OSAM Logfile:

Report of OSAM: Autorun Manager v5.0.11926.0
Online Solutions. Complex Protection for Information Systems
Saved at 19:27:49 on 04.11.2011

OS: Windows Vista Home Premium Edition Service Pack 2 (Build 6002), 32-bit
Default Browser: Microsoft Corporation Internet Explorer 8.00.6001.18702

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"avgio" (avgio) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
"avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys
"catchme" (catchme) - ? - C:\Users\Stefan\AppData\Local\Temp\catchme.sys  (File not found)
"IP in IP Tunnel Driver" (IpInIp) - ? - C:\Windows\System32\DRIVERS\ipinip.sys  (File not found)
"IPX Traffic Filter Driver" (NwlnkFlt) - ? - C:\Windows\System32\DRIVERS\nwlnkflt.sys  (File not found)
"IPX Traffic Forwarder Driver" (NwlnkFwd) - ? - C:\Windows\System32\DRIVERS\nwlnkfwd.sys  (File not found)
"mbr" (mbr) - ? - C:\ComboFix\mbr.sys  (Hidden registry entry, rootkit activity | File not found)
"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys
"StarOpen" (StarOpen) - ? - C:\Windows\system32\drivers\StarOpen.sys  (File found, but it contains no detailed information)
"ugdiqpob" (ugdiqpob) - ? - C:\Users\Stefan\AppData\Local\Temp\ugdiqpob.sys  (Hidden registry entry, rootkit activity | File not found)
"X10 Hid Device" (X10Hid) - "X10 Wireless Technology, Inc." - C:\Windows\System32\Drivers\x10hid.sys

[Explorer]
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? -   (File not found | COM-object registry key not found)
{23170F69-40C1-278A-1000-000100020000} "7-Zip Shell Extension" - "Igor Pavlov" - C:\Program Files\7-Zip\7-zip.dll
{1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)
{34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)
{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? -   (File not found | COM-object registry key not found)
{2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? -   (File not found | COM-object registry key not found)
{FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} "IE User Assist" - ? -   (File not found | COM-object registry key not found)
{00020d75-0000-0000-c000-000000000046} "lnkfile" - ? -   (File not found | COM-object registry key not found)
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)
{E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)
{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll
{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -   (File not found | COM-object registry key not found)
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - "Alexander Roshal" - C:\Program Files\WinRAR\rarext.dll

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
ITBar7Height "ITBar7Height" - ? -   (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_20" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} "Java Plug-in 1.6.0_20" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_20" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_20.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
{7530BFB8-7293-4D34-9923-61A11451AFC5} "OnlineScanner Control" - "ESET" - C:\PROGRA~1\ESET\ESETON~1\ONLINE~1.OCX / hxxp://download.eset.com/special/eos/OnlineScanner.cab
{D27CDB6E-AE6D-11CF-96B8-444553540000} "Shockwave Flash Object" - "Adobe Systems, Inc." - C:\Windows\system32\Macromed\Flash\Flash10e.ocx / hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{53707962-6F74-2D53-2644-206D7942484F} "ClsidExtension" - "Safer Networking Limited" - C:\Users\Stefan\Desktop\Spybot - Search & Destroy\SDHelper.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll
{53707962-6F74-2D53-2644-206D7942484F} "Spybot-S&D IE Protection" - "Safer Networking Limited" - C:\Users\Stefan\Desktop\Spybot - Search & Destroy\SDHelper.dll

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"OpenOffice.org 3.2.lnk" - ? - C:\Program Files\OpenOffice.org 3\program\quickstart.exe  (Shortcut exists | File found, but it contains no detailed information | File exists)
-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"avgnt" - "Avira GmbH" - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100" (WPFFontCache_v0400) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
"Adobe Acrobat Update Service" (AdobeARMservice) - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\sched.exe
"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
"NMSAccess" (NMSAccess) - ? - C:\Program Files\CDBurnerXP\NMSAccessU.exe  (File found, but it contains no detailed information)
"SBSD Security Center Service" (SBSDWSCService) - "Safer Networking Ltd." - C:\Users\Stefan\Desktop\Spybot - Search & Destroy\SDWinSec.exe
"X10 Device Network Service" (x10nets) - "X10" - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

