Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Internet extrem langsam - an anderen Endgeräten problemlos -

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 31.07.2012, 09:48   #16
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Mach bitte ein neues OTL-Log. Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:
ATTFilter
 hier steht das Log
         
CustomScan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop. Falls schon vorhanden, bitte die ältere vorhandene Datei durch die neu heruntergeladene Datei ersetzen, damit du auch wirklich mit einer aktuellen Version von OTL arbeitest.
  • Starte bitte die OTL.exe.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Setze oben mittig den Haken bei Scanne alle Benutzer
  • Kopiere nun den kompletten Inhalt aus der untenstehenden Codebox in die Textbox von OTL - wenn OTL auf deutsch ist wird sie mit beschriftet
Code:
ATTFilter
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
wininit.exe
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT
         
  • Schliesse bitte nun alle Programme. (Wichtig)
  • Klicke nun bitte auf den Quick Scan Button.
  • Klick auf .
  • Kopiere nun den Inhalt aus OTL.txt hier in Deinen Thread
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 02.08.2012, 11:44   #17
Hypothetix
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Hallo und Guten Morgen,

anbei das log:

Code:
ATTFilter
OTL logfile created on: 02.08.2012 12:12:21 - Run 4
OTL by OldTimer - Version 3.2.55.0     Folder = C:\Users\***\Desktop
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,13 Gb Available Physical Memory | 70,90% Memory free
6,00 Gb Paging File | 4,41 Gb Available in Paging File | 73,55% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,04 Gb Total Space | 0,72 Gb Free Space | 0,48% Space Free | Partition Type: NTFS
Drive D: | 137,33 Gb Total Space | 3,55 Gb Free Space | 2,59% Space Free | Partition Type: NTFS
 
Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.08.02 12:10:14 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
PRC - [2012.05.11 23:03:15 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.05.11 23:03:15 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.05.11 23:03:15 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2012.05.11 23:03:15 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2012.04.04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.04.03 17:02:59 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvtray.exe
PRC - [2012.04.03 17:01:59 | 000,857,920 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2012.04.03 07:15:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011.12.20 14:32:00 | 000,634,880 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcUPCTLoader.exe
PRC - [2011.12.16 13:54:22 | 000,220,744 | ---- | M] (Geek Software GmbH) -- C:\Programme\PDF24\pdf24.exe
PRC - [2011.09.15 13:06:04 | 000,088,576 | ---- | M] () -- C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe
PRC - [2011.06.24 06:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2011.03.28 20:31:16 | 000,193,920 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
PRC - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.20 14:22:51 | 000,673,040 | ---- | M] (Microsoft Corporation) -- C:\Programme\Internet Explorer\iexplore.exe
PRC - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2010.11.20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009.10.06 01:56:00 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Programme\Common Files\Real\Update_OB\realsched.exe
PRC - [2009.02.26 19:36:46 | 000,030,040 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Office\Office12\GrooveMonitor.exe
PRC - [2009.02.26 03:52:22 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2009.01.09 19:46:32 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Programme\OpenOffice.org 3\program\soffice.bin
PRC - [2009.01.09 19:45:26 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Programme\OpenOffice.org 3\program\soffice.exe
PRC - [2008.11.25 19:22:10 | 000,170,552 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\HControl.exe
PRC - [2008.11.20 20:09:20 | 000,307,200 | -H-- | M] (DeviceVM) -- C:\ASUS.SYS\DVMExportService.exe
PRC - [2008.10.24 16:35:44 | 000,128,296 | ---- | M] () -- C:\Programme\AAVUpdateManager\aavus.exe
PRC - [2008.10.18 03:10:54 | 000,211,512 | ---- | M] (ATK) -- C:\Programme\P4G\BatteryLife.exe
PRC - [2008.09.03 03:11:04 | 008,105,984 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATKOSD2\ATKOSD2.exe
PRC - [2008.08.19 20:34:04 | 000,159,744 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Media\DMedia.exe
PRC - [2008.08.18 21:27:32 | 000,117,304 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\MsgTranAgt.exe
PRC - [2008.08.18 20:56:22 | 000,098,304 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\HControlUser.exe
PRC - [2008.08.14 07:00:16 | 000,158,264 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\WDC.exe
PRC - [2008.08.14 07:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\KBFiltr.exe
PRC - [2008.08.14 06:59:52 | 000,100,920 | ---- | M] () -- C:\Programme\ASUS\ATK Hotkey\AsLdrSrv.exe
PRC - [2008.08.14 02:21:56 | 002,482,176 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2008.07.19 05:52:16 | 000,104,936 | ---- | M] (CyberLink) -- C:\Programme\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2008.06.19 22:18:12 | 000,154,168 | ---- | M] (ASUS) -- C:\Programme\ASUS\ASUS CopyProtect\ASPG.exe
PRC - [2008.06.18 08:10:24 | 000,297,528 | ---- | M] (ASUS) -- C:\Programme\ASUS\SmartLogon\sensorsrv.exe
PRC - [2008.06.04 03:29:08 | 000,851,968 | ---- | M] (ATK) -- C:\Programme\ASUS\Splendid\ACMON.exe
PRC - [2007.11.30 21:20:44 | 000,051,768 | ---- | M] () -- C:\Programme\ASUS\ASUS Live Update\ALU.exe
PRC - [2007.08.08 10:08:40 | 000,094,208 | ---- | M] () -- C:\Programme\ATKGFNEX\GFNEXSrv.exe
PRC - [2007.07.06 02:53:44 | 001,040,384 | ---- | M] () -- C:\Programme\Wireless Console 2\wcourier.exe
PRC - [2005.07.07 01:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\System32\ACEngSvr.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.05.13 01:29:31 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\f3814b488d9e083cbbc623e01b389f09\System.Data.ni.dll
MOD - [2012.05.13 01:27:59 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012.05.13 01:27:53 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012.05.13 01:27:52 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012.05.13 01:27:36 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2011.12.20 14:32:00 | 001,515,520 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\Maps\R66Api.dll
MOD - [2011.12.20 14:32:00 | 000,634,880 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcUPCTLoader.exe
MOD - [2011.12.20 14:32:00 | 000,559,244 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\sqlite3.7.dll
MOD - [2011.12.20 14:32:00 | 000,516,599 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\sqlite3.dll
MOD - [2011.12.20 14:32:00 | 000,389,120 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcDetect.dll
MOD - [2011.12.20 14:32:00 | 000,172,032 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcDetectLegend.dll
MOD - [2011.12.20 14:32:00 | 000,143,360 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcDisk.dll
MOD - [2011.12.20 14:32:00 | 000,103,936 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\OutputLog.dll
MOD - [2011.12.20 14:32:00 | 000,094,208 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\fdHttpd.dll
MOD - [2011.07.29 01:09:42 | 000,096,112 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe
MOD - [2010.11.13 02:02:21 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.11.05 03:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2008.10.17 02:45:20 | 000,014,848 | ---- | M] () -- C:\Programme\P4G\OvrClk.dll
MOD - [2008.09.16 20:18:06 | 000,132,608 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll
MOD - [2008.08.21 01:49:56 | 000,016,384 | ---- | M] () -- C:\Programme\P4G\DevMng.dll
MOD - [2008.07.29 13:55:14 | 000,969,728 | ---- | M] () -- C:\Programme\OpenOffice.org 3\program\libxml2.dll
MOD - [2008.07.19 05:52:08 | 000,649,704 | ---- | M] () -- C:\Programme\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2008.06.09 19:55:08 | 000,013,096 | ---- | M] () -- C:\Programme\CyberLink\Power2Go\CLMLSvcPS.dll
MOD - [2007.11.30 21:20:44 | 000,051,768 | ---- | M] () -- C:\Programme\ASUS\ASUS Live Update\ALU.exe
MOD - [2007.11.13 01:41:50 | 000,106,496 | ---- | M] () -- C:\Programme\ASUS\ATK Hotkey\MsgTran.dll
MOD - [2007.08.14 23:59:54 | 006,365,184 | ---- | M] () -- C:\Programme\Common Files\LightScribe\QtGui4.dll
MOD - [2007.07.12 23:55:52 | 000,131,072 | ---- | M] () -- C:\Programme\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
MOD - [2007.07.12 23:55:28 | 001,581,056 | ---- | M] () -- C:\Programme\Common Files\LightScribe\QtCore4.dll
MOD - [2007.03.10 02:16:52 | 000,106,496 | ---- | M] () -- C:\Programme\ATKGFNEX\AGFNEX.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - [2012.05.11 23:03:15 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.05.11 23:03:15 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.04.04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.04.03 19:16:00 | 001,262,912 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012.04.03 07:15:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012.03.08 18:32:24 | 001,492,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2011.09.15 13:06:04 | 000,088,576 | ---- | M] () [Auto | Running] -- C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2011.07.20 06:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009.02.26 19:36:22 | 000,064,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2008.11.20 20:09:20 | 000,307,200 | -H-- | M] (DeviceVM) [Auto | Running] -- C:\ASUS.SYS\DVMExportService.exe -- (DvmMDES)
SRV - [2008.10.24 16:35:44 | 000,128,296 | ---- | M] () [Auto | Running] -- C:\Programme\AAVUpdateManager\aavus.exe -- (AAV UpdateService)
SRV - [2008.08.14 06:59:52 | 000,100,920 | ---- | M] () [Auto | Running] -- C:\Programme\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2007.08.08 10:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Programme\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2007.05.31 09:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007.05.31 09:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2006.10.26 23:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
 
 
========== Driver Services (SafeList) ==========
 
DRV - [2012.07.26 12:11:54 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2012.05.11 23:03:16 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.05.11 23:03:16 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2012.04.03 19:16:00 | 011,348,288 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011.11.09 22:12:31 | 000,232,512 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2011.10.11 15:00:01 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011.04.30 14:00:18 | 000,039,064 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2011.04.30 14:00:06 | 000,041,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WINUSB)
DRV - [2010.06.23 11:24:56 | 000,023,040 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\htcnprot.sys -- (htcnprot)
DRV - [2010.06.17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.05.07 06:50:55 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2010.05.07 06:50:54 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009.11.09 23:39:14 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2009.10.26 09:54:24 | 000,025,088 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ANDROIDUSB.sys -- (HTCAND32)
DRV - [2009.07.14 00:02:53 | 000,048,128 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SiSGB6.sys -- (SiSGbeLH)
DRV - [2009.07.14 00:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008.12.10 05:20:56 | 001,772,544 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC)
DRV - [2008.11.16 18:39:44 | 000,131,984 | ---- | M] (Deterministic Networks, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\dne2000.sys -- (DNE)
DRV - [2008.06.03 08:41:51 | 000,015,928 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2008.05.29 20:21:04 | 000,015,416 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\System32\drivers\lullaby.sys -- (lullaby)
DRV - [2007.07.24 21:09:04 | 000,013,880 | ---- | M] () [Kernel | Auto | Running] -- C:\Programme\ATKGFNEX\ASMMAP.sys -- (ASMMAP)
DRV - [2007.01.18 20:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CVirtA.sys -- (CVirtA)
DRV - [2006.12.14 09:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2005.11.03 16:40:07 | 000,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfvfs02.sys -- (sfvfs02)
DRV - [2005.08.10 14:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01)
DRV - [2005.05.16 15:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\URLSearchHook:  - No CLSID value found
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{53C30388-824D-4D09-AA65-87FD20D67DA1}: "URL" = hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search={SearchTerms}
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search="
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "hxxp://start.icq.com/"
FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.5
FF - prefs.js..extensions.enabledItems: zotero@chnm.gmu.edu:2.0.4
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906
FF - prefs.js..extensions.enabledItems: {02B06ED9-2E6A-48B2-9EB1-8C3BDB23353A}:1.9.1
FF - prefs.js..extensions.enabledItems: facepad@lazyrussian.com:0.8.2
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q="
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 50370
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_257.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.448: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\***\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\***\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\***\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.11.04 04:32:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.01.30 19:10:21 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.11.04 04:32:13 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{02B06ED9-2E6A-48B2-9EB1-8C3BDB23353A}: C:\Users\***\AppData\Local\{02B06ED9-2E6A-48B2-9EB1-8C3BDB23353A} [2010.11.04 04:49:54 | 000,000,000 | ---D | M]
 
[2011.11.27 21:52:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\vvi9ogvm.default\extensions
[2011.11.27 21:52:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\vvi9ogvm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2011.11.27 21:52:58 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.02.11 18:01:16 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011.11.03 19:53:49 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2011.10.03 06:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
 
========== Chrome  ==========
 
CHR - homepage: hxxp://www.google.com
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: hxxp://www.google.com
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\Application\20.0.1132.57\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\Application\20.0.1132.57\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\***\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Java(TM) Platform SE 7 U4 (Enabled) = C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 7.0.40.255 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa2.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)  (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: QUAKE LIVE (Enabled) = C:\ProgramData\id Software\QuakeLive\npquakezero.dll
CHR - plugin: Google Update (Enabled) = C:\Users\***\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Facebook Plugin (Enabled) = C:\Users\***\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll
CHR - plugin: Move Media Player 7 (Enabled) = C:\Users\***\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - Extension: YouTube = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Skype Click to Call = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\
CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
CHR - Extension: Google Mail = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (no name) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - No CLSID value found.
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe ()
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe (ASUS)
O4 - HKLM..\Run: [ATKMEDIA] C:\Programme\ASUS\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Programme\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [HControlUser] C:\Programme\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [HTC Sync Loader] C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()
O4 - HKLM..\Run: [ Malwarebytes Anti-Malware  (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [P2Go_Menu] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [PDFPrint] C:\Programme\PDF24\pdf24.exe (Geek Software GmbH)
O4 - HKLM..\Run: [Skytel] C:\Programme\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000..\Run: [OscarEditor] "C:\Program Files\MOUSE Editor\\MouseEditor.exe" Minimum File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil10c.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe ()
O4 - Startup: C:\Users\User2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk = C:\Programme\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O13 - gopher Prefix: missing
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.de/common/asusTek_sys_ctrl.cab (asusTek_sysctrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F3AEA16B-1611-4632-8548-634EC3598CBA}: DhcpNameServer = 192.168.43.1
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Programme\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O24 - Desktop WallPaper: C:\Users\***\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\***\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell - "" = AutoRun
O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell\AutoRun\command - "" = F:\Setup.exe
O33 - MountPoints2\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\Shell\dinstall\command - "" = F:\directx\dxsetup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
 
 
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS -  File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS -  File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
Drivers32: msacm.ac3filter - C:\Windows\System32\ac3filter.acm ()
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)
Drivers32: vidc.i420 - C:\Windows\System32\i420vfw.dll (www.helixcommunity.org)
Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.08.02 12:10:11 | 000,597,504 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2012.08.01 20:26:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1C8B1A5B-32F2-4872-B530-96F7DEB2075B}
[2012.08.01 20:26:33 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{E973CC4F-916F-45CB-873C-58898AB1FAC0}
[2012.07.31 23:59:29 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{4A81BC08-99EE-4B27-8CEB-86B6E2465682}
[2012.07.31 23:59:16 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{F7CDEFFC-904C-4D36-B561-BB8D7CA0D987}
[2012.07.31 09:26:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{85D841BA-A05C-4A1A-A3B4-9EFB8F21BEAF}
[2012.07.31 09:24:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{FBB217E7-56FB-457B-8F7C-88BB3ACC9649}
[2012.07.30 16:29:06 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{189DF4F4-96E4-4619-AB3C-DFD3B0FD014C}
[2012.07.30 16:28:52 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{B72848D8-54E2-4125-AB8B-07A2AC1FD555}
[2012.07.27 19:52:25 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1732372D-3B5A-4A7A-BC1B-3035E74AEF5F}
[2012.07.27 19:52:11 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{EC7910C3-3F28-4DA7-9D37-CD7623969E4D}
[2012.07.27 18:12:08 | 000,000,000 | -H-D | C] -- C:\dvmexp
[2012.07.26 14:37:34 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2012.07.26 12:10:48 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2012.07.26 11:59:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A6AA22DA-861E-4F90-8CDB-9ADEEDCA971B}
[2012.07.26 11:59:29 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{860DFF9A-139D-4361-A825-058F122C3F73}
[2012.07.24 19:22:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{9BA75DB0-F4DC-4252-81D0-E95AEDAF90AF}
[2012.07.24 19:21:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{E07BCC5F-2546-40E9-9165-90222C2811E5}
[2012.07.23 21:37:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{DD171A30-289A-4E57-A1EC-BD5076A9FC23}
[2012.07.23 21:36:51 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1070BA7C-EB72-4FE6-823E-58466380B8AE}
[2012.07.22 22:35:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7D076970-BFD6-4244-AF29-B4A3608D22FC}
[2012.07.22 22:35:33 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{B83D740C-013E-439E-815A-D2C4F802D957}
[2012.07.22 20:30:19 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\viruszeugs
[2012.07.21 14:35:23 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{E61564EC-BA2E-4A7F-A0AC-BBE988D70A32}
[2012.07.21 14:34:45 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{EE462F51-646A-4232-8116-F40D5B89AD8C}
[2012.07.20 23:49:48 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7F73E387-C28F-408F-AA79-AFFAE0F9A3FD}
[2012.07.20 23:49:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{D57486E4-CC3E-4F0C-83AF-DF5A4180E7A5}
[2012.07.20 23:43:49 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3457CA14-B8CD-4A90-AD7E-105067D3C458}
[2012.07.20 23:43:32 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A60D35AC-7358-4245-8DC7-6C10B0EE4D6A}
[2012.07.19 01:12:54 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\theHunter
[2012.07.19 01:10:23 | 000,000,000 | ---D | C] -- C:\Windows\System32\directx
[2012.07.19 01:04:55 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\CyberLink
[2012.07.17 00:11:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carnivores 2
[2012.07.15 20:36:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carnivores
[2012.07.15 20:02:25 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0ABC2912-0253-41A7-A288-0C75AECA11B1}
[2012.07.15 20:02:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BE3F9F09-A7B7-4693-9670-B4F4E24825F2}
[2012.07.08 20:29:33 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{78C72B40-BF69-467F-A8EC-3A908FCA4F36}
[2012.07.08 20:29:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C92AE0D9-92DC-421F-B815-4F2B5C4FFF5B}
[2012.07.08 20:26:39 | 000,000,000 | ---D | C] -- C:\Windows\de
[2012.07.08 20:14:52 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{6335CED3-14E3-4B26-9D3F-750A5AED10A5}
[2012.07.08 20:14:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{17DCA90B-2287-4FFB-BD6D-A39D928E9BBB}
[2012.07.07 00:10:24 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2AFCDE61-8680-46D2-92D2-FF74FA5653B9}
[2012.07.07 00:10:01 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{05109273-94C2-4D50-B76D-FDB373E9C22D}
 
