechtsklick als Administrator ausführen!
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
29.09.2011, 15:52
| #17 |
 | Ordner werden nur noch als verknüpungen angezeigt Ich hab die Datei als Anhang mal dazugefügt.
__________________lg Franzi  |
|
29.09.2011, 18:45
| #18 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Ordner werden nur noch als verknüpungen angezeigt Dann bitte jetzt CF ausführen:
__________________ComboFix Ein Leitfaden und Tutorium zur Nutzung von ComboFix
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
__________________ |
|
29.09.2011, 19:37
| #19 |
| | Ordner werden nur noch als verknüpungen angezeigt Danke Combofix Logfile: Code:
ATTFilter ComboFix 11-09-29.06 - Franzi 29.09.2011 21:18:07.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.49.1031.18.3959.2766 [GMT 3:00]
ausgeführt von:: c:\users\Franzi\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\google\common\google updater\googleupdaterservice.exe
c:\programdata\FullRemove.exe
c:\programdata\hpeAE20.dll
c:\users\Franzi\Documents\~WRL1438.tmp
c:\users\Franzi\Documents\~WRL2191.tmp
G:\Autorun.inf
.
.
((((((((((((((((((((((( Dateien erstellt von 2011-08-28 bis 2011-09-29 ))))))))))))))))))))))))))))))
.
.
2011-09-29 18:24 . 2011-09-29 18:24 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-09-28 15:12 . 2011-09-28 15:12 -------- d-----w- C:\_OTL
2011-09-27 14:07 . 2011-09-21 06:00 9049936 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D483F914-CD32-4B03-B99B-D99E08776F6E}\mpengine.dll
2011-09-24 16:54 . 2011-05-24 16:14 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-09-23 16:46 . 2011-09-23 16:46 -------- d-----w- c:\program files (x86)\ESET
2011-09-22 19:42 . 2011-09-22 19:42 -------- d-----w- c:\program files (x86)\TeamViewer
2011-09-22 18:40 . 2011-09-22 18:40 -------- d-----w- c:\users\Franzi\AppData\Roaming\Malwarebytes
2011-09-22 18:40 . 2011-09-22 18:40 -------- d-----w- c:\programdata\Malwarebytes
2011-09-22 18:40 . 2011-09-22 18:40 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-09-22 18:40 . 2011-08-31 14:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-09-22 18:09 . 2011-09-22 18:09 -------- d-----w- c:\users\Franzi\AppData\Roaming\TeamViewer
2011-09-05 20:28 . 2011-09-05 20:28 -------- d-----w- c:\windows\SysWow64\Wat
2011-09-05 20:28 . 2011-09-05 20:28 -------- d-----w- c:\windows\system32\Wat
2011-09-05 15:04 . 2009-12-07 17:53 117504 ----a-w- c:\windows\system32\drivers\ewusbmdm.sys
2011-09-05 15:04 . 2009-12-07 17:36 246224 ----a-w- c:\windows\system32\drivers\ewusbnet.sys
2011-09-05 15:04 . 2009-10-12 13:23 114304 ----a-w- c:\windows\system32\drivers\ewusbdev.sys
2011-09-05 15:04 . 2007-08-09 02:10 29696 ----a-w- c:\windows\system32\drivers\ewdcsc.sys
2011-09-05 15:03 . 2011-09-05 15:04 -------- d-----w- c:\program files (x86)\Mobile Partner
2011-09-04 19:40 . 2011-09-04 19:40 -------- d-----w- c:\programdata\Sandlot Games
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-22 05:35 . 2011-08-10 21:40 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-07-22 04:56 . 2011-08-10 21:40 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-07-16 05:26 . 2011-08-10 21:41 362496 ----a-w- c:\windows\system32\wow64win.dll
2011-07-16 05:26 . 2011-08-10 21:41 243200 ----a-w- c:\windows\system32\wow64.dll
2011-07-16 05:26 . 2011-08-10 21:41 13312 ----a-w- c:\windows\system32\wow64cpu.dll
2011-07-16 05:26 . 2011-08-10 21:41 214528 ----a-w- c:\windows\system32\winsrv.dll
2011-07-16 05:24 . 2011-08-10 21:41 16384 ----a-w- c:\windows\system32\ntvdm64.dll
2011-07-16 05:21 . 2011-08-10 21:41 422400 ----a-w- c:\windows\system32\KernelBase.dll
2011-07-16 05:17 . 2011-08-10 21:41 338432 ----a-w- c:\windows\system32\conhost.exe
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 5120 ---ha-w- c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 4608 ---ha-w- c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 4096 ---ha-w- c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 4096 ---ha-w- c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-16 05:04 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-16 04:36 . 2011-08-10 21:41 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2011-07-16 04:32 . 2011-08-10 21:41 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2011-07-16 04:31 . 2011-08-10 21:41 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2011-07-16 04:30 . 2011-08-10 21:41 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2011-07-16 04:30 . 2011-08-10 21:41 272384 ----a-w- c:\windows\SysWow64\KernelBase.dll
2011-07-16 04:19 . 2011-08-10 21:41 4608 ---ha-w- c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 5120 ---ha-w- c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
2011-07-16 02:26 . 2011-08-10 21:41 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2011-07-16 02:26 . 2011-08-10 21:41 2048 ----a-w- c:\windows\SysWow64\user.exe
2011-07-16 02:21 . 2011-08-10 21:41 6144 ---ha-w- c:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2011-07-16 02:21 . 2011-08-10 21:41 4608 ---ha-w- c:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 02:21 . 2011-08-10 21:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 02:21 . 2011-08-10 21:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2011-07-09 05:14 . 2011-08-24 13:00 2048 ----a-w- c:\windows\system32\tzres.dll
2011-07-09 04:30 . 2011-08-24 13:00 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-07-09 02:44 . 2011-08-10 21:41 287744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-07-08 08:53 . 2011-02-02 17:00 123784 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-07-08 08:53 . 2011-02-02 17:00 88288 ----a-w- c:\windows\system32\drivers\avgntflt.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-07-13 39408]
"Sony Ericsson PC Companion"="c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" [2009-12-08 774144]
"Messenger (Yahoo!)"="c:\progra~2\Yahoo!\Messenger\YahooMessenger.exe" [2010-11-04 6174008]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-04-13 284696]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-06-28 265984]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-05-27 98304]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-06-22 968272]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-01-10 281768]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-05 135664]
R3 dc3d;Microsoft-Hardware – Geräteerkennungstreiber;c:\windows\system32\DRIVERS\dc3d.sys [x]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-05 135664]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 mvusbews;USB EWS Device;c:\windows\system32\Drivers\mvusbews.sys [x]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 s1039bus;Sony Ericsson Device 1039 driver (WDM);c:\windows\system32\DRIVERS\s1039bus.sys [x]
R3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1039mdfl.sys [x]
R3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1039mdm.sys [x]
R3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1039mgmt.sys [x]
R3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1039nd5.sys [x]
R3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1039obex.sys [x]
R3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1039unic.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-04-27 136360]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-06-22 321104]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
S2 HPSIService;HP SI Service;c:\windows\system32\HPSIsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]
S2 OMSI download service;Sony Ericsson OMSI download service;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-30 2358656]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2011-09-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-05 15:23]
.
