![]() |
| |||||||
Log-Analyse und Auswertung: Trojan:Win32/Bublik.b vom MSEssentials entfernt. Ist das System jetzt sicher?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
| | #5 |
| | Trojan:Win32/Bublik.b vom MSEssentials entfernt. Ist das System jetzt sicher? Hallo kira, konnte endlich wieder an den Rechner. Habe alle Anweisungen befolgt. SUPERAntiSpyware fand viel Adware und einen Trojaner. Eset fand dagegen nichts. Der Computer machte bislang keine Probleme und MSEssentials meldete nichts. Es kamen aber vier dieser DHL Delivery Notification Message -Emails, die meine Bekannte sofort gelöscht hatte. Gruß Hux Zu 2: Hijackthis HiJackthis Logfile: Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 15:27:08, on 17.02.2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v8.00 (8.00.7601.17514) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST') O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000 O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} (JordanUploader Class) - hxxp://photoservice.fujicolor.eu/ips-opdata/objects/jordan.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = X O17 - HKLM\Software\..\Telephony: DomainName = X O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = X O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = X O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-Dienst (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe -- End of file - 6545 bytes Zu 3: OTL Code:
ATTFilter All processes killed
========== OTL ==========
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
File C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll not found.
C:\Programme\Mozilla Firefox\searchplugins\bing.xml moved successfully.
C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: administrator
->Temp folder emptied: 78283576 bytes
->Temporary Internet Files folder emptied: 61808963 bytes
User: administrator.X
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Administrator.Jutta-PC
->Temp folder emptied: 317625 bytes
->Temporary Internet Files folder emptied: 2288769 bytes
->FireFox cache emptied: 54774237 bytes
->Flash cache emptied: 562 bytes
User: All Users
User: X
->Temp folder emptied: 50466 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: X
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: X
->Temp folder emptied: 62483199 bytes
->Temporary Internet Files folder emptied: 356944357 bytes
->FireFox cache emptied: 14753771 bytes
->Apple Safari cache emptied: 15095808 bytes
->Flash cache emptied: 19212 bytes
User: X
->Temp folder emptied: 9378437 bytes
->Temporary Internet Files folder emptied: 122886741 bytes
->Flash cache emptied: 4120 bytes
User: X
->Temp folder emptied: 5386806 bytes
->Temporary Internet Files folder emptied: 138284837 bytes
->Flash cache emptied: 2991 bytes
User: X
->Temp folder emptied: 334189 bytes
->Temporary Internet Files folder emptied: 768023139 bytes
->FireFox cache emptied: 48956300 bytes
->Flash cache emptied: 10565 bytes
User: Public
User: X
->Temp folder emptied: 51108 bytes
->Temporary Internet Files folder emptied: 33170 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 1548800 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 6122180 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 1.667,00 mb
OTL by OldTimer - Version 3.2.31.0 log created on 02172012_153516
Files\Folders moved on Reboot...
File\Folder C:\Users\X\AppData\Local\Temp\OICE_7466207B-18D7-4BD2-9BE6-7B5C1916D0F8.0\F93D0E69. not found!
File\Folder C:\Users\X\AppData\Local\Temp\OICE_0953E54E-B054-4412-9B13-108BD1B6EBC1.0\99AA7B88. not found!
Registry entries deleted on Reboot...