========== Files - Modified Within 30 Days ==========
 
[2012.08.02 12:10:14 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2012.08.02 12:03:03 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000UA.job
[2012.08.02 11:32:00 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004UA.job
[2012.08.02 11:32:00 | 000,001,068 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004Core.job
[2012.08.02 11:19:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.08.01 20:13:29 | 000,001,072 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000Core.job
[2012.07.30 16:02:58 | 000,654,166 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.07.30 16:02:58 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.07.30 16:02:58 | 000,130,006 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.07.30 16:02:58 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.07.30 14:28:28 | 000,010,352 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.07.30 14:28:28 | 000,010,352 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.07.27 20:12:18 | 000,000,012 | -H-- | M] () -- C:\dvmexp.idx
[2012.07.27 18:11:54 | 2415,394,816 | -HS- | M] () -- C:\hiberfil.sys
[2012.07.27 17:52:04 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2012.07.26 12:11:54 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2012.07.25 18:11:28 | 000,053,978 | ---- | M] () -- C:\Users\***\Desktop\avir.jpg
[2012.07.22 20:34:31 | 000,000,176 | ---- | M] () -- C:\Users\***\defogger_reenable
[2012.07.22 20:00:31 | 000,001,078 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.07.17 01:11:37 | 000,001,593 | ---- | M] () -- C:\Windows\VPNUnInstall.MIF
[2012.07.15 03:29:34 | 000,428,056 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.07.14 23:16:43 | 000,002,415 | ---- | M] () -- C:\Users\***\Desktop\Google Chrome.lnk
[2012.07.06 13:59:34 | 000,838,258 | ---- | M] () -- C:\Users\***\Desktop\mieterfragebogen.jpg
[2012.07.03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
 
========== Files Created - No Company Name ==========
 
[2012.07.27 20:12:18 | 000,000,012 | -H-- | C] () -- C:\dvmexp.idx
[2012.07.25 18:11:27 | 000,053,978 | ---- | C] () -- C:\Users\***\Desktop\avir.jpg
[2012.07.22 20:34:10 | 000,000,176 | ---- | C] () -- C:\Users\***\defogger_reenable
[2012.07.22 20:00:31 | 000,001,078 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.07.17 01:10:19 | 000,001,593 | ---- | C] () -- C:\Windows\VPNUnInstall.MIF
[2012.07.06 13:29:13 | 000,838,258 | ---- | C] () -- C:\Users\***\Desktop\mieterfragebogen.jpg
[2012.05.12 02:15:08 | 000,000,000 | ---- | C] () -- C:\Windows\PowerReg.dat
[2012.04.03 07:16:04 | 000,423,744 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2012.01.27 23:41:51 | 000,000,096 | ---- | C] () -- C:\Users\***\.asadminpass
[2011.11.10 19:33:05 | 000,000,001 | ---- | C] () -- C:\Windows\System32\SI.bin
[2011.11.06 16:48:31 | 000,410,942 | ---- | C] () -- C:\Windows\adb.exe
[2011.11.06 16:48:31 | 000,401,408 | ---- | C] () -- C:\Windows\wget.exe
[2011.11.06 16:48:31 | 000,356,009 | ---- | C] () -- C:\Windows\fastboot.exe
[2011.11.06 16:48:31 | 000,063,488 | ---- | C] () -- C:\Windows\md5sum.exe
[2011.11.04 22:47:29 | 000,032,256 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2011.03.03 22:36:38 | 000,007,168 | ---- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.06.29 20:44:07 | 000,001,418 | ---- | C] () -- C:\Users\***\.recently-used.xbel
[2008.08.09 00:48:20 | 000,090,112 | ---- | C] () -- C:\Program Files\Common Files\CPInstallAction.dll
[2008.05.22 19:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files\Common Files\banner.jpg
 
========== LOP Check ==========
 
[2012.07.08 21:37:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\.minecraft
[2010.11.04 04:50:33 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\AnvSoft
[2012.05.12 02:41:38 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Atari
[2011.12.26 17:53:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\calibre
[2011.08.12 13:13:59 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Command & Conquer 3 Tiberium Wars
[2009.04.08 23:35:55 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools
[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Lite
[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Pro
[2012.08.02 00:27:44 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Dropbox
[2012.05.10 21:54:54 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DVDVideoSoft
[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Electronic Arts
[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Facebook
[2010.01.13 19:12:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\FVZilla
[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GetRightToGo
[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\gtk-2.0
[2012.01.12 21:40:34 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HandBrake
[2012.01.29 21:24:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HTC
[2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Imperium Romanum
[2011.09.21 22:23:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Leadertech
[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade
[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade Warband
[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Moyea
[2012.07.03 21:26:19 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mumble
[2011.07.25 12:20:10 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\MyPhoneExplorer
[2010.11.04 04:51:14 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\OpenOffice.org
[2010.11.04 04:51:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\The Bat!
[2012.07.21 16:01:39 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\uTorrent
[2010.11.09 02:13:15 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Windows Live Writer
[2011.03.17 01:28:56 | 000,000,000 | ---D | M] -- C:\Users\Gast\AppData\Roaming\HTC
[2011.10.09 16:23:55 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\Canneverbe Limited
[2012.04.01 21:22:08 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\Dropbox
[2012.01.30 18:28:48 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\HTC
[2011.08.12 22:42:22 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\ICQ
[2011.08.04 19:02:17 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\MyPhoneExplorer
[2011.06.10 18:44:28 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\OpenOffice.org
[2011.07.21 14:36:44 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\RapidTyping
[2012.04.01 21:18:05 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\Spotify
[2012.03.30 13:48:34 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\uTorrent
[2011.12.28 23:42:07 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2012.07.08 21:37:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\.minecraft
[2011.07.25 20:56:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Adobe
[2010.11.04 04:50:33 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\AnvSoft
[2011.10.24 22:10:58 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Apple Computer
[2012.05.12 02:41:38 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Atari
[2011.10.20 00:34:01 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Avira
[2011.12.26 17:53:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\calibre
[2011.08.12 13:13:59 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Command & Conquer 3 Tiberium Wars
[2012.07.19 01:04:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\CyberLink
[2009.04.08 23:35:55 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools
[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Lite
[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Pro
[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DivX
[2012.08.02 00:27:44 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Dropbox
[2012.06.03 23:48:50 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\dvdcss
[2012.05.10 21:54:54 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DVDVideoSoft
[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Electronic Arts
[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Facebook
[2010.01.13 19:12:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\FVZilla
[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GetRightToGo
[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\gtk-2.0
[2012.01.12 21:40:34 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HandBrake
[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HP
[2012.02.06 19:08:29 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HpUpdate
[2012.01.29 21:24:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HTC
[2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Identities
[2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Imperium Romanum
[2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\InstallShield
[2011.09.21 22:23:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Leadertech
[2011.09.21 22:20:18 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Logishrd
[2011.09.21 22:23:09 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Logitech
[2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Macromedia
[2010.11.04 04:50:51 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Malwarebytes
[2009.07.14 10:56:41 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Media Center Programs
[2012.07.22 20:19:52 | 000,000,000 | --SD | M] -- C:\Users\***\AppData\Roaming\Microsoft
[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade
[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade Warband
[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Moyea
[2011.11.27 21:52:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mozilla
[2012.07.03 21:26:19 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mumble
[2011.07.25 12:20:10 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\MyPhoneExplorer
[2011.08.13 02:23:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\NVIDIA
[2010.11.04 04:51:14 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\OpenOffice.org
[2010.11.04 04:51:17 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Real
[2010.11.04 04:51:17 | 000,000,000 | RH-D | M] -- C:\Users\***\AppData\Roaming\SecuROM
[2012.04.29 19:42:15 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Skype
[2010.11.04 04:51:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\The Bat!
[2012.07.21 16:01:39 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\uTorrent
[2012.08.01 23:39:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\vlc
[2012.03.25 00:11:51 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Winamp
[2010.11.09 02:13:15 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Windows Live Writer
[2009.04.08 23:25:00 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\WinRAR
 
< %APPDATA%\*.exe /s >
[2012.05.24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe
[2012.05.24 20:39:24 | 000,872,144 | ---- | M] (Dropbox, Inc.) -- C:\Users\***\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe
[2012.05.24 20:39:56 | 000,177,280 | ---- | M] (Dropbox, Inc.) -- C:\Users\***\AppData\Roaming\Dropbox\bin\Uninstall.exe
[2010.04.12 20:48:32 | 000,050,354 | ---- | M] (Facebook, Inc.) -- C:\Users\***\AppData\Roaming\Facebook\uninstall.exe
[2010.11.25 00:59:45 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\***\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2011.09.21 22:23:02 | 000,053,248 | R--- | M] (Acresso Software Inc.) -- C:\Users\***\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
[2009.09.20 01:21:22 | 000,010,134 | R--- | M] () -- C:\Users\***\AppData\Roaming\Microsoft\Installer\{C5E882B1-C7A4-43EA-89E2-15E5ECA6CEA0}\ARPPRODUCTICON.exe
[2009.09.20 01:21:24 | 000,053,248 | R--- | M] (InstallShield Software Corp.) -- C:\Users\***\AppData\Roaming\Microsoft\Installer\{C5E882B1-C7A4-43EA-89E2-15E5ECA6CEA0}\NewShortcut1_C5E882B1C7A443EA89E215E5ECA6CEA0.exe
[2009.09.20 01:21:26 | 000,053,248 | R--- | M] (InstallShield Software Corp.) -- C:\Users\***\AppData\Roaming\Microsoft\Installer\{C5E882B1-C7A4-43EA-89E2-15E5ECA6CEA0}\NewShortcut2_C5E882B1C7A443EA89E215E5ECA6CEA0.exe
[2010.05.30 21:39:20 | 000,443,912 | ---- | M] (RealNetworks, Inc.) -- C:\Users\***\AppData\Roaming\Real\Update\setup3.10\setup.exe
[2011.01.26 23:15:23 | 000,510,120 | ---- | M] (RealNetworks, Inc.) -- C:\Users\***\AppData\Roaming\Real\Update\setup3.13\setup.exe
[2011.11.19 23:30:18 | 000,317,048 | ---- | M] (RealNetworks, Inc.) -- C:\Users\***\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\9.00\rnupgagent.exe
 
< %SYSTEMDRIVE%\*.exe >
 
< MD5 for: AGP440.SYS  >
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
 
< MD5 for: IASTORV.SYS  >
[2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\drivers\iaStorV.sys
[2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
[2011.03.11 07:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_aef580fde910b4b0\iaStorV.sys
[2011.03.11 07:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
[2009.07.14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
[2010.11.20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys
[2011.03.11 07:52:21 | 000,332,160 | ---- | M] (Intel Corporation) MD5=B9039A34C2F8769490DCC494E2402445 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_afae2d45020c148b\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\drivers\nvstor.sys
[2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
[2011.03.11 07:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_39bef1ad20475e88\nvstor.sys
[2011.03.11 07:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
[2011.03.11 07:52:25 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=8A7583A3B58D3EEB28BB26626526BC91 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_3a779df43942be63\nvstor.sys
[2010.11.20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
[2009.07.14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll
 
< MD5 for: USER32.DLL  >
[2009.07.14 03:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll
[2010.11.20 14:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\System32\user32.dll
[2010.11.20 14:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\System32\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.10.28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010.11.20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010.11.20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2012.07.03 13:46:42 | 000,217,672 | ---- | M] () MD5=8A7F34F0BBD076EC3815680A7309114F -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2009.07.14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 01:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2009.07.14 01:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >
 
<           >

< End of report >
         
__________________


Alt 03.08.2012, 11:58   #18
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:
ATTFilter
:OTL
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\URLSearchHook:  - No CLSID value found
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{53C30388-824D-4D09-AA65-87FD20D67DA1}: "URL" = http://flvdirect.iamwired.net/websearch.php?src=tops&search={SearchTerms}
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
FF - prefs.js..extensions.enabledItems: facepad@lazyrussian.com:0.8.2
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q="
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 50370
FF - user.js - File not found
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "http://flvdirect.iamwired.net/websearch.php?src=tops&search="
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "http://start.icq.com/"
FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.5
O2 - BHO: (no name) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell - "" = AutoRun
O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell\AutoRun\command - "" = F:\Setup.exe
O33 - MountPoints2\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\Shell\dinstall\command - "" = F:\directx\dxsetup.exe
:Commands
[purity]
[emptytemp]
[emptyflash]
[resethosts]
         
Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!
__________________
__________________

Alt 03.08.2012, 14:23   #19
Hypothetix
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Gesagt, getan!




Code:
ATTFilter
All processes killed
========== OTL ==========
HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\StartPageCache| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Internet Explorer\SearchScopes\{53C30388-824D-4D09-AA65-87FD20D67DA1}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53C30388-824D-4D09-AA65-87FD20D67DA1}\ not found.
Registry key HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
Prefs.js: facepad@lazyrussian.com:0.8.2 removed from extensions.enabledItems
Prefs.js: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q=" removed from keyword.URL
Prefs.js: "127.0.0.1" removed from network.proxy.http
Prefs.js: 50370 removed from network.proxy.http_port
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search=" removed from browser.search.defaulturl
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: "hxxp://start.icq.com/" removed from browser.startup.homepage
Prefs.js: smartwebprinting@hp.com:4.5 removed from extensions.enabledItems
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
C:\autoexec.bat moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\ not found.
File F:\Setup.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\ not found.
File F:\directx\dxsetup.exe not found.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: ***
->Temp folder emptied: 604934066 bytes
->Temporary Internet Files folder emptied: 152533362 bytes
->Java cache emptied: 40338330 bytes
->FireFox cache emptied: 52369685 bytes
->Google Chrome cache emptied: 144944274 bytes
->Apple Safari cache emptied: 44496896 bytes
->Flash cache emptied: 91475 bytes
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 677279 bytes
->Flash cache emptied: 56475 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Gast
->Temp folder emptied: 1578369 bytes
->Temporary Internet Files folder emptied: 83156660 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 41585955 bytes
->Flash cache emptied: 59163 bytes
 
User: User2
->Temp folder emptied: 58409804 bytes
->Temporary Internet Files folder emptied: 72659581 bytes
->Java cache emptied: 1877457 bytes
->FireFox cache emptied: 357548212 bytes
->Apple Safari cache emptied: 21386240 bytes
->Flash cache emptied: 85202 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32768 bytes
->Flash cache emptied: 2870 bytes
 
User: UpdatusUser.***-PC
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 677279 bytes
->Flash cache emptied: 56475 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 108923791 bytes
RecycleBin emptied: 306300640 bytes
 
Total Files Cleaned = 1.998,00 mb
 
 
[EMPTYFLASH]
 
User: All Users
 
User: ***
->Flash cache emptied: 0 bytes
 
User: Default
->Flash cache emptied: 0 bytes
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: Gast
->Flash cache emptied: 0 bytes
 
User: User2
->Flash cache emptied: 0 bytes
 
User: Public
 
User: UpdatusUser
->Flash cache emptied: 0 bytes
 
User: UpdatusUser.***-PC
->Flash cache emptied: 0 bytes
 
Total Flash Files Cleaned = 0,00 mb
 
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.55.0 log created on 08032012_150426

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...
         

Alt 03.08.2012, 20:00   #20
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!