2011-09-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-05 15:23]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]
"PLFSetI"="c:\windows\PLFSetI.exe" [2010-06-09 206208]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-06-11 861216]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.gmx.net/
uLocal Page = c:\windows\system32\blank.htm
mStart Page =
mLocal Page =
IE: An OneNote s&enden - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-YSearchProtection - c:\program files (x86)\Yahoo!\Search Protection\SearchProtection.exe
Wow6432Node-HKLM-Run-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\facemoodssrv.exe
HKLM-Run-ETDWare - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\uninstall.exe
AddRemove-Stellar Phoenix Windows Data Recovery-Home_is1 - d:\stellar phoenix windows data recovery\unins000.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\program files (x86)\Launch Manager\LMworker.exe
c:\program files (x86)\Yahoo!\Messenger\ymsgr_tray.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2011-09-29 21:31:59 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2011-09-29 18:31
.
Vor Suchlauf: 9 Verzeichnis(se), 195.940.184.064 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 196.363.870.208 Bytes frei
.
- - End Of File - - 540D29914DEEAA2F5FAD01FDEFED49A9
Lg Franzi |
|
29.09.2011, 19:43
| #20 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Ordner werden nur noch als verknüpungen angezeigt Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
29.09.2011, 21:05
| #21 |
| | Ordner werden nur noch als verknüpungen angezeigt So nun die aswMBR: aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software Run date: 2011-09-29 22:19:43 ----------------------------- 22:19:43.509 OS Version: Windows x64 6.1.7600 22:19:43.509 Number of processors: 4 586 0x2505 22:19:43.509 ComputerName: FRANZI-PC UserName: Franzi 22:19:44.195 Initialize success 22:32:53.344 AVAST engine defs: 11092900 22:33:00.395 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 22:33:00.395 Disk 0 Vendor: WDC_WD32 01.0 Size: 305245MB BusType: 3 22:33:00.411 Disk 0 MBR read successfully 22:33:00.411 Disk 0 MBR scan 22:33:00.427 Disk 0 Windows 7 default MBR code 22:33:00.442 Service scanning 22:33:01.909 Modules scanning 22:33:01.909 Disk 0 trace - called modules: 22:33:01.924 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll 22:33:01.940 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006fda060] 22:33:01.940 3 CLASSPNP.SYS[fffff88001b6a43f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004fdc050] 22:33:03.765 AVAST engine scan C:\Windows 22:33:09.365 AVAST engine scan C:\Windows\system32 22:34:47.880 AVAST engine scan C:\Windows\system32\drivers 22:34:59.158 AVAST engine scan C:\Users\Franzi 22:50:21.728 AVAST engine scan C:\ProgramData 22:52:42.831 Scan finished successfully 22:54:31.968 Disk 0 MBR has been saved successfully to "C:\Users\Franzi\Desktop\MBR.dat" 22:54:31.984 The log file has been saved successfully to "C:\Users\Franzi\Desktop\aswMBR.txt" Lg Franzi |
|
29.09.2011, 21:58
| #22 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Ordner werden nur noch als verknüpungen angezeigt Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs. Denk dran beide Tools zu updaten vor dem Scan!! Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
|
02.10.2011, 14:17
| #23 |
| | Ordner werden nur noch als verknüpungen angezeigt So nun die ganzen Dateien : SUPERAntiSpyware SUPERAntiSpyware Scan Log hxxp://www.superantispyware.com Generated 10/01/2011 at 09:15 PM Application Version : 5.0.1128 Core Rules Database Version : 7745 Trace Rules Database Version: 5557 Scan type : Complete Scan Total Scan Time : 03:48:36 Operating System Information Windows 7 Home Premium 64-bit (Build 6.01.7600) UAC On - Administrator Memory items scanned : 643 Memory threats detected : 0 Registry items scanned : 72078 Registry threats detected : 0 File items scanned : 174914 File threats detected : 415 Adware.Tracking Cookie C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@ad.yieldmanager[1].txt [ /ad.yieldmanager ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@adx.chip[1].txt [ /adx.chip ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@adx.chip[2].txt [ /adx.chip ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@content.yieldmanager[2].txt [ /content.yieldmanager ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@content.yieldmanager[3].txt [ /content.yieldmanager ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@doubleclick[1].txt [ /doubleclick ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@partypoker[2].txt [ /partypoker ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@serving-sys[2].txt [ /serving-sys ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@smartadserver[2].txt [ /smartadserver ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@smartadserver[3].txt [ /smartadserver ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@smartadserver[4].txt [ /smartadserver ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@statse.webtrendslive[2].txt [ /statse.webtrendslive ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\1PLADMJ9.txt [ /mediaplex.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\BK7Z78CQ.txt [ /doubleclick.net ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\KUB9XH1W.txt [ /tracking.mindshare.de ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\RK93IYZG.txt [ /ad2.adfarm1.adition.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\404VQPOV.txt [ /ad.yieldmanager.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\THNN4Q8L.txt [ /zanox.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\QCXEMNFS.txt [ /serving-sys.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\IQWPPQCN.txt [ /ads.jinkads.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\07J0ZG4O.txt [ /tradedoubler.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\0X4N8S90.txt [ /zanox-affiliate.de ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\SGF3GGD5.txt [ /content.yieldmanager.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\0Z2IBBAJ.txt [ /ad1.adfarm1.adition.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\X2F135WW.txt [ /www.etracker.de ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\2FE9OQI4.txt [ /atdmt.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\BV8RDZH0.txt [ /webmasterplan.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\0OX2HBM5.txt [ /tracking.quisma.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\C4SH50VZ.txt [ /imrworldwide.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\MS0T664R.txt [ /ad.zanox.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\N48NNCVI.txt [ /bs.serving-sys.