===[ Logfile end ]=========================================[ Logfile end ]===
         

--- --- ---

If You have questions or want to get some help, You can visit Online Solutions :: Index

aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-11-04 19:39:22
-----------------------------
19:39:22.751 OS Version: Windows 6.0.6002 Service Pack 2
19:39:22.751 Number of processors: 2 586 0xF0B
19:39:22.751 ComputerName: STEFAN-PC UserName: Stefan
19:39:45.808 Initialize success
19:39:53.686 AVAST engine defs: 11110401
19:40:06.852 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4
19:40:06.852 Disk 0 Vendor: WDC_WD5000AACS-00ZUB0 01.01B01 Size: 476940MB BusType: 3
19:40:08.880 Disk 0 MBR read successfully
19:40:08.880 Disk 0 MBR scan
19:40:08.896 Disk 0 Windows VISTA default MBR code
19:40:08.896 Disk 0 scanning sectors +976768065
19:40:08.958 Disk 0 scanning C:\Windows\system32\drivers
19:40:18.724 Service scanning
19:40:20.081 Modules scanning
19:40:24.698 Disk 0 trace - called modules:
19:40:24.714 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS PCIIDEX.SYS msahci.sys
19:40:24.714 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8577bac8]
19:40:24.730 3 CLASSPNP.SYS[883c48b3] -> nt!IofCallDriver -> [0x85079898]
19:40:24.730 5 acpi.sys[806956bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-4[0x85067b98]
19:40:26.180 AVAST engine scan C:\Windows
19:40:32.124 AVAST engine scan C:\Windows\system32
19:43:01.147 AVAST engine scan C:\Windows\system32\drivers
19:43:17.074 AVAST engine scan C:\Users\Stefan
19:44:58.303 AVAST engine scan C:\ProgramData
19:45:46.647 Scan finished successfully
19:45:51.733 Disk 0 MBR has been saved successfully to "C:\Users\Stefan\Desktop\MBR.dat"
19:45:51.748 The log file has been saved successfully to "C:\Users\Stefan\Desktop\aswMBR.txt"

GMER ging nicht?

So, vielen Dank schonmal für die hilfreiche Anleitung!!
Wollte jetzt nur zwischendurch mal kurz wissen was wir jetzt alles gemacht haben und wo dieser Virus herkam?Kurze Frage, kann ich jetzt schon wieder unbesorgt im Internet surfen oder wie schaut das aus?
Tut mir leid für die "dummen" Fragen aber ich kenne mich wirklich nicht gut aus und befolge nur die Anweisungen so gut ich kann.
Dankeschön.

Zitat von cosinus

GMER ging nicht?

Ich versuche es nochmal.

Hm, nein funktioniert nicht.

Ok, GMER geht halt nicht immer
Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!


Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

SUPERAntiSpyware Scan Log
SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Generated 11/04/2011 at 08:46 PM

Application Version : 5.0.1134

Core Rules Database Version : 7899
Trace Rules Database Version: 5711

Scan type : Quick Scan
Total Scan Time : 00:04:14

Operating System Information
Windows Vista Home Premium 32-bit, Service Pack 2 (Build 6.00.6002)
UAC On - Administrator

Memory items scanned : 629
Memory threats detected : 0
Registry items scanned : 29740
Registry threats detected : 0
File items scanned : 6997
File threats detected : 257