__________________
Logfiles bitte immer in CODE-Tags posten

Alt 07.08.2012, 19:17   #21
Hypothetix
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Hallo,

hat leider ein paar Tage gedauert da ich kaum zu Hause war, aber hier das Log:

Code:
ATTFilter
19:12:46.0113 5196	TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
19:12:48.0145 5196	============================================================
19:12:48.0145 5196	Current date / time: 2012/08/07 19:12:48.0145
19:12:48.0146 5196	SystemInfo:
19:12:48.0146 5196	
19:12:48.0146 5196	OS Version: 6.1.7601 ServicePack: 1.0
19:12:48.0146 5196	Product type: Workstation
19:12:48.0146 5196	ComputerName: ***-PC
19:12:48.0146 5196	UserName: ***
19:12:48.0146 5196	Windows directory: C:\Windows
19:12:48.0146 5196	System windows directory: C:\Windows
19:12:48.0147 5196	Processor architecture: Intel x86
19:12:48.0147 5196	Number of processors: 2
19:12:48.0147 5196	Page size: 0x1000
19:12:48.0147 5196	Boot type: Normal boot
19:12:48.0147 5196	============================================================
19:12:54.0147 5196	Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
19:12:54.0202 5196	============================================================
19:12:54.0202 5196	\Device\Harddisk0\DR0:
19:12:54.0221 5196	MBR partitions:
19:12:54.0222 5196	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1770D7A, BlocksNum 0x12A14C00
19:12:54.0233 5196	\Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x141859B9, BlocksNum 0x112A7D08
19:12:54.0234 5196	============================================================
19:12:54.0590 5196	C: <-> \Device\Harddisk0\DR0\Partition0
19:12:55.0282 5196	D: <-> \Device\Harddisk0\DR0\Partition1
19:12:55.0283 5196	============================================================
19:12:55.0283 5196	Initialize success
19:12:55.0283 5196	============================================================
19:13:24.0574 7680	============================================================
19:13:24.0575 7680	Scan started
19:13:24.0575 7680	Mode: Manual; SigCheck; TDLFS; 
19:13:24.0575 7680	============================================================
19:13:47.0662 7680	1394ohci        (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
19:13:48.0116 7680	1394ohci - ok
19:13:49.0624 7680	AAV UpdateService (7eeb488346fbfa3731276c3ee8a8fd9e) C:\Program Files\AAVUpdateManager\aavus.exe
19:13:49.0640 7680	AAV UpdateService - ok
19:13:50.0351 7680	ACPI            (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
19:13:50.0399 7680	ACPI - ok
19:13:50.0501 7680	AcpiPmi         (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
19:13:50.0879 7680	AcpiPmi - ok
19:13:51.0648 7680	AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
19:13:51.0714 7680	AdobeARMservice - ok
19:13:52.0488 7680	adp94xx         (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
19:13:52.0560 7680	adp94xx - ok
19:13:52.0643 7680	adpahci         (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
19:13:52.0671 7680	adpahci - ok
19:13:52.0952 7680	adpu320         (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
19:13:52.0976 7680	adpu320 - ok
19:13:53.0039 7680	AeLookupSvc     (8b5eefeec1e6d1a72a06c526628ad161) C:\Windows\System32\aelupsvc.dll
19:13:53.0174 7680	AeLookupSvc - ok
19:13:53.0475 7680	AFD             (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys
19:13:53.0741 7680	AFD - ok
19:13:54.0076 7680	agp440          (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
19:13:54.0164 7680	agp440 - ok
19:13:54.0573 7680	aic78xx         (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
19:13:54.0597 7680	aic78xx - ok
19:13:54.0842 7680	ALG             (18a54e132947cd98fea9accc57f98f13) C:\Windows\System32\alg.exe
19:13:55.0076 7680	ALG - ok
19:13:55.0158 7680	aliide          (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
19:13:55.0175 7680	aliide - ok
19:13:55.0387 7680	amdagp          (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
19:13:55.0437 7680	amdagp - ok
19:13:55.0482 7680	amdide          (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
19:13:55.0500 7680	amdide - ok
19:13:55.0573 7680	AmdK8           (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
19:13:55.0679 7680	AmdK8 - ok
19:13:55.0728 7680	AmdPPM          (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
19:13:55.0813 7680	AmdPPM - ok
19:13:56.0079 7680	amdsata         (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys
19:13:56.0102 7680	amdsata - ok
19:13:56.0271 7680	amdsbs          (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
19:13:56.0324 7680	amdsbs - ok
19:13:56.0415 7680	amdxata         (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys
19:13:56.0433 7680	amdxata - ok
19:13:56.0828 7680	AntiVirSchedulerService (466a0d95960dad3222c896d2cea99993) C:\Program Files\Avira\AntiVir Desktop\sched.exe
19:13:56.0863 7680	AntiVirSchedulerService - ok
19:13:57.0198 7680	AntiVirService  (a489be6bb0aa1ff406b488b60542314b) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
19:13:57.0215 7680	AntiVirService - ok
19:13:57.0446 7680	AppID           (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
19:13:58.0289 7680	AppID - ok
19:13:58.0469 7680	AppIDSvc        (62a9c86cb6085e20db4823e4e97826f5) C:\Windows\System32\appidsvc.dll
19:13:58.0537 7680	AppIDSvc - ok
19:13:58.0761 7680	Appinfo         (fb1959012294d6ad43e5304df65e3c26) C:\Windows\System32\appinfo.dll
19:13:58.0883 7680	Appinfo - ok
19:13:59.0260 7680	arc             (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
19:13:59.0283 7680	arc - ok
19:13:59.0339 7680	arcsas          (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
19:13:59.0367 7680	arcsas - ok
19:13:59.0627 7680	ASLDRService    (eb1807795cd3eeaa3288b4a30de254e8) C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
19:13:59.0724 7680	ASLDRService - ok
19:13:59.0833 7680	ASMMAP          (7b4d08d2017ac06689d422e06c43f0aa) C:\Program Files\ATKGFNEX\ASMMAP.sys
19:13:59.0846 7680	ASMMAP - ok
19:14:00.0054 7680	AsyncMac        (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
19:14:00.0486 7680	AsyncMac - ok
19:14:00.0546 7680	atapi           (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
19:14:00.0564 7680	atapi - ok
19:14:01.0107 7680	athr            (76bab0c824e2d05b940c4dd40a9b08bf) C:\Windows\system32\DRIVERS\athr.sys
19:14:01.0208 7680	athr - ok
19:14:01.0401 7680	ATKGFNEXSrv     (7c157574a181b19b9dcf5f339e25337e) C:\Program Files\ATKGFNEX\GFNEXSrv.exe
19:14:01.0451 7680	ATKGFNEXSrv ( UnsignedFile.Multi.Generic ) - warning
19:14:01.0451 7680	ATKGFNEXSrv - detected UnsignedFile.Multi.Generic (1)
19:14:02.0956 7680	atksgt          (f0d933b42cd0594048e4d5200ae9e417) C:\Windows\system32\DRIVERS\atksgt.sys
19:14:03.0002 7680	atksgt - ok
19:14:03.0612 7680	AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll
19:14:03.0712 7680	AudioEndpointBuilder - ok
19:14:03.0723 7680	Audiosrv        (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll
19:14:03.0758 7680	Audiosrv - ok
19:14:04.0127 7680	avgntflt        (d5541f0afb767e85fc412fc609d96a74) C:\Windows\system32\DRIVERS\avgntflt.sys
19:14:04.0167 7680	avgntflt - ok
19:14:04.0440 7680	avipbb          (7d967a682d4694df7fa57d63a2db01fe) C:\Windows\system32\DRIVERS\avipbb.sys
19:14:04.0482 7680	avipbb - ok
19:14:04.0528 7680	avkmgr          (271cfd1a989209b1964e24d969552bf7) C:\Windows\system32\DRIVERS\avkmgr.sys
19:14:04.0543 7680	avkmgr - ok
19:14:04.0634 7680	AxInstSV        (6e30d02aac9cac84f421622e3a2f6178) C:\Windows\System32\AxInstSV.dll
19:14:04.0814 7680	AxInstSV - ok
19:14:05.0278 7680	b06bdrv         (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
19:14:05.0406 7680	b06bdrv - ok
19:14:05.0772 7680	b57nd60x        (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
19:14:05.0840 7680	b57nd60x - ok
19:14:06.0247 7680	BDESVC          (ee1e9c3bb8228ae423dd38db69128e71) C:\Windows\System32\bdesvc.dll
19:14:06.0457 7680	BDESVC - ok
19:14:06.0578 7680	Beep            (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
19:14:06.0680 7680	Beep - ok
19:14:07.0176 7680	BFE             (1e2bac209d184bb851e1a187d8a29136) C:\Windows\System32\bfe.dll
19:14:07.0279 7680	BFE - ok
19:14:07.0520 7680	BITS            (e585445d5021971fae10393f0f1c3961) C:\Windows\System32\qmgr.dll
19:14:07.0618 7680	BITS - ok
19:14:07.0838 7680	blbdrive        (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
19:14:07.0903 7680	blbdrive - ok
19:14:08.0072 7680	bowser          (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
19:14:08.0164 7680	bowser - ok
19:14:08.0213 7680	BrFiltLo        (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
19:14:08.0260 7680	BrFiltLo - ok
19:14:08.0325 7680	BrFiltUp        (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
19:14:08.0410 7680	BrFiltUp - ok
19:14:08.0619 7680	Browser         (6e11f33d14d020f58d5e02e4d67dfa19) C:\Windows\System32\browser.dll
19:14:08.0790 7680	Browser - ok
19:14:08.0980 7680	Brserid         (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
19:14:09.0124 7680	Brserid - ok
19:14:09.0174 7680	BrSerWdm        (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
19:14:09.0269 7680	BrSerWdm - ok
19:14:09.0362 7680	BrUsbMdm        (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
19:14:09.0495 7680	BrUsbMdm - ok
19:14:09.0559 7680	BrUsbSer        (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
19:14:09.0629 7680	BrUsbSer - ok
19:14:09.0693 7680	BTHMODEM        (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
19:14:09.0793 7680	BTHMODEM - ok
19:14:09.0966 7680	bthserv         (1df19c96eef6c29d1c3e1a8678e07190) C:\Windows\system32\bthserv.dll
19:14:10.0057 7680	bthserv - ok
19:14:10.0132 7680	cdfs            (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
19:14:10.0188 7680	cdfs - ok
19:14:10.0263 7680	cdrom           (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\DRIVERS\cdrom.sys
19:14:10.0295 7680	cdrom - ok
19:14:10.0370 7680	CertPropSvc     (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll
19:14:10.0422 7680	CertPropSvc - ok
19:14:10.0512 7680	circlass        (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
19:14:10.0599 7680	circlass - ok
19:14:11.0191 7680	CLFS            (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
19:14:11.0223 7680	CLFS - ok
19:14:11.0951 7680	clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:14:11.0971 7680	clr_optimization_v2.0.50727_32 - ok
19:14:12.0502 7680	clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:14:12.0592 7680	clr_optimization_v4.0.30319_32 - ok
19:14:12.0662 7680	CmBatt          (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
19:14:12.0679 7680	CmBatt - ok
19:14:12.0819 7680	cmdide          (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
19:14:12.0885 7680	cmdide - ok
19:14:13.0104 7680	CNG             (247b4ce2dab1160cd422d532d5241e1f) C:\Windows\system32\Drivers\cng.sys
19:14:13.0238 7680	CNG - ok
19:14:13.0324 7680	Compbatt        (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
19:14:13.0406 7680	Compbatt - ok
19:14:13.0471 7680	CompositeBus    (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys
19:14:13.0498 7680	CompositeBus - ok
19:14:13.0519 7680	COMSysApp - ok
19:14:13.0541 7680	crcdisk         (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
19:14:13.0557 7680	crcdisk - ok
19:14:13.0721 7680	CryptSvc        (06e771aa596b8761107ab57e99f128d7) C:\Windows\system32\cryptsvc.dll
19:14:13.0895 7680	CryptSvc - ok
19:14:13.0930 7680	CVirtA          (b5ecadf7708960f1818c7fa015f4c239) C:\Windows\system32\DRIVERS\CVirtA.sys
19:14:13.0979 7680	CVirtA - ok
19:14:14.0052 7680	DcomLaunch      (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll
19:14:14.0143 7680	DcomLaunch - ok
19:14:14.0570 7680	defragsvc       (8d6e10a2d9a5eed59562d9b82cf804e1) C:\Windows\System32\defragsvc.dll
19:14:14.0637 7680	defragsvc - ok
19:14:14.0826 7680	DfsC            (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
19:14:14.0890 7680	DfsC - ok
19:14:15.0220 7680	Dhcp            (e9e01eb683c132f7fa27cd607b8a2b63) C:\Windows\system32\dhcpcore.dll
19:14:15.0328 7680	Dhcp - ok
19:14:15.0537 7680	discache        (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
19:14:15.0684 7680	discache - ok
19:14:15.0745 7680	Disk            (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
19:14:15.0768 7680	Disk - ok
19:14:15.0845 7680	DNE             (b5aa5aa5ac327bd7c1aec0c58f0c1144) C:\Windows\system32\DRIVERS\dne2000.sys
19:14:15.0861 7680	DNE - ok
19:14:15.0922 7680	Dnscache        (33ef4861f19a0736b11314aad9ae28d0) C:\Windows\System32\dnsrslvr.dll
19:14:15.0981 7680	Dnscache - ok
19:14:16.0574 7680	dot3svc         (366ba8fb4b7bb7435e3b9eacb3843f67) C:\Windows\System32\dot3svc.dll
19:14:16.0684 7680	dot3svc - ok
19:14:16.0997 7680	Dot4            (b5e479eb83707dd698f66953e922042c) C:\Windows\system32\DRIVERS\Dot4.sys
19:14:17.0044 7680	Dot4 - ok
19:14:17.0147 7680	Dot4Print       (caefd09b6a6249c53a67d55a9a9fcabf) C:\Windows\system32\drivers\Dot4Prt.sys
19:14:17.0199 7680	Dot4Print - ok
19:14:17.0246 7680	dot4usb         (cf491ff38d62143203c065260567e2f7) C:\Windows\system32\DRIVERS\dot4usb.sys
19:14:17.0278 7680	dot4usb - ok
19:14:17.0554 7680	DPS             (8ec04ca86f1d68da9e11952eb85973d6) C:\Windows\system32\dps.dll
19:14:17.0623 7680	DPS - ok
19:14:17.0775 7680	drmkaud         (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
19:14:17.0848 7680	drmkaud - ok
19:14:17.0929 7680	dtsoftbus01     (c0c7ceccb6c85994c2bc92d58e52d3f2) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
19:14:18.0016 7680	dtsoftbus01 - ok
19:14:18.0083 7680	DvmMDES         (f6b7c3e5749fe84e081860962dac9ea3) C:\ASUS.SYS\DVMExportService.exe
19:14:18.0116 7680	DvmMDES ( UnsignedFile.Multi.Generic ) - warning
19:14:18.0116 7680	DvmMDES - detected UnsignedFile.Multi.Generic (1)
19:14:18.0189 7680	DXGKrnl         (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
19:14:18.0298 7680	DXGKrnl - ok
19:14:18.0599 7680	EapHost         (8600142fa91c1b96367d3300ad0f3f3a) C:\Windows\System32\eapsvc.dll
19:14:18.0745 7680	EapHost - ok
19:14:22.0216 7680	ebdrv           (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
19:14:22.0575 7680	ebdrv - ok
19:14:24.0494 7680	EFS             (81951f51e318aecc2d68559e47485cc4) C:\Windows\System32\lsass.exe
19:14:24.0643 7680	EFS - ok
19:14:26.0130 7680	ehRecvr         (a8c362018efc87beb013ee28f29c0863) C:\Windows\ehome\ehRecvr.exe
19:14:26.0296 7680	ehRecvr - ok
19:14:26.0552 7680	ehSched         (d389bff34f80caede417bf9d1507996a) C:\Windows\ehome\ehsched.exe
19:14:26.0679 7680	ehSched - ok
19:14:28.0001 7680	elxstor         (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
19:14:28.0161 7680	elxstor - ok
19:14:28.0213 7680	ErrDev          (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
19:14:28.0250 7680	ErrDev - ok
19:14:29.0035 7680	EventSystem     (f6916efc29d9953d5d0df06882ae8e16) C:\Windows\system32\es.dll
19:14:29.0136 7680	EventSystem - ok
19:14:29.0269 7680	exfat           (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
19:14:29.0318 7680	exfat - ok
19:14:29.0724 7680	fastfat         (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
19:14:29.0790 7680	fastfat - ok
19:14:30.0907 7680	Fax             (967ea5b213e9984cbe270205df37755b) C:\Windows\system32\fxssvc.exe
19:14:31.0070 7680	Fax - ok
19:14:31.0274 7680	fdc             (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
19:14:31.0340 7680	fdc - ok
19:14:31.0462 7680	fdPHost         (f3222c893bd2f5821a0179e5c71e88fb) C:\Windows\system32\fdPHost.dll
19:14:31.0641 7680	fdPHost - ok
19:14:31.0668 7680	FDResPub        (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\Windows\system32\fdrespub.dll
19:14:31.0778 7680	FDResPub - ok
19:14:31.0789 7680	FileInfo        (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
19:14:31.0805 7680	FileInfo - ok
19:14:31.0822 7680	Filetrace       (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
19:14:31.0906 7680	Filetrace - ok
19:14:31.0994 7680	flpydisk        (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
19:14:32.0084 7680	flpydisk - ok
19:14:32.0157 7680	FltMgr          (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
19:14:32.0298 7680	FltMgr - ok
19:14:33.0644 7680	FontCache       (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\Windows\system32\FntCache.dll
19:14:33.0809 7680	FontCache - ok
19:14:34.0423 7680	FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
19:14:34.0438 7680	FontCache3.0.0.0 - ok
19:14:34.0506 7680	FsDepends       (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
19:14:34.0526 7680	FsDepends - ok
19:14:34.0631 7680	fssfltr         (b0082808a6856a252f7cdd939892ce50) C:\Windows\system32\DRIVERS\fssfltr.sys
19:14:34.0713 7680	fssfltr - ok
19:14:36.0731 7680	fsssvc          (28ddeeec44e988657b732cf404d504cb) C:\Program Files\Windows Live\Family Safety\fsssvc.exe
19:14:36.0872 7680	fsssvc - ok
19:14:38.0283 7680	Fs_Rec          (7dae5ebcc80e45d3253f4923dc424d05) C:\Windows\system32\drivers\Fs_Rec.sys
19:14:38.0339 7680	Fs_Rec - ok
19:14:39.0157 7680	fvevol          (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
19:14:39.0278 7680	fvevol - ok
19:14:39.0650 7680	gagp30kx        (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
19:14:39.0667 7680	gagp30kx - ok
19:14:41.0650 7680	gpsvc           (e897eaf5ed6ba41e081060c9b447a673) C:\Windows\System32\gpsvc.dll
19:14:41.0753 7680	gpsvc - ok
19:14:41.0806 7680	hcw85cir        (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
19:14:41.0919 7680	hcw85cir - ok
19:14:42.0532 7680	HDAudBus        (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys
19:14:42.0638 7680	HDAudBus - ok
19:14:42.0791 7680	HidBatt         (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
19:14:42.0879 7680	HidBatt - ok
19:14:43.0120 7680	HidBth          (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
19:14:43.0165 7680	HidBth - ok
19:14:43.0404 7680	HidIr           (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
19:14:43.0469 7680	HidIr - ok
19:14:43.0709 7680	hidserv         (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\Windows\system32\hidserv.dll
19:14:43.0793 7680	hidserv - ok
19:14:43.0855 7680	HidUsb          (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\DRIVERS\hidusb.sys
19:14:43.0873 7680	HidUsb - ok
19:14:44.0028 7680	hkmsvc          (196b4e3f4cccc24af836ce58facbb699) C:\Windows\system32\kmsvc.dll
19:14:44.0092 7680	hkmsvc - ok
19:14:44.0504 7680	HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\Windows\system32\ListSvc.dll
19:14:44.0647 7680	HomeGroupListener - ok
19:14:45.0080 7680	HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\Windows\system32\provsvc.dll
19:14:45.0164 7680	HomeGroupProvider - ok
19:14:46.0546 7680	hpqcxs08        (0a3c6aa4a9fc38c20ba4eac2c3351c05) C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
19:14:46.0623 7680	hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning
19:14:46.0623 7680	hpqcxs08 - detected UnsignedFile.Multi.Generic (1)
19:14:46.0884 7680	hpqddsvc        (f3f72a2a86c22610bca5439fa789dd52) C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
19:14:47.0066 7680	hpqddsvc ( UnsignedFile.Multi.Generic ) - warning
19:14:47.0066 7680	hpqddsvc - detected UnsignedFile.Multi.Generic (1)
19:14:47.0473 7680	HpSAMD          (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
19:14:47.0549 7680	HpSAMD - ok
19:14:47.0607 7680	HTCAND32        (950cc1e6ae3a6cd23e0945cde089b02c) C:\Windows\system32\Drivers\ANDROIDUSB.sys
19:14:47.0661 7680	HTCAND32 - ok
19:14:47.0710 7680	htcnprot        (339adefad60353f960e3ca67ce468c24) C:\Windows\system32\DRIVERS\htcnprot.sys
19:14:47.0735 7680	htcnprot - ok
19:14:49.0682 7680	HTTP            (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
19:14:49.0781 7680	HTTP - ok
19:14:49.0949 7680	hwpolicy        (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
19:14:49.0964 7680	hwpolicy - ok
19:14:50.0263 7680	i8042prt        (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
19:14:50.0388 7680	i8042prt - ok
19:14:50.0548 7680	iaStorV         (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys
19:14:50.0596 7680	iaStorV - ok
19:14:52.0133 7680	idsvc           (c521d7eb6497bb1af6afa89e322fb43c) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:14:52.0192 7680	idsvc - ok
19:14:53.0990 7680	iirsp           (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