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\B73IC523.txt [ /sevenoneintermedia.112.2o7.net ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\WGFWFRS0.txt [ /apmebf.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\NR62P8KH.txt [ /ads.creative-serving.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\MB3SBR8D.txt [ /adfarm1.adition.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\5Z9FJGSH.txt [ /revsci.net ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\2YWQRXPQ.txt [ /ad3.adfarm1.adition.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\ITTK2C3T.txt [ /content.yieldmanager.com ] C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\CMZOC504.txt [ /traffictrack.de ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZZHNH0PN.txt [ Cookie:franzi@specificclick.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\CJ1UWKN8.txt [ Cookie:franzi@www.zanox-affiliate.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\34ZDA154.txt [ Cookie:franzi@im.banner.t-online.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@xiti[2].txt [ Cookie:franzi@xiti.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adserver[1].txt [ Cookie:franzi@adserver.gs/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@passende-gedichte-finden[1].txt [ Cookie:franzi@passende-gedichte-finden.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\NKWEDWCO.txt [ Cookie:franzi@zanox.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\YJPHB1QL.txt [ Cookie:franzi@eas.apm.emediate.eu/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\10R6IZZ7.txt [ Cookie:franzi@2o7.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\XRD5D3LI.txt [ Cookie:franzi@ad.adnet.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@profilbanner[1].txt [ Cookie:franzi@profilbanner.me/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\DJDB0T9A.txt [ Cookie:franzi@ad.adserver01.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adform[3].txt [ Cookie:franzi@adform.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@clicks.pangora[1].txt [ Cookie:franzi@clicks.pangora.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@audiag.112.2o7[1].txt [ Cookie:franzi@audiag.112.2o7.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@cewecolor.112.2o7[1].txt [ Cookie:franzi@cewecolor.112.2o7.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@doubleclick[4].txt [ Cookie:franzi@doubleclick.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\RDDAOQS7.txt [ Cookie:franzi@tradedoubler.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\W62YX42T.txt [ Cookie:franzi@statse.webtrendslive.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@yieldmanager[2].txt [ Cookie:franzi@yieldmanager.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\658L2XQA.txt [ Cookie:franzi@zanox-affiliate.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adsrv1.admediate[2].txt [ Cookie:franzi@adsrv1.admediate.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@komtrack[4].txt [ Cookie:franzi@komtrack.com/tr/104440 ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\0I0OKDPC.txt [ Cookie:franzi@ad1.adfarm1.adition.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\YL2QJIMV.txt [ Cookie:franzi@www.etracker.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@www.burstnet[2].txt [ Cookie:franzi@www.burstnet.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@webmasterplan[3].txt [ Cookie:franzi@webmasterplan.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@rts.pgmediaserve[1].txt [ Cookie:franzi@rts.pgmediaserve.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@ru4[1].txt [ Cookie:franzi@ru4.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\BX27QCUX.txt [ Cookie:franzi@adform.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\JLXECDIA.txt [ Cookie:franzi@fastclick.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@fr.sitestat[3].txt [ Cookie:franzi@fr.sitestat.com/eurosport/yahoode/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\WJXI82MJ.txt [ Cookie:franzi@track.adform.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@eas4.emediate[2].txt [ Cookie:franzi@eas4.emediate.eu/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\9JMF9RPO.txt [ Cookie:franzi@media6degrees.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@de.twstats[2].txt [ Cookie:franzi@de.twstats.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adcentriconline[3].txt [ Cookie:franzi@adcentriconline.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@ice.112.2o7[1].txt [ Cookie:franzi@ice.112.2o7.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\F9Y4P2D6.txt [ Cookie:franzi@google.com/accounts/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@statcounter[2].txt [ Cookie:franzi@statcounter.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@fr.sitestat[4].txt [ Cookie:franzi@fr.sitestat.com/eurosport/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\77WE98LL.txt [ Cookie:franzi@tribalfusion.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@daimlerag.122.2o7[1].txt [ Cookie:franzi@daimlerag.122.2o7.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@sevenoneintermedia.112.2o7[1].txt [ Cookie:franzi@sevenoneintermedia.112.2o7.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adbrite[2].txt [ Cookie:franzi@adbrite.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\AH8201JR.txt [ Cookie:franzi@adfarm1.adition.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@ero-advertising[1].txt [ Cookie:franzi@ero-advertising.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@ad2.adfarm1.adition[3].txt [ Cookie:franzi@ad2.adfarm1.adition.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adxpose[2].txt [ Cookie:franzi@adxpose.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\81UPVGIK.txt [ Cookie:franzi@ads.quartermedia.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\BRLOT90E.txt [ Cookie:franzi@content.yieldmanager.com/ak/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\59PPZNFB.txt [ Cookie:franzi@traffictrack.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\30KXA5DJ.txt [ Cookie:franzi@mediaplex.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@questionmarket[3].txt [ Cookie:franzi@questionmarket.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\U719QWY7.txt [ Cookie:franzi@ad.dyntracker.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\G0HC1OCO.txt [ Cookie:franzi@www.active-tracking.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@hitbox[2].txt [ Cookie:franzi@hitbox.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\COEFX671.txt [ Cookie:franzi@adtech.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\3GT3A7D4.txt [ Cookie:franzi@adx.chip.