Adware.Tracking Cookie
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\stefan@adx.chip[2].txt [ /adx.chip ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\stefan@atdmt[2].txt [ /atdmt ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\stefan@partypoker[2].txt [ /partypoker ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\stefan@smartadserver[2].txt [ /smartadserver ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\stefan@youporn[1].txt [ /youporn ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\stefan@youporn[2].txt [ /youporn ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\3XT6ASNV.txt [ /zanox.com ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\2U6S0GC9.txt [ /questionmarket.com ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\RNP4SBVW.txt [ /ad2.adfarm1.adition.com ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\SNA58GV1.txt [ /doubleclick.net ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\B95IV1FJ.txt [ /zanox-affiliate.de ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\CMNMVHST.txt [ /serving-sys.com ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\ZMLRMUKZ.txt [ /apmebf.com ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\QHQ1YKKU.txt [ /eset.122.2o7.net ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\ZW13Q3FH.txt [ /ad.zanox.com ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\H5L0JWWN.txt [ /mediaplex.com ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\PYIZ5X9M.txt [ /adfarm1.adition.com ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\575MQ6NE.txt [ /advertising.com ]
C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Cookies\AZJ82OGO.txt [ /imrworldwide.com ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\C4S3GNIM.txt [ Cookie:stefan@clkads.com/adServe/banners ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@toplist[1].txt [ Cookie:stefan@toplist.cz/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@specificclick[1].txt [ Cookie:stefan@specificclick.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@xiti[1].txt [ Cookie:stefan@xiti.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@snapfish.112.2o7[1].txt [ Cookie:stefan@snapfish.112.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ww251.smartadserver[1].txt [ Cookie:stefan@ww251.smartadserver.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@tracking.quisma[1].txt [ Cookie:stefan@tracking.quisma.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@view.advert-layer[1].txt [ Cookie:stefan@view.advert-layer.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@smartadserver[2].txt [ Cookie:stefan@smartadserver.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@revsci[3].txt [ Cookie:stefan@revsci.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@skydeutschland.122.2o7[1].txt [ Cookie:stefan@skydeutschland.122.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@zanox[2].txt [ Cookie:stefan@zanox.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@finanzportal20.112.2o7[1].txt [ Cookie:stefan@finanzportal20.112.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@traffictrack[2].txt [ Cookie:stefan@traffictrack.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@jumbo-discount[2].txt [ Cookie:stefan@jumbo-discount.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@im.banner.t-online[1].txt [ Cookie:stefan@im.banner.t-online.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@fastclick[1].txt [ Cookie:stefan@fastclick.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@dealtime[1].txt [ Cookie:stefan@dealtime.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@microsoftmachinetranslation.112.2o7[1].txt [ Cookie:stefan@microsoftmachinetranslation.112.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@tracking.klicktel[2].txt [ Cookie:stefan@tracking.klicktel.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@stat.dealtime[1].txt [ Cookie:stefan@stat.dealtime.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@112.2o7[1].txt [ Cookie:stefan@112.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@a.secureclicks[1].txt [ Cookie:stefan@a.secureclicks.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\VCBUQN5B.txt [ Cookie:stefan@doubleclick.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@tracking.financescout24[2].txt [ Cookie:stefan@tracking.financescout24.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@sexkontakt[1].txt [ Cookie:stefan@sexkontakt.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ad.adserver01[1].txt [ Cookie:stefan@ad.adserver01.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@4stats[1].txt [ Cookie:stefan@4stats.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@zanox-affiliate[2].txt [ Cookie:stefan@zanox-affiliate.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@statcounter[2].txt [ Cookie:stefan@statcounter.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@de.sitestat[1].txt [ Cookie:stefan@de.sitestat.com/sueddeutsche/sueddeutsche/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@apmebf[2].txt [ Cookie:stefan@apmebf.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@usenext[3].txt [ Cookie:stefan@usenext.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ad.zanox[4].txt [ Cookie:stefan@ad.zanox.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adtech[3].txt [ Cookie:stefan@adtech.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@atdmt[2].txt [ Cookie:stefan@atdmt.