19:14:54.0088 7680	iirsp - ok
19:14:56.0228 7680	IKEEXT          (f95622f161474511b8d80d6b093aa610) C:\Windows\System32\ikeext.dll
19:14:56.0333 7680	IKEEXT - ok
19:14:59.0883 7680	IntcAzAudAddService (43f5535aa4d6c75a37f70fb9c561cc9b) C:\Windows\system32\drivers\RTKVHDA.sys
19:15:00.0028 7680	IntcAzAudAddService - ok
19:15:01.0434 7680	intelide        (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
19:15:01.0450 7680	intelide - ok
19:15:01.0630 7680	intelppm        (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
19:15:01.0745 7680	intelppm - ok
19:15:02.0029 7680	IPBusEnum       (acb364b9075a45c0736e5c47be5cae19) C:\Windows\system32\ipbusenum.dll
19:15:02.0174 7680	IPBusEnum - ok
19:15:02.0213 7680	IpFilterDriver  (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:15:02.0314 7680	IpFilterDriver - ok
19:15:02.0395 7680	iphlpsvc        (4d65a07b795d6674312f879d09aa7663) C:\Windows\System32\iphlpsvc.dll
19:15:02.0486 7680	iphlpsvc - ok
19:15:02.0514 7680	IPMIDRV         (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
19:15:02.0534 7680	IPMIDRV - ok
19:15:02.0846 7680	IPNAT           (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
19:15:02.0952 7680	IPNAT - ok
19:15:03.0018 7680	IRENUM          (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
19:15:03.0099 7680	IRENUM - ok
19:15:03.0147 7680	isapnp          (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
19:15:03.0170 7680	isapnp - ok
19:15:03.0297 7680	iScsiPrt        (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
19:15:03.0319 7680	iScsiPrt - ok
19:15:03.0389 7680	kbdclass        (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
19:15:03.0405 7680	kbdclass - ok
19:15:03.0452 7680	kbdhid          (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\DRIVERS\kbdhid.sys
19:15:03.0491 7680	kbdhid - ok
19:15:03.0563 7680	kbfiltr         (27bd4ac228ef6c0d490617c32e86a672) C:\Windows\system32\DRIVERS\kbfiltr.sys
19:15:03.0577 7680	kbfiltr - ok
19:15:03.0611 7680	KeyIso          (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
19:15:03.0629 7680	KeyIso - ok
19:15:04.0201 7680	KSecDD          (b7895b4182c0d16f6efadeb8081e8d36) C:\Windows\system32\Drivers\ksecdd.sys
19:15:04.0269 7680	KSecDD - ok
19:15:04.0491 7680	KSecPkg         (d30159ac9237519fbc62c6ec247d2d46) C:\Windows\system32\Drivers\ksecpkg.sys
19:15:04.0513 7680	KSecPkg - ok
19:15:05.0255 7680	KtmRm           (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\Windows\system32\msdtckrm.dll
19:15:05.0373 7680	KtmRm - ok
19:15:05.0876 7680	LanmanServer    (d64af876d53eca3668bb97b51b4e70ab) C:\Windows\system32\srvsvc.dll
19:15:06.0002 7680	LanmanServer - ok
19:15:06.0076 7680	LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\Windows\System32\wkssvc.dll
19:15:06.0192 7680	LanmanWorkstation - ok
19:15:06.0290 7680	LHidFilt        (05d6b85ecc3204931923ab7940b9596e) C:\Windows\system32\DRIVERS\LHidFilt.Sys
19:15:06.0305 7680	LHidFilt - ok
19:15:06.0939 7680	LightScribeService (abf90fc5a127f481219b873c1b8dfc1c) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
19:15:06.0991 7680	LightScribeService ( UnsignedFile.Multi.Generic ) - warning
19:15:06.0991 7680	LightScribeService - detected UnsignedFile.Multi.Generic (1)
19:15:07.0367 7680	lirsgt          (f8a7212d0864ef5e9185fb95e6623f4d) C:\Windows\system32\DRIVERS\lirsgt.sys
19:15:07.0460 7680	lirsgt - ok
19:15:07.0543 7680	lltdio          (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
19:15:07.0701 7680	lltdio - ok
19:15:08.0233 7680	lltdsvc         (5700673e13a2117fa3b9020c852c01e2) C:\Windows\System32\lltdsvc.dll
19:15:08.0272 7680	lltdsvc - ok
19:15:08.0310 7680	lmhosts         (55ca01ba19d0006c8f2639b6c045e08b) C:\Windows\System32\lmhsvc.dll
19:15:08.0408 7680	lmhosts - ok
19:15:08.0530 7680	LMouFilt        (053dbcc1082fdf74ab145a71917a6556) C:\Windows\system32\DRIVERS\LMouFilt.Sys
19:15:08.0545 7680	LMouFilt - ok
19:15:08.0961 7680	LSI_FC          (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
19:15:09.0012 7680	LSI_FC - ok
19:15:09.0671 7680	LSI_SAS         (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
19:15:09.0753 7680	LSI_SAS - ok
19:15:09.0953 7680	LSI_SAS2        (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
19:15:09.0970 7680	LSI_SAS2 - ok
19:15:10.0255 7680	LSI_SCSI        (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
19:15:10.0271 7680	LSI_SCSI - ok
19:15:10.0680 7680	luafv           (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
19:15:10.0773 7680	luafv - ok
19:15:10.0909 7680	lullaby         (8039f480c192dd99fed4ebc71ffbf795) C:\Windows\system32\DRIVERS\lullaby.sys
19:15:10.0925 7680	lullaby - ok
19:15:11.0161 7680	MBAMSwissArmy   (0db7527db188c7d967a37bb51bbf3963) C:\Windows\system32\drivers\mbamswissarmy.sys
19:15:11.0297 7680	MBAMSwissArmy - ok
19:15:11.0456 7680	Mcx2Svc         (bfb9ee8ee977efe85d1a3105abef6dd1) C:\Windows\system32\Mcx2Svc.dll
19:15:11.0536 7680	Mcx2Svc - ok
19:15:11.0668 7680	megasas         (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
19:15:11.0688 7680	megasas - ok
19:15:11.0760 7680	MegaSR          (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
19:15:11.0787 7680	MegaSR - ok
19:15:12.0312 7680	Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
19:15:12.0331 7680	Microsoft Office Groove Audit Service - ok
19:15:12.0487 7680	MMCSS           (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
19:15:12.0563 7680	MMCSS - ok
19:15:12.0723 7680	Modem           (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
19:15:12.0835 7680	Modem - ok
19:15:12.0875 7680	monitor         (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
19:15:12.0920 7680	monitor - ok
19:15:13.0042 7680	mouclass        (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
19:15:13.0070 7680	mouclass - ok
19:15:13.0229 7680	mouhid          (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
19:15:13.0269 7680	mouhid - ok
19:15:13.0534 7680	mountmgr        (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
19:15:13.0560 7680	mountmgr - ok
19:15:13.0802 7680	mpio            (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
19:15:13.0820 7680	mpio - ok
19:15:14.0099 7680	mpsdrv          (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
19:15:14.0214 7680	mpsdrv - ok
19:15:16.0091 7680	MpsSvc          (9835584e999d25004e1ee8e5f3e3b881) C:\Windows\system32\mpssvc.dll
19:15:16.0192 7680	MpsSvc - ok
19:15:16.0482 7680	MRxDAV          (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
19:15:16.0589 7680	MRxDAV - ok
19:15:16.0663 7680	mrxsmb          (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
19:15:16.0782 7680	mrxsmb - ok
19:15:16.0848 7680	mrxsmb10        (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:15:16.0904 7680	mrxsmb10 - ok
19:15:16.0942 7680	mrxsmb20        (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:15:17.0023 7680	mrxsmb20 - ok
19:15:17.0046 7680	msahci          (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
19:15:17.0063 7680	msahci - ok
19:15:17.0087 7680	msdsm           (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
19:15:17.0106 7680	msdsm - ok
19:15:17.0172 7680	MSDTC           (e1bce74a3bd9902b72599c0192a07e27) C:\Windows\System32\msdtc.exe
19:15:17.0234 7680	MSDTC - ok
19:15:17.0308 7680	Msfs            (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
19:15:17.0351 7680	Msfs - ok
19:15:17.0383 7680	mshidkmdf       (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
19:15:17.0476 7680	mshidkmdf - ok
19:15:17.0535 7680	msisadrv        (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
19:15:17.0550 7680	msisadrv - ok
19:15:18.0023 7680	MSiSCSI         (90f7d9e6b6f27e1a707d4a297f077828) C:\Windows\system32\iscsiexe.dll
19:15:18.0132 7680	MSiSCSI - ok
19:15:18.0138 7680	msiserver - ok
19:15:18.0254 7680	MSKSSRV         (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
19:15:18.0324 7680	MSKSSRV - ok
19:15:18.0375 7680	MSPCLOCK        (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
19:15:18.0419 7680	MSPCLOCK - ok
19:15:18.0474 7680	MSPQM           (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
19:15:18.0533 7680	MSPQM - ok
19:15:18.0592 7680	MsRPC           (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
19:15:18.0610 7680	MsRPC - ok
19:15:18.0694 7680	mssmbios        (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys
19:15:18.0710 7680	mssmbios - ok
19:15:18.0826 7680	MSTEE           (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
19:15:18.0858 7680	MSTEE - ok
19:15:18.0881 7680	MTConfig        (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
19:15:18.0924 7680	MTConfig - ok
19:15:18.0995 7680	MTsensor        (97affa9d95ffe20eee6229bc6be166cf) C:\Windows\system32\DRIVERS\ATKACPI.sys
19:15:19.0148 7680	MTsensor - ok
19:15:19.0183 7680	Mup             (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
19:15:19.0201 7680	Mup - ok
19:15:20.0002 7680	napagent        (61d57a5d7c6d9afe10e77dae6e1b445e) C:\Windows\system32\qagentRT.dll
19:15:20.0084 7680	napagent - ok
19:15:21.0025 7680	NativeWifiP     (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
19:15:21.0122 7680	NativeWifiP - ok
19:15:23.0543 7680	NDIS            (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
19:15:23.0627 7680	NDIS - ok
19:15:23.0701 7680	NdisCap         (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
19:15:23.0830 7680	NdisCap - ok
19:15:23.0851 7680	NdisTapi        (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
19:15:23.0898 7680	NdisTapi - ok
19:15:24.0087 7680	Ndisuio         (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
19:15:24.0186 7680	Ndisuio - ok
19:15:24.0732 7680	NdisWan         (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
19:15:24.0823 7680	NdisWan - ok
19:15:24.0870 7680	NDProxy         (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
19:15:24.0949 7680	NDProxy - ok
19:15:25.0213 7680	Net Driver HPZ12 (a081cb6fb9a12668f233eb5414be3a0e) C:\Windows\system32\HPZinw12.dll
19:15:25.0248 7680	Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
19:15:25.0248 7680	Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
19:15:25.0398 7680	NetBIOS         (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
19:15:25.0481 7680	NetBIOS - ok
19:15:26.0248 7680	NetBT           (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
19:15:26.0321 7680	NetBT - ok
19:15:26.0396 7680	Netlogon        (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
19:15:26.0413 7680	Netlogon - ok
19:15:27.0376 7680	Netman          (7cccfca7510684768da22092d1fa4db2) C:\Windows\System32\netman.dll
19:15:27.0437 7680	Netman - ok
19:15:28.0892 7680	netprofm        (8c338238c16777a802d6a9211eb2ba50) C:\Windows\System32\netprofm.dll
19:15:28.0935 7680	netprofm - ok
19:15:29.0568 7680	NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:15:29.0585 7680	NetTcpPortSharing - ok
19:15:29.0867 7680	nfrd960         (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
19:15:29.0891 7680	nfrd960 - ok
19:15:29.0971 7680	NlaSvc          (912084381d30d8b89ec4e293053f4710) C:\Windows\System32\nlasvc.dll
19:15:30.0034 7680	NlaSvc - ok
19:15:30.0088 7680	Npfs            (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
19:15:30.0141 7680	Npfs - ok
19:15:30.0267 7680	nsi             (ba387e955e890c8a88306d9b8d06bf17) C:\Windows\system32\nsisvc.dll
19:15:30.0317 7680	nsi - ok
19:15:30.0436 7680	nsiproxy        (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
19:15:30.0483 7680	nsiproxy - ok
19:15:34.0083 7680	Ntfs            (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys
19:15:34.0162 7680	Ntfs - ok
19:15:37.0367 7680	Null            (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
19:15:37.0400 7680	Null - ok
19:15:41.0240 7680	nvlddmkm        (c593ca398f26b34b71b0579ceb6ffaa5) C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:15:41.0680 7680	nvlddmkm - ok
19:15:42.0410 7680	nvraid          (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys
19:15:42.0428 7680	nvraid - ok
19:15:42.0674 7680	nvstor          (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys
19:15:42.0697 7680	nvstor - ok
19:15:43.0123 7680	nvsvc           (3d207c5cf5f65a1f31c9f0260725ae82) C:\Windows\system32\nvvsvc.exe
19:15:43.0176 7680	nvsvc - ok
19:15:44.0325 7680	nvUpdatusService (5ba460f39d2d4032ee8c5474192d5a11) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
19:15:44.0417 7680	nvUpdatusService - ok
19:15:45.0301 7680	nv_agp          (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
19:15:45.0320 7680	nv_agp - ok
19:15:46.0557 7680	odserv          (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
19:15:46.0623 7680	odserv - ok
19:15:46.0778 7680	ohci1394        (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
19:15:46.0856 7680	ohci1394 - ok
19:15:47.0308 7680	ose             (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:15:47.0373 7680	ose - ok
19:15:47.0859 7680	p2pimsvc        (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
19:15:47.0947 7680	p2pimsvc - ok
19:15:48.0549 7680	p2psvc          (59c3ddd501e39e006dac31bf55150d91) C:\Windows\system32\p2psvc.dll
19:15:48.0613 7680	p2psvc - ok
19:15:48.0769 7680	Parport         (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
19:15:48.0955 7680	Parport - ok
19:15:49.0132 7680	partmgr         (3f34a1b4c5f6475f320c275e63afce9b) C:\Windows\system32\drivers\partmgr.sys
19:15:49.0149 7680	partmgr - ok
19:15:49.0203 7680	Parvdm          (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
19:15:49.0248 7680	Parvdm - ok
19:15:49.0619 7680	PassThru Service (39b9dcd7040654c2e57d7396736c718e) C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
19:15:49.0685 7680	PassThru Service ( UnsignedFile.Multi.Generic ) - warning
19:15:49.0685 7680	PassThru Service - detected UnsignedFile.Multi.Generic (1)
19:15:49.0834 7680	PcaSvc          (358ab7956d3160000726574083dfc8a6) C:\Windows\System32\pcasvc.dll
19:15:49.0863 7680	PcaSvc - ok
19:15:50.0259 7680	pci             (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
19:15:50.0343 7680	pci - ok
19:15:50.0389 7680	pciide          (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
19:15:50.0407 7680	pciide - ok
19:15:50.0777 7680	pcmcia          (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
19:15:50.0796 7680	pcmcia - ok
19:15:50.0852 7680	pcw             (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
19:15:50.0868 7680	pcw - ok
19:15:51.0870 7680	PEAUTH          (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
19:15:51.0975 7680	PEAUTH - ok
19:15:54.0096 7680	pla             (414bba67a3ded1d28437eb66aeb8a720) C:\Windows\system32\pla.dll
19:15:54.0182 7680	pla - ok
19:15:55.0713 7680	PlugPlay        (ec7bc28d207da09e79b3e9faf8b232ca) C:\Windows\system32\umpnpmgr.dll
19:15:55.0846 7680	PlugPlay - ok
19:15:55.0889 7680	Pml Driver HPZ12 (65bc271f337637731d3c71455ae1f476) C:\Windows\system32\HPZipm12.dll
19:15:55.0918 7680	Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
19:15:55.0918 7680	Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
19:15:56.0005 7680	PNRPAutoReg     (63ff8572611249931eb16bb8eed6afc8) C:\Windows\system32\pnrpauto.dll
19:15:56.0126 7680	PNRPAutoReg - ok
19:15:56.0696 7680	PNRPsvc         (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
19:15:56.0719 7680	PNRPsvc - ok
19:15:57.0242 7680	PolicyAgent     (53946b69ba0836bd95b03759530c81ec) C:\Windows\System32\ipsecsvc.dll
19:15:57.0335 7680	PolicyAgent - ok
19:15:57.0627 7680	Power           (f87d30e72e03d579a5199ccb3831d6ea) C:\Windows\system32\umpo.dll
19:15:57.0666 7680	Power - ok
19:15:58.0089 7680	PptpMiniport    (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
19:15:58.0201 7680	PptpMiniport - ok
19:15:58.0251 7680	Processor       (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
19:15:58.0308 7680	Processor - ok
19:15:58.0373 7680	ProfSvc         (cadefac453040e370a1bdff3973be00d) C:\Windows\system32\profsvc.dll
19:15:58.0461 7680	ProfSvc - ok
19:15:58.0495 7680	ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
19:15:58.0512 7680	ProtectedStorage - ok
19:15:58.0862 7680	Psched          (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
19:15:58.0921 7680	Psched - ok
19:16:01.0800 7680	ql2300          (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
19:16:01.0915 7680	ql2300 - ok
19:16:03.0689 7680	ql40xx          (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
19:16:03.0714 7680	ql40xx - ok
19:16:04.0153 7680	QWAVE           (31ac809e7707eb580b2bdb760390765a) C:\Windows\system32\qwave.dll
19:16:04.0252 7680	QWAVE - ok
19:16:04.0294 7680	QWAVEdrv        (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
19:16:04.0314 7680	QWAVEdrv - ok
19:16:04.0815 7680	RapiMgr         (8f97d374ad1857e1eed85a79f29a1d3d) C:\Windows\WindowsMobile\rapimgr.dll
19:16:04.0833 7680	RapiMgr - ok
19:16:04.0919 7680	RasAcd          (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
19:16:05.0008 7680	RasAcd - ok
19:16:05.0096 7680	RasAgileVpn     (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
19:16:05.0128 7680	RasAgileVpn - ok
19:16:05.0432 7680	RasAuto         (a60f1839849c0c00739787fd5ec03f13) C:\Windows\System32\rasauto.dll
19:16:05.0488 7680	RasAuto - ok
19:16:05.0685 7680	Rasl2tp         (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
19:16:05.0720 7680	Rasl2tp - ok
19:16:06.0366 7680	RasMan          (cb9e04dc05eacf5b9a36ca276d475006) C:\Windows\System32\rasmans.dll
19:16:06.0448 7680	RasMan - ok
19:16:06.0832 7680	RasPppoe        (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
19:16:06.0915 7680	RasPppoe - ok
19:16:07.0189 7680	RasSstp         (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
19:16:07.0266 7680	RasSstp - ok
19:16:08.0012 7680	rdbss           (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
19:16:08.0087 7680	rdbss - ok
19:16:08.0158 7680	rdpbus          (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
19:16:08.0249 7680	rdpbus - ok
19:16:08.0342 7680	RDPCDD          (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
19:16:08.0442 7680	RDPCDD - ok
19:16:08.0499 7680	RDPENCDD        (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
19:16:08.0545 7680	RDPENCDD - ok
19:16:08.0638 7680	RDPREFMP        (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
19:16:08.0668 7680	RDPREFMP - ok
19:16:09.0169 7680	RDPWD           (f031683e6d1fea157abb2ff260b51e61) C:\Windows\system32\drivers\RDPWD.sys
19:16:09.0314 7680	RDPWD - ok
19:16:09.0623 7680	rdyboost        (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
19:16:09.0673 7680	rdyboost - ok
19:16:09.0826 7680	RemoteAccess    (7b5e1419717fac363a31cc302895217a) C:\Windows\System32\mprdim.dll
19:16:09.0907 7680	RemoteAccess - ok
19:16:10.0055 7680	RemoteRegistry  (cb9a8683f4ef2bf99e123d79950d7935) C:\Windows\system32\regsvc.dll
19:16:10.0151 7680	RemoteRegistry - ok
19:16:10.0193 7680	RpcEptMapper    (78d072f35bc45d9e4e1b61895c152234) C:\Windows\System32\RpcEpMap.dll
19:16:10.0247 7680	RpcEptMapper - ok
19:16:10.0332 7680	RpcLocator      (94d36c0e44677dd26981d2bfeef2a29d) C:\Windows\system32\locator.exe
19:16:10.0360 7680	RpcLocator - ok
19:16:11.0358 7680	RpcSs           (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll
19:16:11.0395 7680	RpcSs - ok
19:16:11.0507 7680	rspndr          (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
19:16:11.0578 7680	rspndr - ok
19:16:11.0708 7680	RTSTOR          (830b682cb24206f457ea8a617605209f) C:\Windows\system32\drivers\RTSTOR.SYS
19:16:11.0741 7680	RTSTOR - ok
19:16:11.0845 7680	SamSs           (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
19:16:11.0861 7680	SamSs - ok
19:16:11.0939 7680	sbp2port        (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
19:16:11.0961 7680	sbp2port - ok
19:16:12.0150 7680	SCardSvr        (8fc518ffe9519c2631d37515a68009c4) C:\Windows\System32\SCardSvr.dll
19:16:12.0197 7680	SCardSvr - ok
19:16:12.0274 7680	scfilter        (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
19:16:12.0318 7680	scfilter - ok
19:16:13.0723 7680	Schedule        (a04bb13f8a72f8b6e8b4071723e4e336) C:\Windows\system32\schedsvc.dll
19:16:13.0834 7680	Schedule - ok
19:16:13.0984 7680	SCPolicySvc     (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll
19:16:14.0013 7680	SCPolicySvc - ok
19:16:14.0432 7680	SDRSVC          (08236c4bce5edd0a0318a438af28e0f7) C:\Windows\System32\SDRSVC.dll