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\5RNQ8VGU.txt [ Cookie:franzi@www.googleadservices.com/pagead/conversion/1069477206/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@stats.bmw[1].txt [ Cookie:franzi@stats.bmw.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adserver.adtechus[1].txt [ Cookie:franzi@adserver.adtechus.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@doubleclick[5].txt [ Cookie:franzi@doubleclick.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@stat.dealtime[1].txt [ Cookie:franzi@stat.dealtime.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\WWRU8952.txt [ Cookie:franzi@collective-media.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@track.webtrekk[5].txt [ Cookie:franzi@track.webtrekk.de/469359319458199/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@discount24[1].txt [ Cookie:franzi@discount24.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@accounts.youtube[1].txt [ Cookie:franzi@accounts.youtube.com/accounts ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@countomat[1].txt [ Cookie:franzi@countomat.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\E5LVOGQA.txt [ Cookie:franzi@liveperson.net/hc/85950269 ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@marcopolo.traffective-tracking[1].txt [ Cookie:franzi@marcopolo.traffective-tracking.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@liveperson[2].txt [ Cookie:franzi@liveperson.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@partypoker[2].txt [ Cookie:franzi@partypoker.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@trackhints[3].txt [ Cookie:franzi@trackhints.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@CA78C1W7.txt [ Cookie:franzi@www.googleadservices.com/pagead/conversion/1071490405/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@www.googleadservices[3].txt [ Cookie:franzi@www.googleadservices.com/pagead/conversion/1067519574/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@viewablemedia[1].txt [ Cookie:franzi@viewablemedia.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\UUZ96VRW.txt [ Cookie:franzi@paypal.112.2o7.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\1EFM7PSN.txt [ Cookie:franzi@ad.adition.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\2XGJMO1G.txt [ Cookie:franzi@tracking.quisma.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@ehg-worldpay.hitbox[1].txt [ Cookie:franzi@ehg-worldpay.hitbox.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\3ROFFNEJ.txt [ Cookie:franzi@ich.adscale.de/adserver-ich/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\UERA44TY.txt [ Cookie:franzi@imrworldwide.com/cgi-bin ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@dealtime[1].txt [ Cookie:franzi@dealtime.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@partners.webmasterplan[2].txt [ Cookie:franzi@partners.webmasterplan.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@dc.tremormedia[1].txt [ Cookie:franzi@dc.tremormedia.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@gostats[1].txt [ Cookie:franzi@gostats.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\QOEH4MEU.txt [ Cookie:franzi@unitymedia.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@clickfuse[1].txt [ Cookie:franzi@clickfuse.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\FSQRK2IP.txt [ Cookie:franzi@apmebf.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\SMODZO3O.txt [ Cookie:franzi@invitemedia.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\SZQ9R5SL.txt [ Cookie:franzi@insightexpressai.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\QMRSK7Q3.txt [ Cookie:franzi@media-player-classic.softonic.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\9PMDFCQB.txt [ Cookie:franzi@ad3.adfarm1.adition.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@de.partypoker[1].txt [ Cookie:franzi@de.partypoker.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@www.googleadservices[7].txt [ Cookie:franzi@www.googleadservices.com/pagead/conversion/1067039060/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@www.googleadservices[10].txt [ Cookie:franzi@www.googleadservices.com/pagead/conversion/1068470753/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\JAO62FRT.txt [ Cookie:franzi@banner.lv.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@track.effiliation[2].txt [ Cookie:franzi@track.effiliation.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\6165FA5C.txt [ Cookie:franzi@www.google.de/accounts ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\3NC180DY.txt [ Cookie:franzi@doubleclick.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\QVHSX2Q1.txt [ Cookie:franzi@track.effiliation.com/servlet/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\M2W693PW.txt [ Cookie:franzi@ads20.wwe-media.de/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\HAVCMSCR.txt [ Cookie:franzi@stats.paypal.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\A1H17UR1.txt [ Cookie:franzi@atdmt.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\BX9Q05NE.txt [ Cookie:franzi@ec-track.com/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\WA8WGHR9.txt [ Cookie:franzi@www.google.com/accounts ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\WNQASGJ3.txt [ Cookie:franzi@adviva.net/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\X76GANX0.txt [ Cookie:franzi@www.googleadservices.com/pagead/conversion/1062277222/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\6E6JXSZD.txt [ Cookie:franzi@de.sitestat.com/sueddeutsche/sueddeutsche/ ] C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\XAGH4726.txt [ Cookie:franzi@traveladvertising.com/ ] C:\USERS\FRANZI\Cookies\1PLADMJ9.txt [ Cookie:franzi@mediaplex.com/ ] C:\USERS\FRANZI\Cookies\BK7Z78CQ.txt [ Cookie:franzi@doubleclick.net/ ] C:\USERS\FRANZI\Cookies\THNN4Q8L.txt [ Cookie:franzi@zanox.com/ ] C:\USERS\FRANZI\Cookies\07J0ZG4O.txt [ Cookie:franzi@tradedoubler.com/ ] C:\USERS\FRANZI\Cookies\0X4N8S90.txt [ Cookie:franzi@zanox-affiliate.de/ ] C:\USERS\FRANZI\Cookies\0Z2IBBAJ.txt [ Cookie:franzi@ad1.adfarm1.adition.com/ ] C:\USERS\FRANZI\Cookies\X2F135WW.txt [ Cookie:franzi@www.etracker.de/ ] C:\USERS\FRANZI\Cookies\2FE9OQI4.txt [ Cookie:franzi@atdmt.com/ ] C:\USERS\FRANZI\Cookies\0OX2HBM5.txt [ Cookie:franzi@tracking.quisma.com/ ] C:\USERS\FRANZI\Cookies\C4SH50VZ.txt [ Cookie:franzi@imrworldwide.com/cgi-bin ] C:\USERS\FRANZI\Cookies\B73IC523.txt [ Cookie:franzi@sevenoneintermedia.112.2o7.net/ ] C:\USERS\FRANZI\Cookies\WGFWFRS0.txt [ Cookie:franzi@apmebf.com/ ] C:\USERS\FRANZI\Cookies\MB3SBR8D.txt [ Cookie:franzi@adfarm1.adition.com/ ] C:\USERS\FRANZI\Cookies\2YWQRXPQ.txt [ Cookie:franzi@ad3.adfarm1.adition.com/ ] C:\USERS\FRANZI\Cookies\ITTK2C3T.txt [ Cookie:franzi@content.yieldmanager.com/ak/ ] C:\USERS\FRANZI\Cookies\CMZOC504.txt [ Cookie:franzi@traffictrack.de/ ] .doubleclick.net [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .webmasterplan.