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@zieltrack[2].txt [ Cookie:stefan@zieltrack.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ad4.adfarm1.adition[2].txt [ Cookie:stefan@ad4.adfarm1.adition.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@mediaplex[1].txt [ Cookie:stefan@mediaplex.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@gostats[1].txt [ Cookie:stefan@gostats.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@premiumtv.122.2o7[1].txt [ Cookie:stefan@premiumtv.122.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@dztadserver.dx-work[2].txt [ Cookie:stefan@dztadserver.dx-work.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@track.effiliation[2].txt [ Cookie:stefan@track.effiliation.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@advertising[1].txt [ Cookie:stefan@advertising.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adviva[2].txt [ Cookie:stefan@adviva.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@collective-media[1].txt [ Cookie:stefan@collective-media.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@girlsteachsex[2].txt [ Cookie:stefan@girlsteachsex.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@content.yieldmanager[4].txt [ Cookie:stefan@content.yieldmanager.com/ak/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@eas.apm.emediate[2].txt [ Cookie:stefan@eas.apm.emediate.eu/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@tracking.mindshare[3].txt [ Cookie:stefan@tracking.mindshare.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.usenext[1].txt [ Cookie:stefan@www.usenext.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@invitemedia[2].txt [ Cookie:stefan@invitemedia.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ad.adnet[1].txt [ Cookie:stefan@ad.adnet.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@a.wazizu[1].txt [ Cookie:stefan@a.wazizu.com/ad/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@track.adform[2].txt [ Cookie:stefan@track.adform.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ero-advertising[1].txt [ Cookie:stefan@ero-advertising.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@imrworldwide[2].txt [ Cookie:stefan@imrworldwide.com/cgi-bin ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@porn[1].txt [ Cookie:stefan@porn.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@2o7[1].txt [ Cookie:stefan@2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@in.mydirtyhobby[1].txt [ Cookie:stefan@in.mydirtyhobby.com/track/AJIPADgU,33/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@manpower.122.2o7[1].txt [ Cookie:stefan@manpower.122.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@media.gan-online[1].txt [ Cookie:stefan@media.gan-online.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adxpansion[2].txt [ Cookie:stefan@adxpansion.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@eas4.emediate[2].txt [ Cookie:stefan@eas4.emediate.eu/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@stat.aldi[3].txt [ Cookie:stefan@stat.aldi.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@counter.live4members[1].txt [ Cookie:stefan@counter.live4members.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@xoporntube[2].txt [ Cookie:stefan@xoporntube.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adserver.clipscale[1].txt [ Cookie:stefan@adserver.clipscale.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@tto2.traffictrack[1].txt [ Cookie:stefan@tto2.traffictrack.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.etracker[1].txt [ Cookie:stefan@www.etracker.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@server.iad.liveperson[2].txt [ Cookie:stefan@server.iad.liveperson.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.franke-media[1].txt [ Cookie:stefan@www.franke-media.net/piwik/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@track.effiliation[1].txt [ Cookie:stefan@track.effiliation.com/servlet/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@youporn[1].txt [ Cookie:stefan@youporn.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adultfriendfinder[1].txt [ Cookie:stefan@adultfriendfinder.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@stat.aldi[1].txt [ Cookie:stefan@stat.aldi.com/dcswyzl7jkxy5fdv91e2jms8a_8h6t ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@de.sitestat[8].txt [ Cookie:stefan@de.sitestat.com/sport1/mediathek/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@fuckshow[1].txt [ Cookie:stefan@fuckshow.org/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ads.mikinimedia[2].txt [ Cookie:stefan@ads.mikinimedia.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adserver.itsfogo[1].txt [ Cookie:stefan@adserver.itsfogo.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ad.adition[1].txt [ Cookie:stefan@ad.adition.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@tns-counter[1].txt [ Cookie:stefan@tns-counter.ru/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@fidelity.rotator.hadj7.adjuggler[1].txt [ Cookie:stefan@fidelity.rotator.hadj7.adjuggler.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@zedo[2].txt [ Cookie:stefan@zedo.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adserver2.clipkit[2].txt [ Cookie:stefan@adserver2.clipkit.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ads.quartermedia[2].txt [ Cookie:stefan@ads.quartermedia.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@bs.serving-sys[3].txt [ Cookie:stefan@bs.serving-sys.