19:16:14.0525 7680	SDRSVC - ok
19:16:14.0611 7680	secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
19:16:14.0665 7680	secdrv - ok
19:16:14.0779 7680	seclogon        (a59b3a4442c52060cc7a85293aa3546f) C:\Windows\system32\seclogon.dll
19:16:14.0889 7680	seclogon - ok
19:16:14.0922 7680	SENS            (dcb7fcdcc97f87360f75d77425b81737) C:\Windows\System32\sens.dll
19:16:15.0011 7680	SENS - ok
19:16:15.0124 7680	SensrSvc        (50087fe1ee447009c9cc2997b90de53f) C:\Windows\system32\sensrsvc.dll
19:16:15.0191 7680	SensrSvc - ok
19:16:15.0258 7680	Serenum         (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
19:16:15.0276 7680	Serenum - ok
19:16:15.0577 7680	Serial          (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
19:16:15.0659 7680	Serial - ok
19:16:15.0820 7680	sermouse        (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
19:16:15.0868 7680	sermouse - ok
19:16:16.0122 7680	SessionEnv      (4ae380f39a0032eab7dd953030b26d28) C:\Windows\system32\sessenv.dll
19:16:16.0234 7680	SessionEnv - ok
19:16:16.0286 7680	sfdrv01         (4c0d673281178cb496011a2e28571fc8) C:\Windows\system32\drivers\sfdrv01.sys
19:16:16.0294 7680	sfdrv01 ( UnsignedFile.Multi.Generic ) - warning
19:16:16.0294 7680	sfdrv01 - detected UnsignedFile.Multi.Generic (1)
19:16:16.0315 7680	sffdisk         (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
19:16:16.0334 7680	sffdisk - ok
19:16:16.0357 7680	sffp_mmc        (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
19:16:16.0469 7680	sffp_mmc - ok
19:16:16.0480 7680	sffp_sd         (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys
19:16:16.0499 7680	sffp_sd - ok
19:16:16.0539 7680	sfhlp02         (15be2b5e4dc5b8623cf167720682abc9) C:\Windows\system32\drivers\sfhlp02.sys
19:16:16.0546 7680	sfhlp02 ( UnsignedFile.Multi.Generic ) - warning
19:16:16.0546 7680	sfhlp02 - detected UnsignedFile.Multi.Generic (1)
19:16:16.0640 7680	sfloppy         (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
19:16:16.0674 7680	sfloppy - ok
19:16:17.0078 7680	sfvfs02         (d5a7e09d2c6a702809e49190d52adc9f) C:\Windows\system32\drivers\sfvfs02.sys
19:16:17.0169 7680	sfvfs02 ( UnsignedFile.Multi.Generic ) - warning
19:16:17.0169 7680	sfvfs02 - detected UnsignedFile.Multi.Generic (1)
19:16:17.0245 7680	SharedAccess    (d1a079a0de2ea524513b6930c24527a2) C:\Windows\System32\ipnathlp.dll
19:16:17.0350 7680	SharedAccess - ok
19:16:18.0013 7680	ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\Windows\System32\shsvcs.dll
19:16:18.0110 7680	ShellHWDetection - ok
19:16:18.0403 7680	sisagp          (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
19:16:18.0465 7680	sisagp - ok
19:16:18.0766 7680	SiSGbeLH        (6f0c643c7f49f2091b01d014eae72e1a) C:\Windows\system32\DRIVERS\SiSGB6.sys
19:16:18.0841 7680	SiSGbeLH - ok
19:16:18.0909 7680	SiSRaid2        (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
19:16:18.0927 7680	SiSRaid2 - ok
19:16:18.0943 7680	SiSRaid4        (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
19:16:18.0962 7680	SiSRaid4 - ok
19:16:18.0998 7680	Smb             (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
19:16:19.0030 7680	Smb - ok
19:16:19.0144 7680	SNMPTRAP        (6a984831644eca1a33ffeae4126f4f37) C:\Windows\System32\snmptrap.exe
19:16:19.0172 7680	SNMPTRAP - ok
19:16:21.0987 7680	SNP2UVC         (a709dfa1674c1ed61ef7b5f29b38eeb1) C:\Windows\system32\DRIVERS\snp2uvc.sys
19:16:22.0151 7680	SNP2UVC - ok
19:16:24.0206 7680	spldr           (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
19:16:24.0234 7680	spldr - ok
19:16:24.0512 7680	Spooler         (866a43013535dc8587c258e43579c764) C:\Windows\System32\spoolsv.exe
19:16:24.0573 7680	Spooler - ok
19:16:27.0484 7680	sppsvc          (cf87a1de791347e75b98885214ced2b8) C:\Windows\system32\sppsvc.exe
19:16:27.0631 7680	sppsvc - ok
19:16:28.0600 7680	sppuinotify     (b0180b20b065d89232a78a40fe56eaa6) C:\Windows\system32\sppuinotify.dll
19:16:28.0794 7680	sppuinotify - ok
19:16:29.0715 7680	sptd            (cdddec541bc3c96f91ecb48759673505) C:\Windows\System32\Drivers\sptd.sys
19:16:29.0771 7680	sptd - ok
19:16:29.0830 7680	srv             (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys
19:16:29.0869 7680	srv - ok
19:16:29.0954 7680	srv2            (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys
19:16:30.0004 7680	srv2 - ok
19:16:30.0216 7680	srvnet          (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys
19:16:30.0274 7680	srvnet - ok
19:16:30.0328 7680	SSDPSRV         (d887c9fd02ac9fa880f6e5027a43e118) C:\Windows\System32\ssdpsrv.dll
19:16:30.0366 7680	SSDPSRV - ok
19:16:30.0441 7680	ssmdrv          (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys
19:16:30.0456 7680	ssmdrv - ok
19:16:30.0527 7680	SstpSvc         (d318f23be45d5e3a107469eb64815b50) C:\Windows\system32\sstpsvc.dll
19:16:30.0578 7680	SstpSvc - ok
19:16:31.0510 7680	Stereo Service  (a8f1a34f855887fc721dc9539223b543) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
19:16:31.0529 7680	Stereo Service - ok
19:16:31.0612 7680	stexstor        (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
19:16:31.0662 7680	stexstor - ok
19:16:32.0270 7680	StiSvc          (e1fb3706030fb4578a0d72c2fc3689e4) C:\Windows\System32\wiaservc.dll
19:16:32.0332 7680	StiSvc - ok
19:16:32.0399 7680	swenum          (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\drivers\swenum.sys
19:16:32.0420 7680	swenum - ok
19:16:32.0611 7680	swprv           (a28bd92df340e57b024ba433165d34d7) C:\Windows\System32\swprv.dll
19:16:32.0683 7680	swprv - ok
19:16:32.0908 7680	SynTP           (55f6e55cc2430ca8713387106fa79817) C:\Windows\system32\DRIVERS\SynTP.sys
19:16:32.0999 7680	SynTP - ok
19:16:33.0455 7680	SysMain         (36650d618ca34c9d357dfd3d89b2c56f) C:\Windows\system32\sysmain.dll
19:16:33.0540 7680	SysMain - ok
19:16:33.0802 7680	TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\Windows\System32\TabSvc.dll
19:16:33.0833 7680	TabletInputService - ok
19:16:33.0986 7680	TapiSrv         (613bf4820361543956909043a265c6ac) C:\Windows\System32\tapisrv.dll
19:16:34.0043 7680	TapiSrv - ok
19:16:34.0090 7680	TBS             (b799d9fdb26111737f58288d8dc172d9) C:\Windows\System32\tbssvc.dll
19:16:34.0128 7680	TBS - ok
19:16:34.0319 7680	Tcpip           (7fa2e0f8b072bd04b77b421480b6cc22) C:\Windows\system32\drivers\tcpip.sys
19:16:34.0389 7680	Tcpip - ok
19:16:35.0493 7680	TCPIP6          (7fa2e0f8b072bd04b77b421480b6cc22) C:\Windows\system32\DRIVERS\tcpip.sys
19:16:35.0530 7680	TCPIP6 - ok
19:16:36.0218 7680	tcpipreg        (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys
19:16:36.0248 7680	tcpipreg - ok
19:16:36.0368 7680	TDPIPE          (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys
19:16:36.0462 7680	TDPIPE - ok
19:16:36.0577 7680	TDTCP           (2c2c5afe7ee4f620d69c23c0617651a8) C:\Windows\system32\drivers\tdtcp.sys
19:16:36.0621 7680	TDTCP - ok
19:16:36.0721 7680	tdx             (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys
19:16:36.0763 7680	tdx - ok
19:16:37.0332 7680	TermDD          (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\drivers\termdd.sys
19:16:37.0349 7680	TermDD - ok
19:16:37.0609 7680	TermService     (382c804c92811be57829d8e550a900e2) C:\Windows\System32\termsrv.dll
19:16:37.0718 7680	TermService - ok
19:16:37.0855 7680	Themes          (42fb6afd6b79d9fe07381609172e7ca4) C:\Windows\system32\themeservice.dll
19:16:37.0878 7680	Themes - ok
19:16:37.0942 7680	THREADORDER     (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
19:16:37.0976 7680	THREADORDER - ok
19:16:38.0143 7680	TrkWks          (4792c0378db99a9bc2ae2de6cfff0c3a) C:\Windows\System32\trkwks.dll
19:16:38.0260 7680	TrkWks - ok
19:16:38.0460 7680	TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\Windows\servicing\TrustedInstaller.exe
19:16:38.0565 7680	TrustedInstaller - ok
19:16:38.0605 7680	tssecsrv        (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys
19:16:38.0661 7680	tssecsrv - ok
19:16:38.0713 7680	TsUsbFlt        (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys
19:16:38.0758 7680	TsUsbFlt - ok
19:16:39.0008 7680	tunnel          (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys
19:16:39.0051 7680	tunnel - ok
19:16:39.0218 7680	uagp35          (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
19:16:39.0267 7680	uagp35 - ok
19:16:39.0501 7680	udfs            (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys
19:16:39.0549 7680	udfs - ok
19:16:39.0718 7680	UI0Detect       (8344fd4fce927880aa1aa7681d4927e5) C:\Windows\system32\UI0Detect.exe
19:16:39.0835 7680	UI0Detect - ok
19:16:39.0896 7680	uliagpkx        (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys
19:16:39.0915 7680	uliagpkx - ok
19:16:39.0956 7680	umbus           (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\drivers\umbus.sys
19:16:40.0020 7680	umbus - ok
19:16:40.0100 7680	UmPass          (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
19:16:40.0128 7680	UmPass - ok
19:16:40.0209 7680	upnphost        (833fbb672460efce8011d262175fad33) C:\Windows\System32\upnphost.dll
19:16:40.0247 7680	upnphost - ok
19:16:40.0337 7680	USBAAPL         (d4fb6ecc60a428564ba8768b0e23c0fc) C:\Windows\system32\Drivers\usbaapl.sys
19:16:40.0411 7680	USBAAPL ( UnsignedFile.Multi.Generic ) - warning
19:16:40.0411 7680	USBAAPL - detected UnsignedFile.Multi.Generic (1)
19:16:40.0474 7680	usbaudio        (1d9f2bd026e8e2d45033a4df3f16b78c) C:\Windows\system32\drivers\usbaudio.sys
19:16:40.0504 7680	usbaudio - ok
19:16:40.0530 7680	usbccgp         (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\DRIVERS\usbccgp.sys
19:16:40.0598 7680	usbccgp - ok
19:16:40.0654 7680	usbcir          (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys
19:16:40.0688 7680	usbcir - ok
19:16:40.0709 7680	usbehci         (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\DRIVERS\usbehci.sys
19:16:40.0739 7680	usbehci - ok
19:16:40.0790 7680	usbhub          (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys
19:16:40.0913 7680	usbhub - ok
19:16:40.0930 7680	usbohci         (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\DRIVERS\usbohci.sys
19:16:40.0966 7680	usbohci - ok
19:16:41.0075 7680	usbprint        (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
19:16:41.0113 7680	usbprint - ok
19:16:41.0166 7680	usbscan         (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
19:16:41.0241 7680	usbscan - ok
19:16:41.0341 7680	USBSTOR         (f991ab9cc6b908db552166768176896a) C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:16:41.0412 7680	USBSTOR - ok
19:16:41.0529 7680	usbuhci         (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\drivers\usbuhci.sys
19:16:41.0551 7680	usbuhci - ok
19:16:41.0631 7680	UxSms           (081e6e1c91aec36758902a9f727cd23c) C:\Windows\System32\uxsms.dll
19:16:41.0679 7680	UxSms - ok
19:16:41.0824 7680	VaultSvc        (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
19:16:41.0841 7680	VaultSvc - ok
19:16:41.0889 7680	vdrvroot        (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys
19:16:41.0908 7680	vdrvroot - ok
19:16:42.0057 7680	vds             (c3cd30495687c2a2f66a65ca6fd89be9) C:\Windows\System32\vds.exe
19:16:42.0129 7680	vds - ok
19:16:42.0219 7680	vga             (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
19:16:42.0242 7680	vga - ok
19:16:42.0450 7680	VgaSave         (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
19:16:42.0492 7680	VgaSave - ok
19:16:42.0699 7680	vhdmp           (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys
19:16:42.0722 7680	vhdmp - ok
19:16:42.0811 7680	viaagp          (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys
19:16:42.0828 7680	viaagp - ok
19:16:42.0967 7680	ViaC7           (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
19:16:43.0019 7680	ViaC7 - ok
19:16:43.0116 7680	viaide          (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys
19:16:43.0158 7680	viaide - ok
19:16:43.0174 7680	volmgr          (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys
19:16:43.0191 7680	volmgr - ok
19:16:43.0669 7680	volmgrx         (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
19:16:43.0716 7680	volmgrx - ok
19:16:43.0906 7680	volsnap         (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys
19:16:43.0962 7680	volsnap - ok
19:16:44.0059 7680	vsmraid         (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
19:16:44.0082 7680	vsmraid - ok
19:16:44.0289 7680	VSS             (209a3b1901b83aeb8527ed211cce9e4c) C:\Windows\system32\vssvc.exe
19:16:44.0395 7680	VSS - ok
19:16:44.0444 7680	vwifibus        (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\system32\DRIVERS\vwifibus.sys
19:16:44.0488 7680	vwifibus - ok
19:16:44.0560 7680	vwififlt        (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys
19:16:44.0595 7680	vwififlt - ok
19:16:44.0934 7680	W32Time         (55187fd710e27d5095d10a472c8baf1c) C:\Windows\system32\w32time.dll
19:16:45.0012 7680	W32Time - ok
19:16:45.0062 7680	WacomPen        (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
19:16:45.0133 7680	WacomPen - ok
19:16:45.0215 7680	WANARP          (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
19:16:45.0270 7680	WANARP - ok
19:16:45.0276 7680	Wanarpv6        (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
19:16:45.0306 7680	Wanarpv6 - ok
19:16:46.0428 7680	wbengine        (691e3285e53dca558e1a84667f13e15a) C:\Windows\system32\wbengine.exe
19:16:46.0567 7680	wbengine - ok
19:16:46.0865 7680	WbioSrvc        (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\Windows\System32\wbiosrvc.dll
19:16:46.0946 7680	WbioSrvc - ok
19:16:47.0936 7680	WcesComm        (59e19bd13c3bdb857646b9e436ba27f7) C:\Windows\WindowsMobile\wcescomm.dll
19:16:48.0090 7680	WcesComm - ok
19:16:48.0229 7680	wcncsvc         (34eee0dfaadb4f691d6d5308a51315dc) C:\Windows\System32\wcncsvc.dll
19:16:48.0299 7680	wcncsvc - ok
19:16:48.0405 7680	WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\Windows\System32\WcsPlugInService.dll
19:16:48.0535 7680	WcsPlugInService - ok
19:16:48.0835 7680	Wd              (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
19:16:48.0865 7680	Wd - ok
19:16:49.0578 7680	Wdf01000        (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
19:16:49.0654 7680	Wdf01000 - ok
19:16:49.0675 7680	WdiServiceHost  (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
19:16:49.0838 7680	WdiServiceHost - ok
19:16:49.0843 7680	WdiSystemHost   (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
19:16:49.0865 7680	WdiSystemHost - ok
19:16:50.0040 7680	WebClient       (a9d880f97530d5b8fee278923349929d) C:\Windows\System32\webclnt.dll
19:16:50.0120 7680	WebClient - ok
19:16:50.0532 7680	Wecsvc          (760f0afe937a77cff27153206534f275) C:\Windows\system32\wecsvc.dll
19:16:50.0590 7680	Wecsvc - ok
19:16:50.0782 7680	wercplsupport   (ac804569bb2364fb6017370258a4091b) C:\Windows\System32\wercplsupport.dll
19:16:50.0823 7680	wercplsupport - ok
19:16:50.0876 7680	WerSvc          (08e420d873e4fd85241ee2421b02c4a4) C:\Windows\System32\WerSvc.dll
19:16:50.0909 7680	WerSvc - ok
19:16:51.0015 7680	WfpLwf          (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
19:16:51.0055 7680	WfpLwf - ok
19:16:51.0095 7680	WIMMount        (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
19:16:51.0114 7680	WIMMount - ok
19:16:51.0839 7680	WinDefend       (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll
19:16:52.0000 7680	WinDefend - ok
19:16:52.0009 7680	WinHttpAutoProxySvc - ok
19:16:52.0324 7680	Winmgmt         (f62e510b6ad4c21eb9fe8668ed251826) C:\Windows\system32\wbem\WMIsvc.dll
19:16:52.0384 7680	Winmgmt - ok
19:16:53.0525 7680	WinRM           (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\Windows\system32\WsmSvc.dll
19:16:53.0698 7680	WinRM - ok
19:16:53.0881 7680	WINUSB          (a67e5f9a400f3bd1be3d80613b45f708) C:\Windows\system32\DRIVERS\WinUsb.sys
19:16:53.0914 7680	WINUSB - ok
19:16:54.0538 7680	Wlansvc         (16935c98ff639d185086a3529b1f2067) C:\Windows\System32\wlansvc.dll
19:16:54.0609 7680	Wlansvc - ok
19:16:56.0342 7680	wlidsvc         (fb01d4ae207b9efdbabfc55dc95c7e31) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:16:56.0469 7680	wlidsvc - ok
19:16:57.0429 7680	WmiAcpi         (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys
19:16:57.0449 7680	WmiAcpi - ok
19:16:57.0675 7680	wmiApSrv        (6eb6b66517b048d87dc1856ddf1f4c3f) C:\Windows\system32\wbem\WmiApSrv.exe
19:16:57.0788 7680	wmiApSrv - ok
19:16:59.0120 7680	WMPNetworkSvc   (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe
19:16:59.0228 7680	WMPNetworkSvc - ok
19:16:59.0869 7680	WPCSvc          (a2f0ec770a92f2b3f9de6d518e11409c) C:\Windows\System32\wpcsvc.dll
19:16:59.0922 7680	WPCSvc - ok
19:17:00.0069 7680	WPDBusEnum      (aa53356d60af47eacc85bc617a4f3f66) C:\Windows\system32\wpdbusenum.dll
19:17:00.0146 7680	WPDBusEnum - ok
19:17:00.0311 7680	ws2ifsl         (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
19:17:00.0371 7680	ws2ifsl - ok
19:17:00.0453 7680	wscsvc          (6f5d49efe0e7164e03ae773a3fe25340) C:\Windows\System32\wscsvc.dll
19:17:00.0487 7680	wscsvc - ok
19:17:00.0493 7680	WSearch - ok
19:17:02.0043 7680	wuauserv        (fc3ec24fce372c89423e015a2ac1a31e) C:\Windows\system32\wuaueng.dll
19:17:02.0146 7680	wuauserv - ok
19:17:03.0599 7680	WudfPf          (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys
19:17:03.0632 7680	WudfPf - ok
19:17:03.0883 7680	WUDFRd          (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys
19:17:03.0917 7680	WUDFRd - ok
19:17:04.0102 7680	wudfsvc         (8d1e1e529a2c9e9b6a85b55a345f7629) C:\Windows\System32\WUDFSvc.dll
19:17:04.0137 7680	wudfsvc - ok
19:17:04.0428 7680	WwanSvc         (ff2d745b560f7c71b31f30f4d49f73d2) C:\Windows\System32\wwansvc.dll
19:17:04.0515 7680	WwanSvc - ok
19:17:04.0586 7680	MBR (0x1B8)     (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
19:17:09.0503 7680	\Device\Harddisk0\DR0 - ok
19:17:09.0582 7680	Boot (0x1200)   (b0db6d43ddd578d9fc39c5adfce039d3) \Device\Harddisk0\DR0\Partition0
19:17:09.0589 7680	\Device\Harddisk0\DR0\Partition0 - ok
19:17:09.0602 7680	Boot (0x1200)   (dde6d37ffcad197e240283a37cca4e88) \Device\Harddisk0\DR0\Partition1
19:17:09.0605 7680	\Device\Harddisk0\DR0\Partition1 - ok
19:17:09.0606 7680	============================================================
19:17:09.0606 7680	Scan finished
19:17:09.0606 7680	============================================================
19:17:09.0630 7112	Detected object count: 12
19:17:09.0630 7112	Actual detected object count: 12
19:45:43.0069 7112	ATKGFNEXSrv ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0070 7112	ATKGFNEXSrv ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:45:43.0073 7112	DvmMDES ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0073 7112	DvmMDES ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:45:43.0076 7112	hpqcxs08 ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0077 7112	hpqcxs08 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:45:43.0081 7112	hpqddsvc ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0081 7112	hpqddsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:45:43.0085 7112	LightScribeService ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0085 7112	LightScribeService ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:45:43.0088 7112	Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0088 7112	Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:45:43.0091 7112	PassThru Service ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0092 7112	PassThru Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:45:43.0097 7112	Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0097 7112	Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:45:43.0100 7112	sfdrv01 ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0100 7112	sfdrv01 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:45:43.0104 7112	sfhlp02 ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0104 7112	sfhlp02 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:45:43.0108 7112	sfvfs02 ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0108 7112	sfvfs02 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:45:43.0113 7112	USBAAPL ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0113 7112	USBAAPL ( UnsignedFile.Multi.Generic ) - User select action: Skip
         