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .webmasterplan.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .webmasterplan.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] track.effiliation.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] track.effiliation.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] track.effiliation.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] track.effiliation.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] track.effiliation.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .apmebf.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .mediaplex.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .tradedoubler.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .mediaplex.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] ad3.adfarm1.adition.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .atdmt.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .atdmt.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] track.adform.net [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] track.adform.net [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .adform.net [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .tradedoubler.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .tradedoubler.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .tradedoubler.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .adfarm1.adition.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] ad2.adfarm1.adition.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .zanox.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .serving-sys.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .serving-sys.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] s0.2mdn.net [ C:\USERS\FRANZI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\ZYGT6FGZ ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZANOX[4].TXT [ /ZANOX ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD2.ADFARM1.ADITION[1].TXT [ /AD2.ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@SERVER.LON.LIVEPERSON[1].TXT [ /SERVER.LON.LIVEPERSON ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.WEBTREKK[2].TXT [ /TRACK.WEBTREKK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRAFFICTRACK[3].TXT [ /TRAFFICTRACK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADBRITE[1].TXT [ /ADBRITE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.JINKADS[1].TXT [ /ADS.JINKADS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@DELIVERY.ATKMEDIA[2].TXT [ /DELIVERY.ATKMEDIA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.WEBTREKK[3].TXT [ /TRACK.WEBTREKK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.ADFORM[3].TXT [ /TRACK.ADFORM ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRIBALFUSION[2].TXT [ /TRIBALFUSION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.MINDSHARE[3].TXT [ /TRACKING.MINDSHARE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@GMEUROPE.112.2O7[1].TXT [ /GMEUROPE.112.2O7 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@OVERTURE[1].TXT [ /OVERTURE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZANOX[3].TXT [ /ZANOX ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZBOX.ZANOX[1].TXT [ /ZBOX.ZANOX ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@FL01.CT2.COMCLICK[2].TXT [ /FL01.CT2.COMCLICK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ELITEPARTNER[1].TXT [ /ELITEPARTNER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.QUISMA[3].TXT [ /TRACKING.QUISMA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIA.ANTENNE-BAYERN[3].TXT [ /MEDIA.ANTENNE-BAYERN ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@A.REVENUEMAX[1].TXT [ /A.REVENUEMAX ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@RTS.PGMEDIASERVE[2].TXT [ /RTS.PGMEDIASERVE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.YIELDMANAGER[3].TXT [ /AD.YIELDMANAGER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@SECMEDIA[2].TXT [ /SECMEDIA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.SPORTWERK[1].TXT [ /ADS.SPORTWERK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADX.CHIP[2].TXT [ /ADX.CHIP ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER.EP-SOLUTIONS[1].TXT [ /ADSERVER.EP-SOLUTIONS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.YIELDMANAGER[2].TXT [ /AD.YIELDMANAGER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@HEARSTUGO.112.2O7[1].TXT [ /HEARSTUGO.112.2O7 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@A.REVENUEMAX[2].TXT [ /A.REVENUEMAX ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.WEBTREKK[1].TXT [ /TRACK.WEBTREKK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD2.ADFARM1.ADITION[2].TXT [ /AD2.ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD4.ADFARM1.ADITION[1].TXT [ /AD4.ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.KLICKTEL[2].TXT [ /TRACKING.KLICKTEL ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.EFFILIATION[1].TXT [ /TRACK.EFFILIATION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@YADRO[2].TXT [ /YADRO ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZANOX[2].TXT [ /ZANOX ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.MINDSHARE[2].TXT [ /TRACKING.MINDSHARE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ADC-SERV[2].TXT [ /AD.ADC-SERV ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.ETRACKER[2].TXT [ /WWW.ETRACKER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.YIELDMANAGER[5].TXT [ /AD.YIELDMANAGER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@USER.LUCIDMEDIA[1].TXT [ /USER.LUCIDMEDIA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@VINVEST.122.2O7[1].TXT [ /VINVEST.122.2O7 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.BRANDWIRE[2].TXT [ /ADS.BRANDWIRE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@EUROS4CLICK[1].TXT [ /EUROS4CLICK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ADSERVER01[2].TXT [ /AD.ADSERVER01 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFORM[1].TXT [ /ADFORM ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AMSTATS.AWAYMESSAGE[1].TXT [ /AMSTATS.AWAYMESSAGE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@DOUBLECLICK[1].TXT [ /DOUBLECLICK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER.PLUS[1].TXT [ /ADSERVER.PLUS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ACCOUNT.BETFAIR[2].TXT [ /ACCOUNT.BETFAIR ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIA.ANTENNE-BAYERN[2].TXT [ /MEDIA.ANTENNE-BAYERN ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ZANOX[4].TXT [ /AD.ZANOX ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.GOOGLEADSERVICES[5].TXT [ /WWW.GOOGLEADSERVICES ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.EFFILIATION[3].TXT [ /TRACK.EFFILIATION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@RU4[2].TXT [ /RU4 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@UNITYMEDIA[2].TXT [ /UNITYMEDIA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@CREATIVDISCOUNT[2].TXT [ /CREATIVDISCOUNT ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ZANOX[1].TXT [ /AD.ZANOX ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.PUBMATIC[1].TXT [ /ADS.PUBMATIC ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WEBORAMA[1].TXT [ /WEBORAMA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@REVSCI[1].TXT [ /REVSCI ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.LANDWIRT[2].TXT [ /ADS.LANDWIRT ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFARM1.ADITION[2].TXT [ /ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.CREATIVE-SERVING[2].TXT [ /ADS.CREATIVE-SERVING ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@IMRWORLDWIDE[3].TXT [ /IMRWORLDWIDE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.DOTHADS[1].TXT [ /ADS.DOTHADS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@POOBIESEUROPEBV.SOLUTION.WEBORAMA[2].TXT [ /POOBIESEUROPEBV.SOLUTION.WEBORAMA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD2.ADFARM1.ADITION[4].TXT [ /AD2.ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD4.ADFARM1.ADITION[3].TXT [ /AD4.ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@GUJ.122.2O7[1].TXT [ /GUJ.122.2O7 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@LUCIDMEDIA[1].TXT [ /LUCIDMEDIA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.USENEXT[2].TXT [ /WWW.USENEXT ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@CONTENT.YIELDMANAGER[1].TXT [ /CONTENT.YIELDMANAGER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD1.CHEFKOCH[1].TXT [ /AD1.CHEFKOCH ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ADNET[2].TXT [ /AD.ADNET ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.NCTRACKING[1].TXT [ /WWW.NCTRACKING ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@IMRWORLDWIDE[2].TXT [ /IMRWORLDWIDE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@DOUBLECLICK[3].TXT [ /DOUBLECLICK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFARM1.ADITION[3].TXT [ /ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.GOOGLEADSERVICES[11].TXT [ /WWW.GOOGLEADSERVICES ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD1.ADFARM.ADTELLIGENCE[2].TXT [ /AD1.ADFARM.ADTELLIGENCE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@VODAFONEGROUP.122.2O7[1].TXT [ /VODAFONEGROUP.122.2O7 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.BURSTNET[1].TXT [ /WWW.BURSTNET ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZANOX-AFFILIATE[2].TXT [ /ZANOX-AFFILIATE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@SNAPFISH.112.2O7[1].TXT [ /SNAPFISH.112.2O7 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIA6DEGREES[2].TXT [ /MEDIA6DEGREES ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.USENEXT[1].TXT [ /WWW.USENEXT ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@APMEBF[4].TXT [ /APMEBF ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRADEDOUBLER[4].TXT [ /TRADEDOUBLER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AZJMP[2].TXT [ /AZJMP ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.GAMEFORGE[1].TXT [ /TRACKING.GAMEFORGE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFORM[2].TXT [ /ADFORM ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIAPLEX[1].TXT [ /MEDIAPLEX ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD3.ADFARM1.ADITION[3].TXT [ /AD3.ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADINTERAX[2].TXT [ /ADINTERAX ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.HANNOVERSCHE[2].TXT [ /TRACKING.HANNOVERSCHE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.ZANOX-AFFILIATE[2].TXT [ /WWW.ZANOX-AFFILIATE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.GOOGLEADSERVICES[6].TXT [ /WWW.GOOGLEADSERVICES ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@STATS.O2MORE[2].TXT [ /STATS.O2MORE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRADEDOUBLER[1].TXT [ /TRADEDOUBLER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.YIELDMANAGER[1].TXT [ /AD.YIELDMANAGER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@VDWP.SOLUTION.WEBORAMA[2].TXT [ /VDWP.SOLUTION.WEBORAMA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@CONTENT.YIELDMANAGER[4].TXT [ /CONTENT.YIELDMANAGER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER2.CLIPKIT[1].TXT [ /ADSERVER2.CLIPKIT ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIABRANDSWW[2].TXT [ /MEDIABRANDSWW ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@BS.SERVING-SYS[2].TXT [ /BS.SERVING-SYS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@STUDIVZ.ADFARM1.ADITION[1].TXT [ /STUDIVZ.ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@STATSE.WEBTRENDSLIVE[2].TXT [ /STATSE.WEBTRENDSLIVE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@QUESTIONMARKET[2].TXT [ /QUESTIONMARKET ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@APMEBF[2].TXT [ /APMEBF ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.360YIELD[2].TXT [ /AD.360YIELD ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@BIZRATE[1].TXT [ /BIZRATE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.PUBMATIC[2].TXT [ /ADS.PUBMATIC ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@LIVEPERSON[1].TXT [ /LIVEPERSON ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD-BECK.HOSTING2BUSINESS[1].TXT [ /AD-BECK.HOSTING2BUSINESS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@KOMTRACK[3].TXT [ /KOMTRACK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFARM1.ADITION[5].TXT [ /ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@2O7[1].TXT [ /2O7 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADTECH[2].TXT [ /ADTECH ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD1.ADFARM1.ADITION[1].TXT [ /AD1.ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.QUARTERMEDIA[2].TXT [ /ADS.QUARTERMEDIA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.ADFORM[4].TXT [ /TRACK.ADFORM ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZEDO[2].TXT [ /ZEDO ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.TRAFFICTRACK[1].TXT [ /WWW.TRAFFICTRACK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WEBMASTERPLAN[2].TXT [ /WEBMASTERPLAN ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIABRANDSWW[3].TXT [ /MEDIABRANDSWW ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.DOODLE[2].TXT [ /ADS.DOODLE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.3GNET[1].TXT [ /TRACKING.3GNET ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@COLLECTIVE-MEDIA[2].TXT [ /COLLECTIVE-MEDIA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@CONTENT.YIELDMANAGER[5].TXT [ /CONTENT.YIELDMANAGER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.AD4GAME[2].TXT [ /ADS.AD4GAME ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@APMEBF[1].TXT [ /APMEBF ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.JINKADS[3].TXT [ /ADS.JINKADS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@FASTCLICK[1].TXT [ /FASTCLICK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZEDO[3].TXT [ /ZEDO ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD3.ADFARM1.ADITION[1].TXT [ /AD3.ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER.CLIPSCALE[1].TXT [ /ADSERVER.CLIPSCALE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@SPECIFICCLICK[2].TXT [ /SPECIFICCLICK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@IM.BANNER.T-ONLINE[2].TXT [ /IM.BANNER.T-ONLINE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.ADK2[3].TXT [ /ADS.ADK2 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ADITION[2].TXT [ /AD.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.GOOGLEADSERVICES[2].TXT [ /WWW.GOOGLEADSERVICES ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@LIVEPERSON[3].TXT [ /LIVEPERSON ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@LFSTMEDIA[2].TXT [ /LFSTMEDIA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFARM1.ADITION[7].TXT [ /ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFARM1.ADITION[4].TXT [ /ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@KOMTRACK[5].TXT [ /KOMTRACK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@KOMTRACK[2].TXT [ /KOMTRACK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.MEDIAMARKT[1].TXT [ /WWW.MEDIAMARKT ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@STATS.O2MORE[1].TXT [ /STATS.O2MORE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.AD-SRV[1].TXT [ /AD.AD-SRV ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ZANOX[2].TXT [ /AD.ZANOX ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD2.NMM[1].TXT [ /AD2.NMM ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD3.ADFARM1.ADITION[4].TXT [ /AD3.ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD4.ADFARM1.ADITION[2].TXT [ /AD4.ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADCENTRICONLINE[1].TXT [ /ADCENTRICONLINE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADECN[2].TXT [ /ADECN ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFARM1.ADITION[1].TXT [ /ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.MEDIENHAUS[1].TXT [ /ADS.MEDIENHAUS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.ADK2[2].TXT [ /ADS.ADK2 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.BRANDWIRE[1].TXT [ /ADS.BRANDWIRE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.CREAFI[1].TXT [ /ADS.CREAFI ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.CRITIC[2].TXT [ /ADS.CRITIC ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.DIGINIGHTS[1].TXT [ /ADS.DIGINIGHTS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.IMMOBILIENSCOUT24[1].TXT [ /ADS.IMMOBILIENSCOUT24 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER.ADREACTOR[1].TXT [ /ADSERVER.ADREACTOR ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER.TRAFFICTRACK[2].TXT [ /ADSERVER.TRAFFICTRACK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER2.CLIPKIT[3].TXT [ /ADSERVER2.CLIPKIT ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSRV.ADMEDIATE[2].TXT [ /ADSRV.ADMEDIATE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSRV1.ADMEDIATE[1].TXT [ /ADSRV1.ADMEDIATE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADVIVA[1].TXT [ /ADVIVA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADXPOSE[1].TXT [ /ADXPOSE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@APMEBF[5].TXT [ /APMEBF ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ATDMT[1].TXT [ /ATDMT ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ATDMT[2].TXT [ /ATDMT ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AUTOSCOUT24.112.2O7[1].TXT [ /AUTOSCOUT24.112.2O7 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@BLAU.122.2O7[2].TXT [ /BLAU.122.2O7 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@BS.SERVING-SYS[1].TXT [ /BS.SERVING-SYS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@CONTENT.YIELDMANAGER[2].TXT [ /CONTENT.YIELDMANAGER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@COUNT.ASNETWORKS[1].TXT [ /COUNT.ASNETWORKS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@DATA.COREMETRICS[1].TXT [ /DATA.COREMETRICS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@DOUBLECLICK[2].TXT [ /DOUBLECLICK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@EAS.APM.EMEDIATE[1].TXT [ /EAS.APM.EMEDIATE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@EAS.APM.EMEDIATE[3].TXT [ /EAS.APM.EMEDIATE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@EAS4.EMEDIATE[1].TXT [ /EAS4.EMEDIATE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@EYEWONDER[2].TXT [ /EYEWONDER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@FASTCLICK[2].TXT [ /FASTCLICK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@HIMEDIA.INDIVIDUAD[1].TXT [ /HIMEDIA.INDIVIDUAD ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@INVITEMEDIA[1].TXT [ /INVITEMEDIA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@KABELBW.112.2O7[1].TXT [ /KABELBW.112.2O7 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@KOMTRACK[1].TXT [ /KOMTRACK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@KULTURFINDER-BW[2].TXT [ /KULTURFINDER-BW ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@LEGOLAS-MEDIA[1].TXT [ /LEGOLAS-MEDIA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@LIBRI.112.2O7[1].TXT [ /LIBRI.112.2O7 ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIAPLEX[2].TXT [ /MEDIAPLEX ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@PARTYPOKER[1].TXT [ /PARTYPOKER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@PROFILBANNER[2].TXT [ /PROFILBANNER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ROTATOR.ADJUGGLER[2].TXT [ /ROTATOR.ADJUGGLER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@SERVING-SYS[1].TXT [ /SERVING-SYS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@STATCOUNTER[1].TXT [ /STATCOUNTER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@STUDIVZ.ADFARM1.ADITION[2].TXT [ /STUDIVZ.ADFARM1.ADITION ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.ADFORM[1].TXT [ /TRACK.ADFORM ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.WEBTREKK[4].TXT [ /TRACK.WEBTREKK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.9FLATS[2].TXT [ /TRACKING.9FLATS ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.KLICKTEL[1].TXT [ /TRACKING.KLICKTEL ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.MINDSHARE[1].TXT [ /TRACKING.MINDSHARE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.QUISMA[2].TXT [ /TRACKING.QUISMA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.QUISMA[4].TXT [ /TRACKING.QUISMA ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRADEDOUBLER[2].TXT [ /TRADEDOUBLER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRAFFICTRACK[1].TXT [ /TRAFFICTRACK ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@USENEXT[1].TXT [ /USENEXT ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.1FREECOUNTER[1].TXT [ /WWW.1FREECOUNTER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.ACTIVE-TRACKING[1].TXT [ /WWW.ACTIVE-TRACKING ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.ETRACKER[1].TXT [ /WWW.ETRACKER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.GOOGLEADSERVICES[4].TXT [ /WWW.GOOGLEADSERVICES ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.GOOGLEADSERVICES[9].TXT [ /WWW.GOOGLEADSERVICES ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@XITI[1].TXT [ /XITI ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@YIELDMANAGER[1].TXT [ /YIELDMANAGER ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZANOX-AFFILIATE[1].TXT [ /ZANOX-AFFILIATE ] C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZANOX[1].TXT [ /ZANOX ] Malware: Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Datenbank Version: 7840 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 01.10.2011 23:22:26 mbam-log-2011-10-01 (23-22-18).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|G:\|) Durchsuchte Objekte: 365785 Laufzeit: 2 Stunde(n), 46 Minute(n), 22 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 1 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: c:\Users\Franzi\start menu\Programs\Startup\wuT2.exe (Trojan.Dropper) -> No action taken. und ESET: ESETSmartInstaller@High as CAB hook log: OnlineScanner64.ocx - registred OK OnlineScanner.ocx - registred OK # version=7 # iexplore.exe=8.00.7600.16385 (win7_rtm.090713-1255) # OnlineScanner.ocx=1.0.0.6528 # api_version=3.0.2 # EOSSerial=02016d6e571cab4a9ff0113f04d5ea21 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-09-23 06:37:02 # local_time=2011-09-23 09:37:02 (+0300, Ostafrikanische Normalzeit) # country="Germany" # lang=1033 # osver=6.1.7600 NT # compatibility_mode=1797 16775165 100 94 971378 53330100 1035420 0 # compatibility_mode=5121 16777213 100 75 26535818 30313211 0 0 # compatibility_mode=5893 16776574 66 85 34388956 68426729 0 0 # compatibility_mode=8192 67108863 100 0 464 464 0 0 # scanned=219635 # found=21 # cleaned=0 # scan_time=6143 C:\Users\Franzi\AppData\Local\Temp\hnimjkkubi Win32/Agent.TBW trojan (unable to clean) 00000000000000000000000000000000 I C:\Users\Franzi\Desktop\Tansania September 11\18-19 September.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\$RECYCLE.BIN.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\17.09.11.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\18-19 September.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\Action.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\Asterix.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\Bedtime Stories.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\Comedy.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\Die Madagascar Pinguine in vorweihnatlicher Mission.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\Dr. House.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\Horror.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\How I met your mother.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\New Moon.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\ohr.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\Simpsons.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\Sissi.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\System Volume Information.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\The Dark Knight (2008).lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\Vorstadtkrokodile.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I G:\Zoey 101.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I Danke LG Franzi |
|
04.10.2011, 14:30
| #24 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Ordner werden nur noch als verknüpungen angezeigtZitat:
Die Funde mit ESET können auch entfernet werden, das sind die "Fake-Ordner" auf dei du klicken solltest als die echten Ordner versteckt waren. Die sind doch alle wieder sichtbar oder?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
05.10.2011, 14:34
| #25 |
| | Ordner werden nur noch als verknüpungen angezeigt Die Malwarefunde sind weg. Malwarebytes' Anti-Malware 1.51.2.1300 Malwarebytes : Free anti-malware, anti-virus and spyware removal download Datenbank Version: 7840 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 05.10.2011 15:40:13 mbam-log-2011-10-05 (15-40-13).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|G:\|) Durchsuchte Objekte: 366844 Laufzeit: 1 Stunde(n), 22 Minute(n), 24 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) Jedoch hatte ich ein Problem die infizierten threads bei ESEST zu löschen. Kann ich einfach so die Verknüpfungen auf meiner externen Festplatte löschen oder benötige ich da ein spezielles (ESET) Programm dazu, welches mir die Ordner runterlöscht? LG Franzi |
|
05.10.2011, 16:21
| #26 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Ordner werden nur noch als verknüpungen angezeigt Verknüpfungen sind auch ganz normale Dateien, die man so löschen kann. Man braucht nicht für alles ein spezielles Tool.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
05.10.2011, 18:39
| #27 |
| | Ordner werden nur noch als verknüpungen angezeigt Klingt super Dann ist mein bösartiger Trojaner vollständig beseitigt? Vielen, vielen Dank dafür! Wenn ich wieder ein Problem haben sollte, melde ich mich   LG aus Tansania Franzi |
|
05.10.2011, 20:52
| #28 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Ordner werden nur noch als verknüpungen angezeigt Ist der Rechner denn soweit wieder im Lot? Da wurden ja nur noch ein Überrest, eben diese besagtem mülligen Verknüpfungen und eine Menge Cookies (harmlos) gefunden.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Ordner werden nur noch als verknüpungen angezeigt |
| .exe, angeblich, angezeigt, externe, externen, festplatte, gefunde, gen, guten, konnte, melde, meldet, namen, nicht gefunden, nicht mehr, ordner, platte, speichermedien, stick, verknüpfungen, virus, volle, windows, zugreife, zugreifen |
Linear-Darstellung