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@serving-sys[2].txt [ Cookie:stefan@serving-sys.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.active-tracking[2].txt [ Cookie:stefan@www.active-tracking.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@m.bloomporn[1].txt [ Cookie:stefan@m.bloomporn.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@tracking.hannoversche[1].txt [ Cookie:stefan@tracking.hannoversche.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@count.xhit[1].txt [ Cookie:stefan@count.xhit.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ich.adscale[1].txt [ Cookie:stefan@ich.adscale.de/adserver-ich/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@hitbox[2].txt [ Cookie:stefan@hitbox.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@stats.rheinschmiede[1].txt [ Cookie:stefan@stats.rheinschmiede.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.traffictrack[2].txt [ Cookie:stefan@www.traffictrack.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ad1.emediate[2].txt [ Cookie:stefan@ad1.emediate.dk/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@teufel-media[1].txt [ Cookie:stefan@teufel-media.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@partypoker[1].txt [ Cookie:stefan@partypoker.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@secmedia[2].txt [ Cookie:stefan@secmedia.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@rambler[2].txt [ Cookie:stefan@rambler.ru/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ads2.uclick[1].txt [ Cookie:stefan@ads2.uclick.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adt.traffictrack[2].txt [ Cookie:stefan@adt.traffictrack.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@yadro[2].txt [ Cookie:stefan@yadro.ru/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adsrv.admediate[2].txt [ Cookie:stefan@adsrv.admediate.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@banner.testberichte[1].txt [ Cookie:stefan@banner.testberichte.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adecn[2].txt [ Cookie:stefan@adecn.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@bizrate[1].txt [ Cookie:stefan@bizrate.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.zanox-affiliate[1].txt [ Cookie:stefan@www.zanox-affiliate.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@server.cpmstar[1].txt [ Cookie:stefan@server.cpmstar.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@zbox.zanox[1].txt [ Cookie:stefan@zbox.zanox.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.gutscheinaffe[1].txt [ Cookie:stefan@www.gutscheinaffe.com/track/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@autoscout24.112.2o7[1].txt [ Cookie:stefan@autoscout24.112.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.pornoliste[1].txt [ Cookie:stefan@www.pornoliste.at/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@stats.ilivid[2].txt [ Cookie:stefan@stats.ilivid.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@naked[1].txt [ Cookie:stefan@naked.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@m.sexxface[1].txt [ Cookie:stefan@m.sexxface.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@m.sex-special[1].txt [ Cookie:stefan@m.sex-special.net/titten/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adserver.traffictrack[1].txt [ Cookie:stefan@adserver.traffictrack.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@urbia.wwe-media[2].txt [ Cookie:stefan@urbia.wwe-media.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.burstnet[1].txt [ Cookie:stefan@www.burstnet.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@dafuckbook[1].txt [ Cookie:stefan@dafuckbook.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@audit.median[1].txt [ Cookie:stefan@audit.median.hu/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ads20.wwe-media[2].txt [ Cookie:stefan@ads20.wwe-media.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.trekmedia[2].txt [ Cookie:stefan@www.trekmedia.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@advertising.fussball-liveticker[1].txt [ Cookie:stefan@advertising.fussball-liveticker.eu/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@vinvest.122.2o7[1].txt [ Cookie:stefan@vinvest.122.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ad.dyntracker[3].txt [ Cookie:stefan@ad.dyntracker.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@vodafonegroup.122.2o7[1].txt [ Cookie:stefan@vodafonegroup.122.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.strassenstrich-parkplatzsex[2].txt [ Cookie:stefan@www.strassenstrich-parkplatzsex.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@pointroll[2].txt [ Cookie:stefan@pointroll.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adcentriconline[1].txt [ Cookie:stefan@adcentriconline.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@toplist[3].txt [ Cookie:stefan@toplist.eu/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@dot.banner[1].txt [ Cookie:stefan@dot.banner.cz/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@liveperson[3].txt [ Cookie:stefan@liveperson.net/hc/15712222 ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@yieldmanager[2].txt [ Cookie:stefan@yieldmanager.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ad.dyntracker[2].txt [ Cookie:stefan@ad.dyntracker.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@komtrack[4].txt [ Cookie:stefan@komtrack.com/tr ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@komtrack[3].txt [ Cookie:stefan@komtrack.com/tr/104150 ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@tribalfusion[1].txt [ Cookie:stefan@tribalfusion.