Alt 08.08.2012, 19:11   #22
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 13.08.2012, 08:38   #23
Hypothetix
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



GUten Morgen,

nach Ausführung von CF bisher keine gemeldeten Probleme vom Rechner (Registrierungsschlüssel ungültig etc.)

Code:
ATTFilter
ComboFix 12-08-09.01 - *** 11.08.2012  16:02:53.1.2 - x86
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3071.2008 [GMT 2:00]
ausgeführt von:: c:\users\***\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Outdated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Outdated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Common Files\ASPG_icon.ico
c:\windows\security\Database\tmp.edb
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-07-11 bis 2012-08-11  ))))))))))))))))))))))))))))))
.
.
2012-08-11 14:12 . 2012-08-11 14:12	--------	d-----w-	c:\users\***\AppData\Local\temp
2012-08-11 14:12 . 2012-08-11 14:12	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2012-08-11 13:33 . 2012-06-29 08:44	6891424	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6B273A6-3F84-4AF9-B2E0-A44C521D20E7}\mpengine.dll
2012-08-03 13:17 . 2012-08-03 13:17	--------	d-----w-	C:\dvmexp
2012-08-03 13:04 . 2012-08-03 13:04	--------	d-----w-	C:\_OTL
2012-07-26 12:37 . 2012-07-26 12:37	--------	d-----w-	c:\program files\ESET
2012-07-26 10:10 . 2012-07-26 10:11	40776	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2012-07-21 12:59 . 2012-07-21 12:59	--------	d-----w-	c:\users\User2\AppData\Local\Macromedia
2012-07-18 23:12 . 2012-07-18 23:12	--------	d-----w-	c:\users\***\AppData\Local\theHunter
2012-07-18 23:04 . 2012-07-18 23:04	--------	d-----w-	c:\users\***\AppData\Roaming\CyberLink
2012-07-18 23:04 . 2012-07-18 23:04	--------	d-----w-	c:\users\Public\CyberLink
2012-07-15 18:12 . 2012-06-06 05:05	352256	----a-w-	c:\program files\Common Files\System\ado\msadomd.dll
2012-07-15 18:12 . 2012-06-06 05:05	1019904	----a-w-	c:\program files\Common Files\System\ado\msado15.dll
2012-07-15 18:12 . 2012-06-06 05:03	805376	----a-w-	c:\windows\system32\cdosys.dll
2012-07-15 18:12 . 2012-06-06 05:05	143360	----a-w-	c:\program files\Common Files\System\ado\msjro.dll
2012-07-15 18:12 . 2012-06-06 05:05	372736	----a-w-	c:\program files\Common Files\System\ado\msadox.dll
2012-07-15 18:12 . 2012-06-06 05:05	57344	----a-w-	c:\program files\Common Files\System\ado\msador15.dll
2012-07-15 18:12 . 2012-06-06 05:05	212992	----a-w-	c:\program files\Common Files\System\msadc\msadco.dll
2012-07-15 01:04 . 2012-06-12 02:40	2345984	----a-w-	c:\windows\system32\win32k.sys
2012-07-14 21:48 . 2012-06-06 05:05	1390080	----a-w-	c:\windows\system32\msxml6.dll
2012-07-14 21:48 . 2012-06-06 05:05	1236992	----a-w-	c:\windows\system32\msxml3.dll
2012-07-14 21:48 . 2010-06-26 03:24	2048	----a-w-	c:\windows\system32\msxml3r.dll
2012-07-14 21:46 . 2012-06-02 04:45	134000	----a-w-	c:\windows\system32\drivers\ksecpkg.sys
2012-07-14 21:46 . 2012-06-02 04:40	369336	----a-w-	c:\windows\system32\drivers\cng.sys
2012-07-14 21:46 . 2012-06-02 04:39	219136	----a-w-	c:\windows\system32\ncrypt.dll
2012-07-14 21:46 . 2012-06-02 04:45	67440	----a-w-	c:\windows\system32\drivers\ksecdd.sys
2012-07-14 21:46 . 2012-06-02 04:40	225280	----a-w-	c:\windows\system32\schannel.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-03 13:17 . 2009-03-23 18:36	45056	----a-w-	c:\windows\system32\acovcnt.exe
2012-07-08 18:20 . 2012-07-08 18:20	19736	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2012-07-03 11:46 . 2010-11-03 19:24	22344	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-06-25 14:04 . 2012-06-25 14:04	1394248	----a-w-	c:\windows\system32\msxml4.dll
2012-06-08 16:32 . 2012-06-08 16:32	426184	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2012-06-08 16:32 . 2011-05-30 16:51	70344	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-02 22:19 . 2012-06-21 16:56	53784	----a-w-	c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-21 16:56	45080	----a-w-	c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-21 16:56	35864	----a-w-	c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-21 16:56	577048	----a-w-	c:\windows\system32\wuapi.dll
2012-06-02 22:19 . 2012-06-21 16:56	1933848	----a-w-	c:\windows\system32\wuaueng.dll
2012-06-02 22:12 . 2012-06-21 16:56	2422272	----a-w-	c:\windows\system32\wucltux.dll
2012-06-02 22:12 . 2012-06-21 16:56	88576	----a-w-	c:\windows\system32\wudriver.dll
2012-06-02 13:19 . 2012-06-21 16:55	171904	----a-w-	c:\windows\system32\wuwebv.dll
2012-06-02 13:12 . 2012-06-21 16:55	33792	----a-w-	c:\windows\system32\wuapp.exe
2012-05-31 10:25 . 2009-10-04 16:40	237072	------w-	c:\windows\system32\MpSigStub.exe
2012-05-15 03:03 . 2012-06-14 18:53	981504	----a-w-	c:\windows\system32\wininet.dll
2008-08-08 22:48 . 2008-08-08 22:48	90112	----a-w-	c:\program files\Common Files\CPInstallAction.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2010-11-20 144384]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-06-09 2363392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2008-11-25 6691360]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2008-11-25 1833504]
"ASUS Camera ScreenSaver"="c:\windows\AsScrProlog.exe" [2009-02-26 47672]
"ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2009-02-26 3054136]
"ATKMEDIA"="c:\program files\ASUS\ATK Media\DMedia.exe" [2008-08-19 159744]
"ATKOSD2"="c:\program files\ASUS\ATKOSD2\ATKOSD2.exe" [2008-09-03 8105984]
"CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe" [2008-07-19 104936]
"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2012-03-08 884584]
"HControlUser"="c:\program files\ASUS\ATK Hotkey\HControlUser.exe" [2008-08-18 98304]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
" Malwarebytes Anti-Malware  (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2012-07-03 973488]
"P2Go_Menu"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-06-14 210216]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-10-05 198160]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-04-04 843712]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-05-11 348624]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"PDFPrint"="c:\program files\PDF24\pdf24.exe" [2011-12-16 220744]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2011-12-20 634880]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
c:\users\User2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840]
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [x]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [x]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S0 lullaby;lullaby;c:\windows\system32\DRIVERS\lullaby.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AAV UpdateService;AAV UpdateService;c:\program files\AAVUpdateManager\aavus.exe [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [x]
S2 DvmMDES;DeviceVM Meta Data Export Service;c:\asus.sys\DVMExportService.exe [x]
S2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 SiSGbeLH;NDIS 6.0-Treiber für SiS191/SiS190-Ethernet-Gerät;c:\windows\system32\DRIVERS\SiSGB6.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 30786651
*Deregistered* - 30786651
*Deregistered* - acedrv11
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
WindowsMobile	REG_MULTI_SZ   	wcescomm rapimgr
LocalServiceRestricted	REG_MULTI_SZ   	WcesComm RapiMgr
.
Inhalt des "geplante Tasks" Ordners
.
2012-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000Core.job
- c:\users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-27 19:59]
.
2012-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000UA.job
- c:\users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-27 19:59]
.
2012-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004Core.job
- c:\users\User2\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-21 17:48]
.
2012-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004UA.job
- c:\users\User2\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-21 17:48]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = 
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.43.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKCU-Run-OscarEditor - c:\program files\MOUSE Editor\\MouseEditor.exe
AddRemove-Android SDK Tools - c:\users\***\tools\uninstall.exe
AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files\DivX\DivXCodecUninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Apple Computer, Inc.\QuickTime\Favorite Movies]
@DACL=(02 0000)
.
[HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Apple Computer, Inc.\QuickTime\Recent Movies]
@DACL=(02 0000)
"5174526"="1,h:\\2010\\5174526.avi"
"Punisher_2_War_Zone_synchron_BlueRay-Rip_XviD_by_Genius2007_shared_by_Freibeuter_der_Meere"="1,d:\\Filme\\Punisher_2_War_Zone_synchron_BlueRay-Rip_XviD_by_Genius2007_shared_by_Freibeuter_der_Meere.avi"
.
[HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000_Classes\VirtualStore\MACHINE\SOFTWARE\EasiestUtils.com\YouTube FLV to AVI easy converter]
@DACL=(02 0000)
"APPWelcomeScreenDis"=dword:00000000
"K1"=hex:0b,1d,78,3d,b0,26,c3,41
"K2"=hex:71,3d,0a,57,12,14,59,41
"K3"="YouTube FLV to AVI easy converter 2.2.4"
"Key"=hex:de,45,6d,18,9f,29,b8,ee,52,ee,66,87,32,c9,78,cd,bd,9c,33,f5,55,c4,80,
   c7,97,8e,a8,59,e1,70,de,e8,a6,5f,66,e9,7e,e4,6e,6a,2a,ce,e1,5f,e7,8c,bf,81,\
"Limitations"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-08-11  16:15:09
ComboFix-quarantined-files.txt  2012-08-11 14:15
.
Vor Suchlauf: 3.950.723.072 Bytes frei
Nach Suchlauf: 3.808.886.784 Bytes frei
.
- - End Of File - - E7EDBCCC06D1D768EBFD7142176952E1
         