Code:
ATTFilter SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com
Generated 02/17/2012 at 04:13 PM
Application Version : 5.0.1144
Core Rules Database Version : 8257
Trace Rules Database Version: 6069
Scan type : Complete Scan
Total Scan Time : 00:19:26
Operating System Information
Windows 7 Professional 32-bit, Service Pack 1 (Build 6.01.7601)
UAC Off - Administrator
Memory items scanned : 615
Memory threats detected : 0
Registry items scanned : 34208
Registry threats detected : 0
File items scanned : 31115
File threats detected : 345
Adware.Tracking Cookie
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\TKYSNWBN.txt [ Cookie:zimmer1@atdmt.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\B5CLZAFF.txt [ Cookie:zimmer1@c.atdmt.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@tracking.quisma[2].txt [ Cookie:X@tracking.quisma.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@clickfuse[1].txt [ Cookie:zimmer1@clickfuse.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@de.sitestat[1].txt [ Cookie:zimmer1@de.sitestat.com/ndr/ts/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@invitemedia[1].txt [ Cookie:zimmer1@invitemedia.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\WKSOS6MG.txt [ Cookie:zimmer1@zanox.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@sales.liveperson[2].txt [ Cookie:zimmer1@sales.liveperson.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@ads.mikinimedia[1].txt [ Cookie:zimmer1@ads.mikinimedia.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\2SCMCQ2U.txt [ Cookie:zimmer1@unitymedia.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\D2D2534R.txt [ Cookie:zimmer1@ad4.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@ru4[1].txt [ Cookie:zimmer1@ru4.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@specificclick[1].txt [ Cookie:zimmer1@specificclick.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\90NB1H2Y.txt [ Cookie:zimmer1@revsci.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\Q58ATXIK.txt [ Cookie:zimmer1@smartadserver.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adx.chip[2].txt [ Cookie:X@adx.chip.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\O9AADLKB.txt [ Cookie:zimmer1@ww251.smartadserver.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\362E8ABC.txt [ Cookie:zimmer1@mediaplex.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@de.sitestat[2].txt [ Cookie:zimmer1@de.sitestat.com/ndr/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adfarm1.adition[2].txt [ Cookie:X@adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@doubleclick[1].txt [ Cookie:X@doubleclick.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\CE5U90QM.txt [ Cookie:zimmer1@ad3.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@nhl.112.2o7[1].txt [ Cookie:zimmer1@nhl.112.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@nl.sitestat[1].txt [ Cookie:zimmer1@nl.sitestat.com/hallmark/hallmarknl/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@xiti[1].txt [ Cookie:zimmer1@xiti.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@adtech[2].txt [ Cookie:zimmer1@adtech.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@fl01.ct2.comclick[2].txt [ Cookie:zimmer1@fl01.ct2.comclick.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@track.effiliation[1].txt [ Cookie:zimmer1@track.effiliation.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@imrworldwide[2].txt [ Cookie:zimmer1@imrworldwide.com/cgi-bin ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@yadro[2].txt [ Cookie:zimmer1@yadro.ru/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\MP8T755A.txt [ Cookie:zimmer1@doubleclick.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@adserver2.clipkit[2].txt [ Cookie:zimmer1@adserver2.clipkit.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\NQ6XFK54.txt [ Cookie:zimmer1@adserver.yopi.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\E3BQILGJ.txt [ Cookie:zimmer1@statcounter.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\59E8YF12.txt [ Cookie:zimmer1@ad2.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\Z56VRJ26.txt [ Cookie:zimmer1@eyewonder.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\8MASMYCQ.txt [ Cookie:zimmer1@tracking.klicktel.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@apmebf[1].txt [ Cookie:X@apmebf.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@mediaplex[1].txt [ Cookie:X@mediaplex.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@conrad.122.2o7[1].txt [ Cookie:zimmer1@conrad.122.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@atdmt[1].txt [ Cookie:zimmer1@atdmt.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@www.active-tracking[1].txt [ Cookie:zimmer1@www.active-tracking.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@eas4.emediate[2].txt [ Cookie:zimmer1@eas4.emediate.eu/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\81FRFK14.txt [ Cookie:zimmer1@apmebf.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@collective-media[1].txt [ Cookie:zimmer1@collective-media.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\RG1E1SUV.txt [ Cookie:zimmer1@ad1.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZSREOIOY.txt [ Cookie:zimmer1@ad.zanox.