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@rts.pgmediaserve[1].txt [ Cookie:stefan@rts.pgmediaserve.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@porn.drei[2].txt [ Cookie:stefan@porn.drei.to/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@thomascookag.122.2o7[1].txt [ Cookie:stefan@thomascookag.122.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@de.partypoker[1].txt [ Cookie:stefan@de.partypoker.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@deutschepostag.112.2o7[1].txt [ Cookie:stefan@deutschepostag.112.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@stat.pinkclusive[1].txt [ Cookie:stefan@stat.pinkclusive.de/piwik/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@track.webgains[2].txt [ Cookie:stefan@track.webgains.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@discountferien[1].txt [ Cookie:stefan@discountferien.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@tracking.lengow[2].txt [ Cookie:stefan@tracking.lengow.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@e-2dj6wbkocgajglo.stats.esomniture[2].txt [ Cookie:stefan@e-2dj6wbkocgajglo.stats.esomniture.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@a.revenuemax[1].txt [ Cookie:stefan@a.revenuemax.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\M7HE8L3A.txt [ Cookie:stefan@googleads.g.doubleclick.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.youporn[1].txt [ Cookie:stefan@www.youporn.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.googleadservices[2].txt [ Cookie:stefan@www.googleadservices.com/pagead/conversion/1010438819/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ad1.dyntracker[1].txt [ Cookie:stefan@ad1.dyntracker.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@de.sitestat[4].txt [ Cookie:stefan@de.sitestat.com/is24/is24/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.googleadservices[1].txt [ Cookie:stefan@www.googleadservices.com/pagead/conversion/1070462916/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@fr.sitestat[4].txt [ Cookie:stefan@fr.sitestat.com/europcar/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ads.footballmedia[2].txt [ Cookie:stefan@ads.footballmedia.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@tunefinder[1].txt [ Cookie:stefan@tunefinder.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@rionordgmbh.122.2o7[1].txt [ Cookie:stefan@rionordgmbh.122.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adjuggler[1].txt [ Cookie:stefan@adjuggler.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@myroitracking[1].txt [ Cookie:stefan@myroitracking.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adserver.webmasterbond[2].txt [ Cookie:stefan@adserver.webmasterbond.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@youporn-deutsch[1].txt [ Cookie:stefan@youporn-deutsch.info/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@burstnet[1].txt [ Cookie:stefan@burstnet.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@msnportal.112.2o7[1].txt [ Cookie:stefan@msnportal.112.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@casalemedia[1].txt [ Cookie:stefan@casalemedia.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@fr.sitestat[1].txt [ Cookie:stefan@fr.sitestat.com/eurosport/yahoode/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.googleadservices[3].txt [ Cookie:stefan@www.googleadservices.com/pagead/conversion/1038400811/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@moviepilot[1].txt [ Cookie:stefan@moviepilot.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@weihnachtsmarkt-finder[1].txt [ Cookie:stefan@weihnachtsmarkt-finder.de/admin/phpmv/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@de.sitestat[2].txt [ Cookie:stefan@de.sitestat.com/tnm/reisen/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@xm.xtendmedia[1].txt [ Cookie:stefan@xm.xtendmedia.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@de.sitestat[6].txt [ Cookie:stefan@de.sitestat.com/sport1/sport1-de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ads2.zeusclicks[1].txt [ Cookie:stefan@ads2.zeusclicks.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adserver.anschlusstor[1].txt [ Cookie:stefan@adserver.anschlusstor.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@weboramapublishertrackinguk.solution.weborama[2].txt [ Cookie:stefan@weboramapublishertrackinguk.solution.weborama.fr/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@traffic.brokerbabe[1].txt [ Cookie:stefan@traffic.brokerbabe.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.pornoblog[1].txt [ Cookie:stefan@www.pornoblog.at/mobile/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@sexbook18[2].txt [ Cookie:stefan@sexbook18.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@aild.porntvx[2].txt [ Cookie:stefan@aild.porntvx.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adserver2.exgfnetwork[1].txt [ Cookie:stefan@adserver2.exgfnetwork.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adserver.w3anythink[2].txt [ Cookie:stefan@adserver.w3anythink.