Alt 13.08.2012, 17:35   #24
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 19.08.2012, 17:54   #25
Hypothetix
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Köln, 39 Grad
Hier endlich die logs:

Code:
ATTFilter
GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-08-19 13:59:43
Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1 ST9320320AS rev.0303
Running: m6jzjhk9.exe; Driver: C:\Users\***\AppData\Local\Temp\kglirpod.sys


---- System - GMER 1.0.15 ----

SSDT            967C0F1E                                                                                                            ZwCreateSection
SSDT            967C0F28                                                                                                            ZwRequestWaitReplyPort
SSDT            967C0F23                                                                                                            ZwSetContextThread
SSDT            967C0F2D                                                                                                            ZwSetSecurityObject
SSDT            967C0F32                                                                                                            ZwSystemDebugControl
SSDT            967C0EBF                                                                                                            ZwTerminateProcess

---- Kernel code sections - GMER 1.0.15 ----

.text           ntkrnlpa.exe!ZwRollbackEnlistment + 140D                                                                            830923C9 1 Byte  [06]
.text           ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                                              830CBD52 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text           ntkrnlpa.exe!KeRemoveQueueEx + 11F7                                                                                 830D2EAC 4 Bytes  [1E, 0F, 7C, 96]
.text           ntkrnlpa.exe!KeRemoveQueueEx + 1553                                                                                 830D3208 4 Bytes  [28, 0F, 7C, 96] {SUB [EDI], CL; JL 0xffffffffffffff9a}
.text           ntkrnlpa.exe!KeRemoveQueueEx + 1597                                                                                 830D324C 4 Bytes  [23, 0F, 7C, 96] {AND ECX, [EDI]; JL 0xffffffffffffff9a}
.text           ntkrnlpa.exe!KeRemoveQueueEx + 1613                                                                                 830D32C8 4 Bytes  [2D, 0F, 7C, 96]
.text           ntkrnlpa.exe!KeRemoveQueueEx + 1667                                                                                 830D331C 4 Bytes  [32, 0F, 7C, 96] {XOR CL, [EDI]; JL 0xffffffffffffff9a}
.text           ...                                                                                                                 
.text           C:\Windows\system32\DRIVERS\atksgt.sys                                                                              section is writeable [0x9A174300, 0x3B6D8, 0xE8000020]
.text           C:\Windows\system32\DRIVERS\lirsgt.sys                                                                              section is writeable [0x825EA300, 0x1BEE, 0xE8000020]

---- User IAT/EAT - GMER 1.0.15 ----

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc]                                      [741F24CB] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup]                                 [741D562E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown]                                [741D56EC] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree]                                       [741F2546] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics]                             [741E85AA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage]                               [741E4D5E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth]                              [741E5105] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight]                             [741E51DA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromHBITMAP]                    [741E6707] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC]                              [741E8301] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode]                         [741E8850] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode]                       [741E90B1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI]                             [741EE254] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage]                                 [741E4C90] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]  [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT             C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]   [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT             C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]     [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT             C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress]    [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT             C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress]   [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT             C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress]   [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                                             Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1                                                                             Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1                                                                              fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2                                                                              fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3                                                                              fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

Device          \Driver\ACPI_HAL \Device\0000004f                                                                                   halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)

AttachedDevice  \FileSystem\fastfat \Fat                                                                                            fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation)

---- Registry - GMER 1.0.15 ----

Reg             HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update@NextSqmReportTime                          2012-08-19 11:24:42

---- EOF - GMER 1.0.15 ----
         

Code:
ATTFilter
Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 14:08:17 on 19.08.2012

OS: Windows 7 Home Premium Edition Service Pack 1 (Build 7601), 32-bit
Default Browser: Google Inc. Google Chrome 21.0.1180.60

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000Core.job" - "Google Inc." - C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000UA.job" - "Google Inc." - C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004Core.job" - "Google Inc." - C:\Users\User2\AppData\Local\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004UA.job" - "Google Inc." - C:\Users\User2\AppData\Local\Google\Update\GoogleUpdate.exe

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"DivXControlPanelApplet.cpl" - "DivX, Inc." - C:\Windows\system32\DivXControlPanelApplet.cpl
"FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\Windows\system32\FlashPlayerCPLApp.cpl
"nvcpl.cpl" - "NVIDIA Corporation" - C:\Windows\system32\nvcpl.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLCFG32.CPL
"QuickTime" - "Apple Inc." - C:\Program Files\QuickTime\QTSystem\QuickTime.cpl
"wmdConn.cpl" - "Microsoft Corporation" - C:\Windows\WindowsMobile\wmdConn.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"Apple Mobile USB Driver" (USBAAPL) - "Apple, Inc." - C:\Windows\System32\Drivers\usbaapl.sys
"ASMMAP" (ASMMAP) - ? - C:\Program Files\ATKGFNEX\ASMMAP.sys
"atksgt" (atksgt) - ? - C:\Windows\System32\DRIVERS\atksgt.sys  (File found, but it contains no detailed information)
"avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys
"avkmgr" (avkmgr) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avkmgr.sys
"catchme" (catchme) - ? - C:\Users\***\AppData\Local\Temp\catchme.sys  (File not found)
"FssFltr" (fssfltr) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\fssfltr.sys
"kglirpod" (kglirpod) - ? - C:\Users\***\AppData\Local\Temp\kglirpod.sys  (Hidden registry entry, rootkit activity | File not found)
"lirsgt" (lirsgt) - ? - C:\Windows\System32\DRIVERS\lirsgt.sys  (File found, but it contains no detailed information)
"Logitech SetPoint KMDF HID Filter Driver" (LHidFilt) - "Logitech, Inc." - C:\Windows\System32\DRIVERS\LHidFilt.Sys
"Logitech SetPoint KMDF Mouse Filter Driver" (LMouFilt) - "Logitech, Inc." - C:\Windows\System32\DRIVERS\LMouFilt.Sys
"lullaby" (lullaby) - "Windows (R) Codename Longhorn DDK provider" - C:\Windows\System32\DRIVERS\lullaby.sys
"MBAMSwissArmy" (MBAMSwissArmy) - "Malwarebytes Corporation" - C:\Windows\system32\drivers\mbamswissarmy.sys
"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys
"StarForce Protection Environment Driver (version 1.x)" (sfdrv01) - "Protection Technology" - C:\Windows\System32\drivers\sfdrv01.sys
"StarForce Protection Helper Driver (version 2.x)" (sfhlp02) - "Protection Technology" - C:\Windows\System32\drivers\sfhlp02.sys
"StarForce Protection VFS Driver (version 2.x)" (sfvfs02) - "Protection Technology" - C:\Windows\System32\drivers\sfvfs02.sys

[Explorer]
-----( HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -   (File not found | COM-object registry key not found)
{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -   (File not found | COM-object registry key not found)
{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -   (File not found | COM-object registry key not found)
{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
-----( HKLM\Software\Classes\Protocols\Handler )-----
{E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} "Album Download IE Asynchronous Pluggable Protocol Interface" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
{828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\Program Files\Windows Live\Messenger\msgrapp.dll
{88FED34C-F0CA-4636-A375-3CB6248B04CD} "Local Groove Web Services Protocol" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
{828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Messenger\msgrapp.dll
{91774881-D725-4E58-B298-07617B9B86A8} "Skype IE add-on Pluggable Protocol" - "Skype Technologies S.A." - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
{03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Program Files\Windows Live\Mail\mailcomm.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )-----
{B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? -   (File not found | COM-object registry key not found)
{1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)
{34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)
{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? -   (File not found | COM-object registry key not found)
{A70C977A-BF00-412C-90B7-034C51DA2439} "DesktopContext Class" - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\Display\nvui.dll
{D8D1CE8C-B1EB-4E95-B63B-1531BA60E992} "DivX Property Handler" - "DivX, Inc." - C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXPropertyHandler.dll
{83238FAE-D346-4E12-8734-D42F7554B3E6} "DivX Thumbnail Provider" - "DivX, Inc." - C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXThumbnailProvider.dll
{2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? -   (File not found | COM-object registry key not found)
{99FD978C-D287-4F50-827F-B2C658EDA8E7} "Groove Explorer Icon Overlay 1 (GFS Unread Stub)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} "Groove Explorer Icon Overlay 2 (GFS Stub)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
{920E6DB1-9907-4370-B3A0-BAFC03D81399} "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
{16F3DD56-1AF5-4347-846D-7C10C4192619} "Groove Explorer Icon Overlay 3 (GFS Folder)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
{2916C86E-86A6-43FE-8112-43ABE6BF8DCC} "Groove Explorer Icon Overlay 4 (GFS Unread Mark)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
{2A541AE1-5BF6-4665-A8A3-CFA9672E4291} "Groove Folder Synchronization" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
{72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
{6C467336-8281-4E60-8204-430CED96822D} "Groove GFS Context Menu Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
{B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
{A449600E-1DC6-4232-B948-9BD794D62056} "Groove GFS Stub Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
{387E725D-DC16-4D76-B310-2C93ED4752A0} "Groove XML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll
{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONFILTER.DLL
{00020d75-0000-0000-c000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLSHEXT.DLL
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll
{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} "NVIDIA CPL Context Menu Extension" - "NVIDIA Corporation" - C:\Windows\system32\nvshext.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\OLKFSTUB.DLL
{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class" - "RealNetworks, Inc." - C:\Program Files\Real\RealPlayer\rpshell.dll
{C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)
{E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)
{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll
{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -   (File not found | COM-object registry key not found)
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - ? - C:\Program Files\WinRAR\rarext.dll
{0563DB41-F538-4B37-A92D-4659049B7766} "WLMD Message Handler" - ? -   (File not found | COM-object registry key not found)
{06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe
Logitech Setpoint Extension "{B9B9F083-2B04-452A-8691-83694AC1037B}" - ? -   (File not found | COM-object registry key not found)

[Internet Explorer]
-----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars )-----
{555D4D79-4BD2-4094-A395-CFC534424A05} "HP Smart Web Printing" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
ITBar7Height "ITBar7Height" - ? -   (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{0D41B8C5-2599-4893-8183-00195EC8D5F9} "asusTek_sysctrl Class" - ? - C:\Windows\DOWNLO~1\ASUSTE~1.DLL / hxxp://support.asus.de/common/asusTek_sys_ctrl.cab
{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} "Java Plug-in 1.6.0_31" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 10.5.1" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 10.5.1" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
{D27CDB6E-AE6D-11CF-96B8-444553540000} "Shockwave Flash Object" - "Adobe Systems, Inc." - C:\Windows\system32\Macromed\Flash\Flash10c.ocx / hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
{E6F480FC-BD44-4CBA-B74A-89AF7842937D} "{E6F480FC-BD44-4CBA-B74A-89AF7842937D}" - ? -   (File not found | COM-object registry key not found) / hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{5F7B1267-94A9-47F5-98DB-E99415F33AEC} "@C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004" - "Microsoft Corporation" - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} "@C:\Windows\WindowsMobile\INetRepl.dll,-222" - "Microsoft Corporation" - C:\Windows\WindowsMobile\INetRepl.dll
{48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} "ClsidExtension" - "Microsoft Corporation" - C:\Windows\WindowsMobile\INetRepl.dll
{DDE87865-83C5-48c4-8357-2F5B1AA84522} "HP Smart Web Printing ein- oder ausblenden" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
{898EA8C8-E7FF-479B-8935-AEC46303B9E5} "Skype Click to Call" - "Skype Technologies S.A." - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{326E768D-4182-46FD-9C16-1449A49795F4} "DivX Plus Web Player HTML5 <video>" - "DivX, LLC" - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
{72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
{0347C33E-8762-4905-BF09-768834316C61} "HP Print Enhancer" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} "HP Smart BHO Class" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} "Java(tm) Plug-In SSV Helper" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} "Skype Browser Helper" - "Skype Technologies S.A." - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live ID Sign-in Helper" - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

[LSA Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Lsa )-----
"Security Packages" - "Microsoft Corp." - C:\Windows\system32\livessp.dll

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"Dropbox.lnk" - "Dropbox, Inc." - C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe  (Shortcut exists | File exists)
"OpenOffice.org 3.0.lnk" - ? - C:\Program Files\OpenOffice.org 3\program\quickstart.exe  (Shortcut exists | File found, but it contains no detailed information | File exists)
-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"HP Digital Imaging Monitor.lnk" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe  (Shortcut exists | File exists)
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"LightScribe Control Panel" - "Hewlett-Packard Company" - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"ASUS Camera ScreenSaver" - ? - C:\Windows\AsScrProlog.exe  (File found, but it contains no detailed information)
"ASUS Screen Saver Protector" - "ASUS" - C:\Windows\AsScrPro.exe
"ATKMEDIA" - "ASUS" - C:\Program Files\ASUS\ATK Media\DMedia.exe
"ATKOSD2" - "ASUS" - C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
"avgnt" - "Avira Operations GmbH & Co. KG" - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
"CLMLServer" - "CyberLink" - "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
"DivXUpdate" - ? - "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"fssui" - "Microsoft Corporation" - "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
"GrooveMonitor" - "Microsoft Corporation" - "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
"HControlUser" - "ASUS" - C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
"HP Software Update" - "Hewlett-Packard" - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
"HTC Sync Loader" - ? - "C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
" Malwarebytes Anti-Malware  (reboot)" - "Malwarebytes Corporation" - "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
"P2Go_Menu" - "CyberLink Corp." - "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
"PDFPrint" - "Geek Software GmbH" - C:\Program Files\PDF24\pdf24.exe
"QuickTime Task" - "Apple Inc." - "C:\Program Files\QuickTime\QTTask.exe" -atboottime
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
"TkBellExe" - "RealNetworks, Inc." - "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
"Windows Mobile Device Center" - "Microsoft Corporation" - %windir%\WindowsMobile\wmdc.exe