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@unitymedia.122.2o7[1].txt [ Cookie:zimmer1@unitymedia.122.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@liveperson[3].txt [ Cookie:zimmer1@liveperson.net/hc/72069871 ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad2.adfarm1.adition[1].txt [ Cookie:X@ad2.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\ALT686WF.txt [ Cookie:zimmer1@ad.yieldmanager.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\LH0HXDVK.txt [ Cookie:zimmer1@adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@ads.quartermedia[1].txt [ Cookie:zimmer1@ads.quartermedia.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@ad.adnet[2].txt [ Cookie:zimmer1@ad.adnet.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@imrworldwide[2].txt [ Cookie:X@imrworldwide.com/cgi-bin ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\M0PLENG0.txt [ Cookie:zimmer1@tradedoubler.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\94TEJP5P.txt [ Cookie:zimmer1@webmasterplan.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\6QVJG3TX.txt [ Cookie:zimmer1@track.effiliation.com/servlet/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\CDGU1CAE.txt [ Cookie:zimmer1@traffictrack.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\TSE3R8RW.txt [ Cookie:zimmer1@serving-sys.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\3SEOXTDL.txt [ Cookie:zimmer1@eas.apm.emediate.eu/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\1R4QKV9W.txt [ Cookie:zimmer1@ad.dyntracker.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\T9OGQ2CJ.txt [ Cookie:zimmer1@de.sitestat.com/fah/fah/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@media.ohost[2].txt [ Cookie:zimmer1@media.ohost.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@overture[2].txt [ Cookie:zimmer1@overture.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\A5CSS61A.txt [ Cookie:zimmer1@ads20.wwe-media.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\VO2Z3P3X.txt [ Cookie:zimmer1@pro-market.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\GRBR116C.txt [ Cookie:zimmer1@www.googleadservices.com/pagead/conversion/1071438628/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\YKWR5JJF.txt [ Cookie:zimmer1@amazon-adsystem.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@content.yieldmanager[3].txt [ Cookie:zimmer1@content.yieldmanager.com/ak/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@zbox.zanox[1].txt [ Cookie:zimmer1@zbox.zanox.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\AQFC0T3P.txt [ Cookie:zimmer1@bs.serving-sys.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\JDCNWLBS.txt [ Cookie:zimmer1@adx.chip.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@fidelity.rotator.hadj7.adjuggler[1].txt [ Cookie:zimmer1@fidelity.rotator.hadj7.adjuggler.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\BT6AUJ4M.txt [ Cookie:zimmer1@media6degrees.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@casalemedia[2].txt [ Cookie:zimmer1@casalemedia.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\KNT7QBFH.txt [ Cookie:zimmer1@adform.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@burstnet[2].txt [ Cookie:zimmer1@burstnet.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\2LO8O7JO.txt [ Cookie:zimmer1@deutschepostag.112.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\XQKG3CDC.txt [ Cookie:zimmer1@www.googleadservices.com/pagead/conversion/1071902887/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@www.burstnet[1].txt [ Cookie:zimmer1@www.burstnet.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\2N5386TR.txt [ Cookie:zimmer1@2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\1QJFJUVF.txt [ Cookie:zimmer1@microsoftsto.112.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@tribalfusion[1].txt [ Cookie:zimmer1@tribalfusion.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\1WWZ1XTJ.txt [ Cookie:zimmer1@legolas-media.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@www.usenext[2].txt [ Cookie:zimmer1@www.usenext.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\zimmer1@clickandbuy[1].txt [ Cookie:zimmer1@clickandbuy.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\T10TPBBP.txt [ Cookie:zimmer1@zanox-affiliate.de/ ]
C:\USERS\X\Cookies\TKYSNWBN.txt [ Cookie:zimmer1@atdmt.com/ ]
C:\USERS\X\Cookies\B5CLZAFF.txt [ Cookie:zimmer1@c.atdmt.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@tracking.quisma[2].txt [ Cookie:X@tracking.quisma.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@statse.webtrendslive[1].txt [ Cookie:X@statse.webtrendslive.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@user.lucidmedia[1].txt [ Cookie:X@user.lucidmedia.com/clicksense/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@eas4.emediate[1].txt [ Cookie:X@eas4.emediate.eu/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@zbox.zanox[1].txt [ Cookie:X@zbox.zanox.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@invitemedia[2].txt [ Cookie:X@invitemedia.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@vodafonegroup.122.2o7[1].txt [ Cookie:X@vodafonegroup.122.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@moviepilot[1].txt [ Cookie:X@moviepilot.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@stat.aldi[2].txt [ Cookie:X@stat.aldi.