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.googleadservices[8].txt [ Cookie:stefan@www.googleadservices.com/pagead/conversion/984036551/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.googleadservices[4].txt [ Cookie:stefan@www.googleadservices.com/pagead/conversion/1037073801/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@track.yellostrom[1].txt [ Cookie:stefan@track.yellostrom.de/792742425687471,219869629063635/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.sex[1].txt [ Cookie:stefan@www.sex.cz/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adserver[1].txt [ Cookie:stefan@adserver.gs/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@ads.zeusclicks[1].txt [ Cookie:stefan@ads.zeusclicks.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@mmotraffic[2].txt [ Cookie:stefan@mmotraffic.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.googleadservices[7].txt [ Cookie:stefan@www.googleadservices.com/pagead/conversion/1038152225/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.leserservice-tracking[1].txt [ Cookie:stefan@www.leserservice-tracking.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@members.fuckforfreetonight[1].txt [ Cookie:stefan@members.fuckforfreetonight.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@eyewonder[2].txt [ Cookie:stefan@eyewonder.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@hightraffic.hugoboss[1].txt [ Cookie:stefan@hightraffic.hugoboss.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@media.campartner[2].txt [ Cookie:stefan@media.campartner.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.dafuckbook[1].txt [ Cookie:stefan@www.dafuckbook.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.caughtoffside[1].txt [ Cookie:stefan@www.caughtoffside.com/wp-content/plugins/pixelstats/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\Y12IZ3HF.txt [ Cookie:stefan@eset.122.2o7.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.jds-rap-blog[1].txt [ Cookie:stefan@www.jds-rap-blog.de/2011/10/04/sido-bushido-23-tracklist-cover-video-zu-so-mach-ich-es/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@azjmp[1].txt [ Cookie:stefan@azjmp.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@banners.victor[1].txt [ Cookie:stefan@banners.victor.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adserv.quality-channel[2].txt [ Cookie:stefan@adserv.quality-channel.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@adserver.adtechus[1].txt [ Cookie:stefan@adserver.adtechus.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@bookofsex[2].txt [ Cookie:stefan@bookofsex.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@e-2dj6wfk4ulcziap.stats.esomniture[2].txt [ Cookie:stefan@e-2dj6wfk4ulcziap.stats.esomniture.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@insightexpressai[2].txt [ Cookie:stefan@insightexpressai.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@banner.holidaycheck[2].txt [ Cookie:stefan@banner.holidaycheck.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.googleadservices[11].txt [ Cookie:stefan@www.googleadservices.com/pagead/conversion/981565988/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@frauen-ficken.porno-galerie[2].txt [ Cookie:stefan@frauen-ficken.porno-galerie.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@fr.sitestat[2].txt [ Cookie:stefan@fr.sitestat.com/eurosport/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.belstat[1].txt [ Cookie:stefan@www.belstat.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@mediamarkt[1].txt [ Cookie:stefan@mediamarkt.de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@countomat[1].txt [ Cookie:stefan@countomat.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.googleadservices[5].txt [ Cookie:stefan@www.googleadservices.com/pagead/conversion/988738619/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@mediabrandsww[1].txt [ Cookie:stefan@mediabrandsww.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@counters.gigya[1].txt [ Cookie:stefan@counters.gigya.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@tradetracker[1].txt [ Cookie:stefan@tradetracker.net/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@www.googleadservices[9].txt [ Cookie:stefan@www.googleadservices.com/pagead/conversion/1064276997/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@fr.sitestat[3].txt [ Cookie:stefan@fr.sitestat.com/europcar/europcar-de/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\stefan@m1.webstats.motigo[1].txt [ Cookie:stefan@m1.webstats.motigo.com/ ]
C:\USERS\STEFAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\BNFB3FRK.txt [ Cookie:stefan@clkads.com/adServe/banners ]
C:\USERS\STEFAN\Cookies\stefan@smartadserver[2].txt [ Cookie:stefan@smartadserver.com/ ]
C:\USERS\STEFAN\Cookies\stefan@youporn[2].txt [ Cookie:stefan@youporn.com/ ]
C:\USERS\STEFAN\Cookies\3XT6ASNV.txt [ Cookie:stefan@zanox.com/ ]
C:\USERS\STEFAN\Cookies\SNA58GV1.txt [ Cookie:stefan@doubleclick.net/ ]
C:\USERS\STEFAN\Cookies\B95IV1FJ.txt [ Cookie:stefan@zanox-affiliate.de/ ]
C:\USERS\STEFAN\Cookies\CMNMVHST.txt [ Cookie:stefan@serving-sys.com/ ]
C:\USERS\STEFAN\Cookies\ZMLRMUKZ.txt [ Cookie:stefan@apmebf.com/ ]
C:\USERS\STEFAN\Cookies\QHQ1YKKU.txt [ Cookie:stefan@eset.122.2o7.net/ ]
C:\USERS\STEFAN\Cookies\ZW13Q3FH.txt [ Cookie:stefan@ad.zanox.com/ ]
C:\USERS\STEFAN\Cookies\stefan@atdmt[2].txt [ Cookie:stefan@atdmt.com/ ]
C:\USERS\STEFAN\Cookies\H5L0JWWN.txt [ Cookie:stefan@mediaplex.com/ ]
C:\USERS\STEFAN\Cookies\575MQ6NE.txt [ Cookie:stefan@advertising.com/ ]
C:\USERS\STEFAN\Cookies\stefan@partypoker[2].txt [ Cookie:stefan@partypoker.com/ ]
C:\USERS\STEFAN\Cookies\AZJ82OGO.txt [ Cookie:stefan@imrworldwide.com/cgi-bin ]
C:\USERS\STEFAN\Cookies\C4S3GNIM.txt [ Cookie:stefan@clkads.com/adServe/banners ]