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\Windows\system32\msonpmon.dll

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"@%windir%\WindowsMobile\rapimgr.dll,-104" (RapiMgr) - "Microsoft Corporation" - C:\Windows\WindowsMobile\rapimgr.dll
"@%windir%\WindowsMobile\wcescomm.dll,-40079" (WcesComm) - "Microsoft Corporation" - C:\Windows\WindowsMobile\wcescomm.dll
"AAV UpdateService" (AAV UpdateService) - ? - C:\Program Files\AAVUpdateManager\aavus.exe
"Adobe Acrobat Update Service" (AdobeARMservice) - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
"ASLDR Service" (ASLDRService) - ? - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
"ATKGFNEX Service" (ATKGFNEXSrv) - ? - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
"Avira Echtzeit Scanner" (AntiVirService) - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
"Avira Planer" (AntiVirSchedulerService) - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\sched.exe
"DeviceVM Meta Data Export Service" (DvmMDES) - "DeviceVM" - C:\ASUS.SYS\DVMExportService.exe
"HP CUE DeviceDiscovery Service" (hpqddsvc) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
"hpqcxs08" (hpqcxs08) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
"Internet Pass-Through Service" (PassThru Service) - ? - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
"LightScribeService Direct Disc Labeling Service" (LightScribeService) - "Hewlett-Packard Company" - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
"Microsoft Office Groove Audit Service" (Microsoft Office Groove Audit Service) - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
"Net Driver HPZ12" (Net Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZinw12.dll
"NVIDIA Display Driver Service" (nvsvc) - "NVIDIA Corporation" - C:\Windows\system32\nvvsvc.exe
"NVIDIA Stereoscopic 3D Driver Service" (Stereo Service) - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
"NVIDIA Update Service Daemon" (nvUpdatusService) - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
"Pml Driver HPZ12" (Pml Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZipm12.dll
"Windows Live Family Safety Service" (fsssvc) - "Microsoft Corporation" - C:\Program Files\Windows Live\Family Safety\fsssvc.exe
"Windows Live ID Sign-in Assistant" (wlidsvc) - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----
"WindowsLive Local NSP" - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
"WindowsLive NSP" - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru
         

Code:
ATTFilter
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-19 14:10:25
-----------------------------
14:10:25.809    OS Version: Windows 6.1.7601 Service Pack 1
14:10:25.809    Number of processors: 2 586 0xF0D
14:10:25.811    ComputerName: ***-PC  UserName: ***
14:10:27.453    Initialize success
14:16:31.715    AVAST engine defs: 12081900
14:16:45.816    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1
14:16:45.816    Disk 0 Vendor: ST9320320AS 0303 Size: 305245MB BusType: 3
14:16:46.440    Disk 0 MBR read successfully
14:16:46.440    Disk 0 MBR scan
14:16:46.455    Disk 0 Windows 7 default MBR code
14:16:46.502    Disk 0 Partition 1 00     1C Hidd FAT32 LBA MSDOS5.0    12001 MB offset 63
14:16:46.611    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS       152617 MB offset 24579450
14:16:46.611    Disk 0 Partition - 00     0F Extended LBA            140623 MB offset 337140090
14:16:46.830    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS       140623 MB offset 337140153
14:16:47.423    Disk 0 scanning sectors +625137345
14:16:48.187    Disk 0 scanning C:\Windows\system32\drivers
14:18:36.826    Service scanning
14:19:17.698    Modules scanning
14:21:51.373    Disk 0 trace - called modules:
14:21:51.436    ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys 
14:21:51.436    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8676f278]
14:21:51.451    3 CLASSPNP.SYS[8b9b959e] -> nt!IofCallDriver -> [0x8667f918]
14:21:51.451    5 ACPI.sys[8b4c53d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-1[0x8667a030]
14:21:52.419    AVAST engine scan C:\Windows
14:24:12.788    AVAST engine scan C:\Windows\system32
14:48:04.121    AVAST engine scan C:\Windows\system32\drivers
14:53:15.904    AVAST engine scan C:\Users\***
16:30:15.993    AVAST engine scan C:\ProgramData
16:37:33.418    Scan finished successfully
18:50:03.785    Disk 0 MBR has been saved successfully to "C:\Users\***\Desktop\neue scans\MBR.dat"
18:50:03.800    The log file has been saved successfully to "C:\Users\***\Desktop\neue scans\aswMBR.txt"
         
Vielen lieben Dank!

Alt 20.08.2012, 21:00   #26
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 09.09.2012, 11:56   #27
Hypothetix
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Hallo Hoffe dein Urlaub war ok? Ich war auch ein paar Tage nicht im Lande. Hier die Logs:

Code:
ATTFilter
Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.09.02.02

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 8.0.7601.17514
*** :: ***-PC [Administrator]

02.09.2012 12:03:03
mbam-log-2012-09-02 (12-03-03).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 520238
Laufzeit: 3 Stunde(n), 18 Minute(n), 51 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         
Sowie:

Code:
ATTFilter
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 09/07/2012 at 06:23 PM

Application Version : 5.5.1012

Core Rules Database Version : 9168
Trace Rules Database Version: 6980

Scan type       : Complete Scan
Total Scan Time : 04:35:08

Operating System Information
Windows 7 Home Premium 32-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Administrator

Memory items scanned      : 948
Memory threats detected   : 0
Registry items scanned    : 36720
Registry threats detected : 0
File items scanned        : 219189
File threats detected     : 839

Adware.Tracking Cookie
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\2J9QDHCJ.txt [ /ad3.adfarm1.adition.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\PLZDXMDB.txt [ /ad2.adfarm1.adition.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\P2CMPVEK.txt [ /adfarm1.adition.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\4PKFLJTW.txt [ /c.atdmt.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\PFFELTMY.txt [ /microsoftwllivemkt.112.2o7.net ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\F6MB3HRC.txt [ /atdmt.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\UHJRA66L.txt [ /doubleclick.net ]
	C:\USERS\***\Cookies\PLZDXMDB.txt [ Cookie:***@ad2.adfarm1.adition.com/ ]
	C:\USERS\***\Cookies\P2CMPVEK.txt [ Cookie:***@adfarm1.adition.com/ ]
	C:\USERS\***\Cookies\4PKFLJTW.txt [ Cookie:***@c.atdmt.com/ ]
	C:\USERS\***\Cookies\F6MB3HRC.txt [ Cookie:***@atdmt.com/ ]
	C:\USERS\***\Cookies\UHJRA66L.txt [ Cookie:***@doubleclick.net/ ]
	.doubleclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adserver.adtechus.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ads.rokatraffic.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	de.sitestat.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.trafficmp.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.sevenoneintermedia.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.imrworldwide.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.imrworldwide.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.specificclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.xiti.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.a.revenuemax.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ibanner.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ero-advertising.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.gostats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	adserv3.deutschland-spion.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	tracking.gameforge.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.easy-adserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adxpose.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	adserv.kwick.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	adserv.kwick.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ehg-twi.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.kontera.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.legolas-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	media.fragster.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adserve.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	wstat.wibiya.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	de.sitestat.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.gwarez.cc [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.gwarez.cc [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.multimediaxis.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.multimediaxis.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.multimediaxis.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.multimediaxis.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adlegend.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adlegend.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	xxx-blog.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	adserver.w3anythink.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.weborama.fr [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.leylines.solution.weborama.fr [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.mm.chitika.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.mediafire.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.oms.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.olympiaverlag.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.h.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.h.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.h.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.h.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.microsoftsto.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.c.gigcount.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	adserver.heavenmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adinterax.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adinterax.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.questionmarket.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.guj.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	s2.netxmedia.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ad.adnet.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ad.adnet.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ru4.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.bs.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	adserver2.clipkit.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	accounts.google.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	de.sitestat.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	banner.testberichte.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ad.adnet.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.thewarezscene.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.thewarezscene.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	pornrush.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	pornrush.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	statse.webtrendslive.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ads.quartermedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.media-dealer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.media-dealer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.azjmp.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.trafficmp.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.trafficmp.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	adserver.seedpeer.me [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.aim4media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.horyzon-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.horyzon-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.horyzon-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.horyzon-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.foxfilmedentertainment.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.easy-adserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.easy-adserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.wegotmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.wegotmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ox-d.yadomedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.amazon-adsystem.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	dc.tremormedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.active-tracking.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.active-tracking.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.active-tracking.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tribalfusion.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.eyewonder.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.eyewonder.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.amazon-adsystem.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.msnportal.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	eas4.emediate.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.bs.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tracking.mindshare.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.lucidmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.mmotraffic.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.mmotraffic.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.mediafire.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.mediafire.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.legolas-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.komtrack.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.komtrack.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	track.adform.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.statcounter.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.statcounter.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ceramex-media.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ceramex-media.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.comstats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.comstats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.comstats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.aim4media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ru4.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.yieldmanager.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.pro-market.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.adserver01.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	accounts.google.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	accounts.google.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	rts.pgmediaserve.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	rts.pgmediaserve.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	rts.pgmediaserve.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	counter.f-thies.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.yadro.ru [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.paypal.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.trackcorner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.trackcorner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.clickfuse.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.fastclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	tracking.sim-technik.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad3.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	adserver.11freunde.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.hightraffic.hugoboss.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.hightraffic.hugoboss.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.hightraffic.hugoboss.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	stats.zebralog.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ehg-foxmovies.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.ehg-foxmovies.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.adition.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.adition.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.questionmarket.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad4.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	studivz.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	studivz.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	track.adform.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adform.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.mentorcorporation.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ww251.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.zanox-affiliate.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.dyntracker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.counter.sexsuche.tv [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	counter2.sexmoney.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.tldadserv.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	media.campartner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	media.campartner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	media.campartner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	media.campartner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	click.iwantuonline.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	click.iwantuonline.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	click.iwantuonline.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	banner.publisher.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webstats4u.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	toplisted.us [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	tracking.alternads.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tracking.alternads.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tracking.alternads.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tracking.alternads.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.netxmedia.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	s1.netxmedia.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad1.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad2.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.traffictrack.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	view.advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	view.advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	media.quakelive.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.www.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	web.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.adviva.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.zanox-affiliate.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.zanox-affiliate.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.content.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
	.statcounter.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	rts.pgmediaserve.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	rts.pgmediaserve.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	rts.pgmediaserve.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	.content.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
	C:\USERS\User2\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\User2@CONTENT.YIELDMANAGER[1].TXT [ /CONTENT.YIELDMANAGER ]
	.xiti.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.imrworldwide.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.imrworldwide.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.premiumtv.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.moviepilot.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	fl01.ct2.comclick.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	fl01.ct2.comclick.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	fl01.ct2.comclick.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adviva.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.specificclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.specificclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.specificclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.specificclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adxpose.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.ad.adnet.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.wissende.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	adserver2.clipkit.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.a.revenuemax.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.adition.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.adition.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.liveperson.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.rainbowmedia.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.fastclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.ru4.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	g.blogads.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	f.blogads.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	f.blogads.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	f.blogads.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.fastclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.viacom.adbureau.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.ad.adnet.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	adservercentral.info [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.zanox.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.webstats4u.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.easy-adserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.easy-adserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.traveladvertising.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.amazonservices.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.ero-advertising.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.webstats4u.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.xm.xtendmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.advert-layer.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.advert-layer.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.amazonwebstore.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.mtvn.112.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.clicksor.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.clicksor.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.clicksor.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.clicksor.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.harrenmedianetwork.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.ad-emea.doubleclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.azjmp.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.trafficmp.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.googleads.g.doubleclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.adserver01.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.guj.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad1.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.questionmarket.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.questionmarket.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.mediatraffic.com.ua [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.horyzon-media.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.horyzon-media.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.horyzon-media.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.horyzon-media.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	de.sitestat.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.amazon-adsystem.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.amazon-adsystem.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.pro-market.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ads.247activemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	adsrv1.admediate.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.viewablemedia.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.bs.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	media.quakelive.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.viacom.adbureau.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.trafficmp.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.trafficmp.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	de.sitestat.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.nextag.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.nextag.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.yieldmanager.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.eyewonder.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.eyewonder.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	statse.webtrendslive.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.care2.112.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	www.mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	gotacha.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	gotacha.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	track.adform.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	tracking.mlsat02.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.dyntracker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ww251.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.bs.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adviva.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adxvalue.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	www.netdebit-counter.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.gostats.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.gostats.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.ru4.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.ar.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.zanox-affiliate.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.traffictrack.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	track.adform.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adform.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad4.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.paypal.112.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.stats.paypal.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.deutschepostag.112.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.c.gigcount.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.statcounter.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	blogcounter.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	www.blogcounter.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	www.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	tracking.dc-storm.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	web.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad3.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.fastclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.www.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	www.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	tracking.dc-storm.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	adserver.seedpeer.me [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	7.rotator.wigetmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	7.rotator.wigetmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	7.rotator.wigetmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.wegotmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.wegotmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.wegotmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.toplist.cz [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.toplist.eu [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.content.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.blogads.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.blogads.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	onlineadtracker.co.uk [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.zanox.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.zanox.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad2.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	counters.gigya.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.lucidmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	www.youporn.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	www.youporn.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	rts.pgmediaserve.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	rts.pgmediaserve.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	rts.pgmediaserve.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.de.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.sexad.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
	.exoclick.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

Trojan.Agent/Gen-FakeAV
	C:\PROGRAM FILES\WINRAR\DEFAULT.SFX
         
Danke =)

Alt 10.09.2012, 15:50   #28
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Sieht ok aus, da wurden nur Cookies gefunden, der angebliche Fund bei WinRAR ist ein Fehalarm.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )


Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 20.09.2012, 09:29   #29
Hypothetix
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



HAllo,

Es scheint tatsächlich alles in Ordnung zu sein. Keine Probleme nach mehrtägiger Nutzung festgestellt.

Danke!

Alt 20.09.2012, 15:01   #30
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Internet extrem langsam - an anderen Endgeräten problemlos - - Standard

Internet extrem langsam - an anderen Endgeräten problemlos -



Dann wären wir durch!

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. Mit Hilfe von OTL kannst du auch viele Tools entfernen:

Starte bitte OTL und klicke auf Bereinigung.
Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen.


Malwarebytes zu behalten ist zu empfehlen. Kannst ja 1x im Monat damit einen Vollscan machen, aber immer vorher ans Update denken.


Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks => Adobe Flash Player Distribution | Adobe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.
__________________
Logfiles bitte immer in CODE-Tags posten

Antwort

Themen zu Internet extrem langsam - an anderen Endgeräten problemlos -
antivir, autorun, avira, bho, browser, desktop, error, excel, firefox, format, helper, home, internet, langsam, logfile, netzwerk, nvidia update, object, picasa, plug-in, problem, realtek, registry, scan, searchscopes, senden, software, super, windows, wlan



Ähnliche Themen: Internet extrem langsam - an anderen Endgeräten problemlos -


  1. Internet extrem langsam an Desktop PC. An anderen Geräten normal!
    Plagegeister aller Art und deren Bekämpfung - 18.08.2014 (14)
  2. PC/Internet extrem langsam
    Plagegeister aller Art und deren Bekämpfung - 05.12.2013 (21)
  3. Rechner (Internet) extrem langsam langsam und hackelig!Leerlaufprozess Task Manager ständig zw. 70-98 %
    Plagegeister aller Art und deren Bekämpfung - 11.04.2013 (17)
  4. Botnetz scannt das Internet mit Hilfe von gehackten Endgeräten
    Nachrichten - 19.03.2013 (0)
  5. Internet extrem langsam
    Plagegeister aller Art und deren Bekämpfung - 22.06.2012 (15)
  6. Internet extrem langsam
    Plagegeister aller Art und deren Bekämpfung - 27.07.2011 (12)
  7. Internet extrem langsam!
    Log-Analyse und Auswertung - 19.04.2011 (1)
  8. Internet von einem Tag auf den anderen extrem langsam
    Plagegeister aller Art und deren Bekämpfung - 03.02.2011 (7)
  9. Internet extrem langsam
    Log-Analyse und Auswertung - 08.06.2010 (1)
  10. Internet extrem langsam
    Log-Analyse und Auswertung - 02.06.2010 (0)
  11. Internet extrem langsam
    Log-Analyse und Auswertung - 10.01.2010 (0)
  12. Internet extrem langsam
    Log-Analyse und Auswertung - 30.10.2009 (15)
  13. Internet extrem langsam
    Log-Analyse und Auswertung - 15.04.2009 (1)
  14. Internet extrem langsam
    Log-Analyse und Auswertung - 21.08.2008 (11)
  15. Internet EXTREM langsam
    Log-Analyse und Auswertung - 25.05.2008 (1)
  16. Internet extrem langsam
    Log-Analyse und Auswertung - 13.03.2008 (4)
  17. Internet extrem langsam!!!
    Log-Analyse und Auswertung - 02.02.2008 (4)

Zum Thema Internet extrem langsam - an anderen Endgeräten problemlos - - Mach bitte ein neues OTL-Log. Bitte alles nach Möglichkeit hier in CODE-Tags posten. Wird so gemacht: [code] hier steht das Log [/code] Und das ganze sieht dann so aus: Code: - Internet extrem langsam - an anderen Endgeräten problemlos -...
Archiv
Du betrachtest: Internet extrem langsam - an anderen Endgeräten problemlos - auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.