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@guj.122.2o7[1].txt [ Cookie:X@guj.122.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@track.adform[1].txt [ Cookie:X@track.adform.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@tracking.hannoversche[1].txt [ Cookie:X@tracking.hannoversche.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adfarm1.adition[1].txt [ Cookie:X@adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad4.adfarm1.adition[2].txt [ Cookie:X@ad4.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@doubleclick[2].txt [ Cookie:X@doubleclick.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ru4[2].txt [ Cookie:X@ru4.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad1.adfarm1.adition[2].txt [ Cookie:X@ad1.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@tracking.mlsat02[1].txt [ Cookie:X@tracking.mlsat02.de/tmobile/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@www.googleadservices[2].txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1018622939/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@www.googleadservices[1].txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1072574438/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@traffictrack[2].txt [ Cookie:X@traffictrack.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad.yieldmanager[2].txt [ Cookie:X@ad.yieldmanager.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adserver.kino-zeit[2].txt [ Cookie:X@adserver.kino-zeit.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@tradedoubler[1].txt [ Cookie:X@tradedoubler.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@bs.serving-sys[1].txt [ Cookie:X@bs.serving-sys.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@test.wiredminds[1].txt [ Cookie:X@test.wiredminds.de/track/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@unitymedia[2].txt [ Cookie:X@unitymedia.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@smartadserver[1].txt [ Cookie:X@smartadserver.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@content.yieldmanager[3].txt [ Cookie:X@content.yieldmanager.com/ak/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@track.effiliation[3].txt [ Cookie:X@track.effiliation.com/servlet/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@apmebf[2].txt [ Cookie:X@apmebf.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@mediaplex[1].txt [ Cookie:X@mediaplex.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ww251.smartadserver[2].txt [ Cookie:X@ww251.smartadserver.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@xiti[1].txt [ Cookie:X@xiti.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@specificclick[2].txt [ Cookie:X@specificclick.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@stats.sozialwahl[2].txt [ Cookie:X@stats.sozialwahl.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad3.adfarm1.adition[1].txt [ Cookie:X@ad3.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad2.adfarm1.adition[2].txt [ Cookie:X@ad2.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@statcounter[1].txt [ Cookie:X@statcounter.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adform[2].txt [ Cookie:X@adform.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adtech[1].txt [ Cookie:X@adtech.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@clickaider[1].txt [ Cookie:X@clickaider.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@a.revenuemax[1].txt [ Cookie:X@a.revenuemax.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@zanox-affiliate[2].txt [ Cookie:X@zanox-affiliate.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad.adnet[3].txt [ Cookie:X@ad.adnet.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@serving-sys[1].txt [ Cookie:X@serving-sys.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@webmasterplan[1].txt [ Cookie:X@webmasterplan.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@de.sitestat[2].txt [ Cookie:X@de.sitestat.com/ndr/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@track.effiliation[1].txt [ Cookie:X@track.effiliation.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adviva[1].txt [ Cookie:X@adviva.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@stat.aldi[1].txt [ Cookie:X@stat.aldi.com/dcsfq2jxwixy5f1mioa8p9lnl_5x1d ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad.adnet[1].txt [ Cookie:X@ad.adnet.biz/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@2o7[2].txt [ Cookie:X@2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adbrite[1].txt [ Cookie:X@adbrite.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adserver1.mokono[1].txt [ Cookie:X@adserver1.mokono.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@imrworldwide[2].txt [ Cookie:X@imrworldwide.com/cgi-bin ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@casalemedia[1].txt [ Cookie:X@casalemedia.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@atdmt[1].txt [ Cookie:X@atdmt.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adviva[2].txt [ Cookie:X@adviva.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@www.googleadservices[5].txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1044936344/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@eas4.emediate[2].txt [ Cookie:X@eas4.emediate.eu/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@tracking.klicktel[2].txt [ Cookie:X@tracking.klicktel.