Die Cookies können alle weg

Malwarebytes' Anti-Malware 1.51.2.1300
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Datenbank Version: 8084

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19154

04.11.2011 23:03:34
mbam-log-2011-11-04 (23-03-34).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 386463
Laufzeit: 2 Stunde(n), 9 Minute(n), 13 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)



Was meinst du mit die Cookies können alle weg? Was soll ich machen?

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
esets_scanner_update returned -1 esets_gle=53251
# version=7
# iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=f1ef4af5922af74b9f592b6020885ea5
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-11-03 08:35:27
# local_time=2011-11-03 09:35:27 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1797 16775165 100 100 473304 95857714 13939 0
# compatibility_mode=5892 16776573 100 100 33315 157875135 0 0
# compatibility_mode=8192 67108863 100 0 16197 16197 0 0
# scanned=312622
# found=9
# cleaned=0
# scan_time=10119
C:\Users\Stefan\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\5cc140f5-7da05fe2 Java/TrojanDownloader.OpenStream.NBV trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Stefan\Desktop\SoftonicDownloader44573.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I
C:\Windows.old\Documents and Settings\Stefan\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\5cc140f5-7da05fe2 Java/TrojanDownloader.OpenStream.NBV trojan (unable to clean) 00000000000000000000000000000000 I
C:\Windows.old\Documents and Settings\Stefan\Desktop\SoftonicDownloader44573.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I
C:\Windows.old\Program Files\Search Settings\SearchSettings.exe Win32/Adware.Toolbar.Dealio application (unable to clean) 00000000000000000000000000000000 I
C:\Windows.old\Users\stefan\Desktop\Setup674_FreeFlvConverter.exe Win32/Adware.Toolbar.Dealio application (unable to clean) 00000000000000000000000000000000 I
C:\Windows.old\Users\stefan\Desktop\Meine tracks\Music 2009\06 2009\Music Instructor - Get Freaky.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan (unable to clean) 00000000000000000000000000000000 I
C:\Windows.old\Users\stefan\Desktop\Meine tracks\Pussycat Dolls- Doll Domination\09 Magic.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan (unable to clean) 00000000000000000000000000000000 I
D:\TOOLS\Nero Burning ROM 8 Update\Nero-8.2.8.0_deu_update.exe Win32/Toolbar.AskSBar application (unable to clean) 00000000000000000000000000000000 I
# version=7
# iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=f1ef4af5922af74b9f592b6020885ea5
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-11-04 11:10:42
# local_time=2011-11-05 12:10:42 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1797 16775165 100 100 26499 95951509 21342 0
# compatibility_mode=5892 16776573 100 100 25311 157968930 0 0
# compatibility_mode=8192 67108863 100 0 109992 109992 0 0
# scanned=295825
# found=8
# cleaned=0
# scan_time=12039
C:\System Volume Information\SystemRestore\FRStaging\Users\Stefan\Desktop\SoftonicDownloader44573.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I
C:\Users\Stefan\Desktop\SoftonicDownloader44573.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I
C:\Windows.old\Documents and Settings\Stefan\Desktop\SoftonicDownloader44573.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I
C:\Windows.old\Program Files\Search Settings\SearchSettings.exe Win32/Adware.Toolbar.Dealio application (unable to clean) 00000000000000000000000000000000 I
C:\Windows.old\Users\stefan\Desktop\Setup674_FreeFlvConverter.exe Win32/Adware.Toolbar.Dealio application (unable to clean) 00000000000000000000000000000000 I
C:\Windows.old\Users\stefan\Desktop\Meine tracks\Music 2009\06 2009\Music Instructor - Get Freaky.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan (unable to clean) 00000000000000000000000000000000 I
C:\Windows.old\Users\stefan\Desktop\Meine tracks\Pussycat Dolls- Doll Domination\09 Magic.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan (unable to clean) 00000000000000000000000000000000 I
D:\TOOLS\Nero Burning ROM 8 Update\Nero-8.2.8.0_deu_update.exe Win32/Toolbar.AskSBar application (unable to clean) 00000000000000000000000000000000 I

Na was hat SUPERAntiSpyware denn gefunden? Das waren Cookies. Die können weg.
Die Funde von ESET kannst du mal selbst durchgehen, ich denke da ist viel müll bei. Vieles bemängelt ESET weil zB Setups Toolbars enthalten.

Rechner ansonsten wieder soweit im Lot?

Zitat von cosinus

Na was hat SUPERAntiSpyware denn gefunden? Das waren Cookies. Die können weg.
Die Funde von ESET kannst du mal selbst durchgehen, ich denke da ist viel müll bei. Vieles bemängelt ESET weil zB Setups Toolbars enthalten.

Rechner ansonsten wieder soweit im Lot?

Wo finde ich die Funde von SASW?
Ja Rechner ist wieder in Ordnung.Heißt das ich muss ihn nicht formatieren oder sowas?Der Virus ist weg oder?
Vielen Dank LG

Was soll diese Frage jetzt, du hast das Log von SUPERAntiSpyware doch schon am 4.11. gepostet!


Dann wären wir durch!

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. CF kann über Start, Ausführen mit combofix /uninstall entfernt werden. Melde dich falls es da Fehlermeldungen zu gibt.
Malwarebytes zu behalten ist kein Fehler. Kannst ja 1x im Monat damit scannen, aber immer vorher ans Update denken.

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers, hier der direkte Downloadlink:

Mozilla und andere Browser => http://filepony.de/?q=Flash+Player
Internet Explorer => http://fpdownload.adobe.com/get/flas..._player_ax.exe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.