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@studivz.adfarm1.adition[2].txt [ Cookie:X@studivz.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@www.etracker[1].txt [ Cookie:X@www.etracker.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@www.googleadservices[2].txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1030291149/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@traffictrack[2].txt [ Cookie:X@traffictrack.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@track.effiliation[3].txt [ Cookie:X@track.effiliation.com/servlet/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@www.googleadservices[4].txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1071318677/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad4.adfarm1.adition[2].txt [ Cookie:X@ad4.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad3.adfarm1.adition[2].txt [ Cookie:X@ad3.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adtech[2].txt [ Cookie:X@adtech.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@track.adform[1].txt [ Cookie:X@track.adform.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@eas.apm.emediate[1].txt [ Cookie:X@eas.apm.emediate.eu/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@tracking.hannoversche[1].txt [ Cookie:X@tracking.hannoversche.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ww251.smartadserver[2].txt [ Cookie:X@ww251.smartadserver.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@zanox[2].txt [ Cookie:X@zanox.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad.yieldmanager[2].txt [ Cookie:X@ad.yieldmanager.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@track.effiliation[1].txt [ Cookie:X@track.effiliation.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adform[2].txt [ Cookie:X@adform.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@collective-media[2].txt [ Cookie:X@collective-media.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@2o7[1].txt [ Cookie:X@2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@www.zanox-affiliate[1].txt [ Cookie:X@www.zanox-affiliate.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adfarm1.adition[1].txt [ Cookie:X@adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@www.googleadservices[1].txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1064075388/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@statcounter[1].txt [ Cookie:X@statcounter.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@tracking.quisma[1].txt [ Cookie:X@tracking.quisma.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@webmasterplan[2].txt [ Cookie:X@webmasterplan.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@e-2dj6wjliemc5aao.stats.esomniture[1].txt [ Cookie:X@e-2dj6wjliemc5aao.stats.esomniture.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@mediaplex[1].txt [ Cookie:X@mediaplex.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@im.banner.t-online[1].txt [ Cookie:X@im.banner.t-online.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad.zanox[2].txt [ Cookie:X@ad.zanox.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adbrite[1].txt [ Cookie:X@adbrite.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@smartadserver[1].txt [ Cookie:X@smartadserver.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ad.adserver01[2].txt [ Cookie:X@ad.adserver01.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\C8TMVHD4.txt [ Cookie:X@atdmt.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\7CGNTJ2E.txt [ Cookie:X@accounts.google.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@dc.tremormedia[1].txt [ Cookie:X@dc.tremormedia.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\M1ZCI4BL.txt [ Cookie:X@ad.adnet.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adserver[1].txt [ Cookie:X@adserver.gs/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\B9WASU5S.txt [ Cookie:X@adviva.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\3DAAQ77V.txt [ Cookie:X@atdmt.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\VIUKHISD.txt [ Cookie:X@tracking.klicktel.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@studivz.adfarm1.adition[2].txt [ Cookie:X@studivz.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\DQYCKCFG.txt [ Cookie:X@toplist.eu/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\AWYO4S5K.txt [ Cookie:X@banner.testberichte.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\SWWPTVHD.txt [ Cookie:X@traffictrack.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@nl.sitestat[1].txt [ Cookie:X@nl.sitestat.com/hallmark/hallmarknl/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\6GHNFEVN.txt [ Cookie:X@track.effiliation.com/servlet/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\MDP7AVP6.txt [ Cookie:X@ad4.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@advertising[2].txt [ Cookie:X@advertising.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\QP16USMG.txt [ Cookie:X@yadro.ru/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\XFFBUTKO.txt [ Cookie:X@adtech.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\KW4KBDQJ.txt [ Cookie:X@ad3.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\K5N6GLHZ.txt [ Cookie:X@track.adform.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@media.inspirationalfilms[2].txt [ Cookie:X@media.inspirationalfilms.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\QGH38PNU.txt [ Cookie:X@eas.apm.emediate.eu/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\QQX9O40Z.txt [ Cookie:X@fl01.ct2.comclick.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@atrack.allposters[1].txt [ Cookie:X@atrack.allposters.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\L3Y4BORK.txt [ Cookie:X@interclick.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\04V0P519.txt [ Cookie:X@zanox.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\ICRHG0QO.txt [ Cookie:X@ad.yieldmanager.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\JEPCAXZC.txt [ Cookie:X@track.effiliation.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\V96COX1P.txt [ Cookie:X@adform.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@s1.trafficmaxx[1].txt [ Cookie:X@s1.trafficmaxx.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\585ETCVR.txt [ Cookie:X@2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adxpose[1].txt [ Cookie:X@adxpose.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@nhl.112.2o7[1].txt [ Cookie:X@nhl.112.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\O3549SJ6.txt [ Cookie:X@adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\P2TCZ90P.txt [ Cookie:X@zbox.zanox.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\4AP90D4T.txt [ Cookie:X@statcounter.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\3A29XKTU.txt [ Cookie:X@tracking.quisma.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\KKT3JJ7U.txt [ Cookie:X@webmasterplan.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\QLMYWSXV.txt [ Cookie:X@ad1.adfarm1.adition.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\VCM2F9VE.txt [ Cookie:X@mediaplex.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\B3ZKOEZ8.txt [ Cookie:X@im.banner.t-online.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\V3AFDVPJ.txt [ Cookie:X@discounto.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\JJNRO7AI.txt [ Cookie:X@ad.zanox.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@de.sitestat[2].txt [ Cookie:X@de.sitestat.com/ndr/ts/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@zieltrack[1].txt [ Cookie:X@zieltrack.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@adbrite[1].txt [ Cookie:X@adbrite.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@a.revenuemax[1].txt [ Cookie:X@a.revenuemax.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\LJW21X07.txt [ Cookie:X@tribalfusion.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\S6VC06PY.txt [ Cookie:X@microsoftwlsearchcrm.112.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\GD49A28B.txt [ Cookie:X@fastclick.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@guj.122.2o7[1].txt [ Cookie:X@guj.122.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\SRB2BBOL.txt [ Cookie:X@server.adform.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@ads20.wwe-media[1].txt [ Cookie:X@ads20.wwe-media.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\UPES7BOE.txt [ Cookie:X@imrworldwide.com/cgi-bin ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\PODMOPQ8.txt [ Cookie:X@de.sitestat.com/sueddeutsche/sueddeutsche/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@clickandbuy[1].txt [ Cookie:X@clickandbuy.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZS7VJE1E.txt [ Cookie:X@www.etracker.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\ITHEUXSN.txt [ Cookie:X@toplist.cz/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\GV1AE3NH.txt [ Cookie:X@dyntracker.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@tracking.hrs[1].txt [ Cookie:X@tracking.hrs.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\UNY1IRMO.txt [ Cookie:X@www.google.com/accounts ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\VHF9J6QJ.txt [ Cookie:X@partners.webmasterplan.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@de.sitestat[3].txt [ Cookie:X@de.sitestat.com/ndr/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\X@de.sitestat[1].txt [ Cookie:X@de.sitestat.com/fah/fah/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\OTHEI0KZ.txt [ Cookie:X@secmedia.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\95XO8N26.txt [ Cookie:X@ww251.smartadserver.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\IB93D9DW.txt [ Cookie:X@kantarmedia.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\OS162J3I.txt [ Cookie:X@partnersearchmetrics.sbx1.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\Z6B8K7H4.txt [ Cookie:X@wissende.122.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\T49E75R6.txt [ Cookie:X@www.zanox-affiliate.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\TSI00WLN.txt [ Cookie:X@weborama.fr/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\E783UZYT.txt [ Cookie:X@ad1.emediate.dk/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\U8FQQ139.txt [ Cookie:X@www.hxtrack.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\1UHD13M3.txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1072620100/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\N5PGDP0B.txt [ Cookie:X@microsoftoffice.112.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZNT50IAC.txt [ Cookie:X@www.devk.de/ad/haftpflichtversicherung.jsp ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\4W3O0ZA1.txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1045904156/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\JXLZIRE7.txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1069628296/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\C77M14CI.txt [ Cookie:X@track.webtrekk.de/565556556123999/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\TF5QTG05.txt [ Cookie:X@amazon-adsystem.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\SK07PH7S.txt [ Cookie:X@aimfar.solution.weborama.fr/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\KC4YG176.txt [ Cookie:X@smartadserver.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\5UFQMIVH.txt [ Cookie:X@urbia.wwe-media.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\UT3WDZRM.txt [ Cookie:X@www.leserservice-tracking.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\N2PXVUYR.txt [ Cookie:X@germanwings.112.2o7.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\L2STK7HA.txt [ Cookie:X@akamai.interclickproxy.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\HCZNA4F9.txt [ Cookie:X@eas4.emediate.eu/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\CJ2UVQ4B.txt [ Cookie:X@media6degrees.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\R7M62EPG.txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1015028999/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\XV8N1ON7.txt [ Cookie:X@a1.interclick.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\6WLAVVXS.txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1041372293/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\NPBZI3B0.txt [ Cookie:X@adx.chip.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\0PL19FF9.txt [ Cookie:X@kursnet-finden.arbeitsagentur.de/kurs/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\KA67L6Z3.txt [ Cookie:X@accounts.google.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\RBSJRNOM.txt [ Cookie:X@hightraffic.hugoboss.com/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\0PBWBSY7.txt [ Cookie:X@counter.devk.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\VNP6SVHS.txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1067646656/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\44YD86GN.txt [ Cookie:X@discounter-in-deutschland.de/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\BMROG7T3.txt [ Cookie:X@mm.chitika.net/ ]
C:\USERS\X\AppData\Roaming\Microsoft\Windows\Cookies\Low\3DPDBS9T.txt [ Cookie:X@www.googleadservices.com/pagead/conversion/1014173760/ ]
C:\USERS\X\Cookies\C8TMVHD4.txt [ Cookie:X@atdmt.com/ ]
C:\USERS\X\Cookies\7CGNTJ2E.txt [ Cookie:X@accounts.google.com/ ]
.doubleclick.net [ C:\USERS\ADMINISTRATOR.X-PC\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\US0Z0L8W.DEFAULT\COOKIES.SQLITE ]
.adx.chip.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\8KP3459I.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\8KP3459I.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\8KP3459I.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\8KP3459I.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\8KP3459I.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\8KP3459I.DEFAULT\COOKIES.SQLITE ]
C:\USERS\X\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\X@IM.BANNER.T-ONLINE[1].TXT [ /IM.BANNER.T-ONLINE ]
C:\USERS\X\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\X@SPECIFICCLICK[1].TXT [ /SPECIFICCLICK ]
.amazon-adsystem.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.amazon-adsystem.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
ad2.adfarm1.adition.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.zanox.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
ad1.adfarm1.adition.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
ad4.adfarm1.adition.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.adxvalue.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\X\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SLIDLFWT.DEFAULT\COOKIES.SQLITE ]
Trojan.Agent/Gen-SoftonicDownloader
C:\USERS\X\DOWNLOADS\SOFTONICDOWNLOADER_FUER_CDBURNERXP-PRO.EXE
Code:
ATTFilter
ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=8.00.7600.16385 (win7_rtm.090713-1255)
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=b0704c31591d4e4687870f5aebd75cd4
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-02-17 04:18:14
# local_time=2012-02-17 05:18:14 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=512 16777215 100 0 1295319 1295319 0 0
# compatibility_mode=5893 16776574 100 94 9868600 81123908 0 0
# compatibility_mode=8192 67108863 100 0 3811 3811 0 0
# scanned=99305
# found=0
# cleaned=0
# scan_time=2776
|
| Themen zu Trojan:Win32/Bublik.b vom MSEssentials entfernt. Ist das System jetzt sicher? |
| administrator, aktion, bublik.b, computer, dateien, dhl-delivery-email, email, entdeck, entdeckt, entfernen, erkannt, file, folge, folgende, frage, klicke, klicken, melden, microsoft, notification, programm, programme, security, software, system, trojan, trojan:win32/bublik.b, trojaner, win, win32/bublik.b, zip-datei |