| |
| |||||||
Log-Analyse und Auswertung: Internet extrem langsam - an anderen Endgeräten problemlos -Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
31.07.2012, 09:48
| #16 |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  Internet extrem langsam - an anderen Endgeräten problemlos - Mach bitte ein neues OTL-Log. Bitte alles nach Möglichkeit hier in CODE-Tags posten. Wird so gemacht: [code] hier steht das Log [/code] Und das ganze sieht dann so aus: Code:
ATTFilter hier steht das Log
Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop. Falls schon vorhanden, bitte die ältere vorhandene Datei durch die neu heruntergeladene Datei ersetzen, damit du auch wirklich mit einer aktuellen Version von OTL arbeitest.
Code:
ATTFilter netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
wininit.exe
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
02.08.2012, 11:44
| #17 |
 | Internet extrem langsam - an anderen Endgeräten problemlos - Hallo und Guten Morgen,
__________________anbei das log: Code:
ATTFilter OTL logfile created on: 02.08.2012 12:12:21 - Run 4 OTL by OldTimer - Version 3.2.55.0 Folder = C:\Users\***\Desktop Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,13 Gb Available Physical Memory | 70,90% Memory free 6,00 Gb Paging File | 4,41 Gb Available in Paging File | 73,55% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 149,04 Gb Total Space | 0,72 Gb Free Space | 0,48% Space Free | Partition Type: NTFS Drive D: | 137,33 Gb Total Space | 3,55 Gb Free Space | 2,59% Space Free | Partition Type: NTFS Computer Name: ***-PC | User Name: *** | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.08.02 12:10:14 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe PRC - [2012.05.11 23:03:15 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe PRC - [2012.05.11 23:03:15 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe PRC - [2012.05.11 23:03:15 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe PRC - [2012.05.11 23:03:15 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe PRC - [2012.04.04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012.04.03 17:02:59 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvtray.exe PRC - [2012.04.03 17:01:59 | 000,857,920 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvxdsync.exe PRC - [2012.04.03 07:15:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2011.12.20 14:32:00 | 000,634,880 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcUPCTLoader.exe PRC - [2011.12.16 13:54:22 | 000,220,744 | ---- | M] (Geek Software GmbH) -- C:\Programme\PDF24\pdf24.exe PRC - [2011.09.15 13:06:04 | 000,088,576 | ---- | M] () -- C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe PRC - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe PRC - [2011.06.24 06:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe PRC - [2011.03.28 20:31:16 | 000,193,920 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE PRC - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2010.11.20 14:22:51 | 000,673,040 | ---- | M] (Microsoft Corporation) -- C:\Programme\Internet Explorer\iexplore.exe PRC - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe PRC - [2010.11.20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2009.10.06 01:56:00 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Programme\Common Files\Real\Update_OB\realsched.exe PRC - [2009.02.26 19:36:46 | 000,030,040 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Office\Office12\GrooveMonitor.exe PRC - [2009.02.26 03:52:22 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe PRC - [2009.01.09 19:46:32 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Programme\OpenOffice.org 3\program\soffice.bin PRC - [2009.01.09 19:45:26 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Programme\OpenOffice.org 3\program\soffice.exe PRC - [2008.11.25 19:22:10 | 000,170,552 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\HControl.exe PRC - [2008.11.20 20:09:20 | 000,307,200 | -H-- | M] (DeviceVM) -- C:\ASUS.SYS\DVMExportService.exe PRC - [2008.10.24 16:35:44 | 000,128,296 | ---- | M] () -- C:\Programme\AAVUpdateManager\aavus.exe PRC - [2008.10.18 03:10:54 | 000,211,512 | ---- | M] (ATK) -- C:\Programme\P4G\BatteryLife.exe PRC - [2008.09.03 03:11:04 | 008,105,984 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATKOSD2\ATKOSD2.exe PRC - [2008.08.19 20:34:04 | 000,159,744 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Media\DMedia.exe PRC - [2008.08.18 21:27:32 | 000,117,304 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\MsgTranAgt.exe PRC - [2008.08.18 20:56:22 | 000,098,304 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\HControlUser.exe PRC - [2008.08.14 07:00:16 | 000,158,264 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\WDC.exe PRC - [2008.08.14 07:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\KBFiltr.exe PRC - [2008.08.14 06:59:52 | 000,100,920 | ---- | M] () -- C:\Programme\ASUS\ATK Hotkey\AsLdrSrv.exe PRC - [2008.08.14 02:21:56 | 002,482,176 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\ATKOSD.exe PRC - [2008.07.19 05:52:16 | 000,104,936 | ---- | M] (CyberLink) -- C:\Programme\CyberLink\Power2Go\CLMLSvc.exe PRC - [2008.06.19 22:18:12 | 000,154,168 | ---- | M] (ASUS) -- C:\Programme\ASUS\ASUS CopyProtect\ASPG.exe PRC - [2008.06.18 08:10:24 | 000,297,528 | ---- | M] (ASUS) -- C:\Programme\ASUS\SmartLogon\sensorsrv.exe PRC - [2008.06.04 03:29:08 | 000,851,968 | ---- | M] (ATK) -- C:\Programme\ASUS\Splendid\ACMON.exe PRC - [2007.11.30 21:20:44 | 000,051,768 | ---- | M] () -- C:\Programme\ASUS\ASUS Live Update\ALU.exe PRC - [2007.08.08 10:08:40 | 000,094,208 | ---- | M] () -- C:\Programme\ATKGFNEX\GFNEXSrv.exe PRC - [2007.07.06 02:53:44 | 001,040,384 | ---- | M] () -- C:\Programme\Wireless Console 2\wcourier.exe PRC - [2005.07.07 01:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\System32\ACEngSvr.exe ========== Modules (No Company Name) ========== MOD - [2012.05.13 01:29:31 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\f3814b488d9e083cbbc623e01b389f09\System.Data.ni.dll MOD - [2012.05.13 01:27:59 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll MOD - [2012.05.13 01:27:53 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll MOD - [2012.05.13 01:27:52 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll MOD - [2012.05.13 01:27:36 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll MOD - [2011.12.20 14:32:00 | 001,515,520 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\Maps\R66Api.dll MOD - [2011.12.20 14:32:00 | 000,634,880 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcUPCTLoader.exe MOD - [2011.12.20 14:32:00 | 000,559,244 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\sqlite3.7.dll MOD - [2011.12.20 14:32:00 | 000,516,599 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\sqlite3.dll MOD - [2011.12.20 14:32:00 | 000,389,120 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcDetect.dll MOD - [2011.12.20 14:32:00 | 000,172,032 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcDetectLegend.dll MOD - [2011.12.20 14:32:00 | 000,143,360 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcDisk.dll MOD - [2011.12.20 14:32:00 | 000,103,936 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\OutputLog.dll MOD - [2011.12.20 14:32:00 | 000,094,208 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\fdHttpd.dll MOD - [2011.07.29 01:09:42 | 000,096,112 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdateCheck.dll MOD - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe MOD - [2010.11.13 02:02:21 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll MOD - [2010.11.05 03:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll MOD - [2008.10.17 02:45:20 | 000,014,848 | ---- | M] () -- C:\Programme\P4G\OvrClk.dll MOD - [2008.09.16 20:18:06 | 000,132,608 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll MOD - [2008.08.21 01:49:56 | 000,016,384 | ---- | M] () -- C:\Programme\P4G\DevMng.dll MOD - [2008.07.29 13:55:14 | 000,969,728 | ---- | M] () -- C:\Programme\OpenOffice.org 3\program\libxml2.dll MOD - [2008.07.19 05:52:08 | 000,649,704 | ---- | M] () -- C:\Programme\CyberLink\Power2Go\CLMediaLibrary.dll MOD - [2008.06.09 19:55:08 | 000,013,096 | ---- | M] () -- C:\Programme\CyberLink\Power2Go\CLMLSvcPS.dll MOD - [2007.11.30 21:20:44 | 000,051,768 | ---- | M] () -- C:\Programme\ASUS\ASUS Live Update\ALU.exe MOD - [2007.11.13 01:41:50 | 000,106,496 | ---- | M] () -- C:\Programme\ASUS\ATK Hotkey\MsgTran.dll MOD - [2007.08.14 23:59:54 | 006,365,184 | ---- | M] () -- C:\Programme\Common Files\LightScribe\QtGui4.dll MOD - [2007.07.12 23:55:52 | 000,131,072 | ---- | M] () -- C:\Programme\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll MOD - [2007.07.12 23:55:28 | 001,581,056 | ---- | M] () -- C:\Programme\Common Files\LightScribe\QtCore4.dll MOD - [2007.03.10 02:16:52 | 000,106,496 | ---- | M] () -- C:\Programme\ATKGFNEX\AGFNEX.dll ========== Win32 Services (SafeList) ========== SRV - [2012.05.11 23:03:15 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2012.05.11 23:03:15 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2012.04.04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012.04.03 19:16:00 | 001,262,912 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2012.04.03 07:15:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2012.03.08 18:32:24 | 001,492,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Live\Family Safety\fsssvc.exe -- (fsssvc) SRV - [2011.09.15 13:06:04 | 000,088,576 | ---- | M] () [Auto | Running] -- C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service) SRV - [2011.07.20 06:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc) SRV - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc) SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2009.02.26 19:36:22 | 000,064,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) SRV - [2008.11.20 20:09:20 | 000,307,200 | -H-- | M] (DeviceVM) [Auto | Running] -- C:\ASUS.SYS\DVMExportService.exe -- (DvmMDES) SRV - [2008.10.24 16:35:44 | 000,128,296 | ---- | M] () [Auto | Running] -- C:\Programme\AAVUpdateManager\aavus.exe -- (AAV UpdateService) SRV - [2008.08.14 06:59:52 | 000,100,920 | ---- | M] () [Auto | Running] -- C:\Programme\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService) SRV - [2007.08.08 10:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Programme\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv) SRV - [2007.05.31 09:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007.05.31 09:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) SRV - [2006.10.26 23:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose) ========== Driver Services (SafeList) ========== DRV - [2012.07.26 12:11:54 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy) DRV - [2012.05.11 23:03:16 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2012.05.11 23:03:16 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2012.04.03 19:16:00 | 011,348,288 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2011.11.09 22:12:31 | 000,232,512 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2011.10.11 15:00:01 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr) DRV - [2011.04.30 14:00:18 | 000,039,064 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt) DRV - [2011.04.30 14:00:06 | 000,041,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt) DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WINUSB) DRV - [2010.06.23 11:24:56 | 000,023,040 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\htcnprot.sys -- (htcnprot) DRV - [2010.06.17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2010.05.07 06:50:55 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt) DRV - [2010.05.07 06:50:54 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt) DRV - [2009.11.09 23:39:14 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd) DRV - [2009.10.26 09:54:24 | 000,025,088 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ANDROIDUSB.sys -- (HTCAND32) DRV - [2009.07.14 00:02:53 | 000,048,128 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SiSGB6.sys -- (SiSGbeLH) DRV - [2009.07.14 00:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr) DRV - [2008.12.10 05:20:56 | 001,772,544 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC) DRV - [2008.11.16 18:39:44 | 000,131,984 | ---- | M] (Deterministic Networks, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\dne2000.sys -- (DNE) DRV - [2008.06.03 08:41:51 | 000,015,928 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr) DRV - [2008.05.29 20:21:04 | 000,015,416 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\System32\drivers\lullaby.sys -- (lullaby) DRV - [2007.07.24 21:09:04 | 000,013,880 | ---- | M] () [Kernel | Auto | Running] -- C:\Programme\ATKGFNEX\ASMMAP.sys -- (ASMMAP) DRV - [2007.01.18 20:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CVirtA.sys -- (CVirtA) DRV - [2006.12.14 09:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor) DRV - [2005.11.03 16:40:07 | 000,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfvfs02.sys -- (sfvfs02) DRV - [2005.08.10 14:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01) DRV - [2005.05.16 15:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64} IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64} IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/ IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\URLSearchHook: - No CLSID value found IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{53C30388-824D-4D09-AA65-87FD20D67DA1}: "URL" = hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search={SearchTerms} IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.defaulturl: "hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search=" FF - prefs.js..browser.search.selectedEngine: "ICQ Search" FF - prefs.js..browser.startup.homepage: "hxxp://start.icq.com/" FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.5 FF - prefs.js..extensions.enabledItems: zotero@chnm.gmu.edu:2.0.4 FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906 FF - prefs.js..extensions.enabledItems: {02B06ED9-2E6A-48B2-9EB1-8C3BDB23353A}:1.9.1 FF - prefs.js..extensions.enabledItems: facepad@lazyrussian.com:0.8.2 FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q=" FF - prefs.js..network.proxy.http: "127.0.0.1" FF - prefs.js..network.proxy.http_port: 50370 FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_257.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.448: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\***\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( ) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\***\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\***\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.11.04 04:32:13 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.01.30 19:10:21 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.11.04 04:32:13 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{02B06ED9-2E6A-48B2-9EB1-8C3BDB23353A}: C:\Users\***\AppData\Local\{02B06ED9-2E6A-48B2-9EB1-8C3BDB23353A} [2010.11.04 04:49:54 | 000,000,000 | ---D | M] [2011.11.27 21:52:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\vvi9ogvm.default\extensions [2011.11.27 21:52:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\vvi9ogvm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2011.11.27 21:52:58 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2012.02.11 18:01:16 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2011.11.03 19:53:49 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2011.10.03 06:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll ========== Chrome ========== CHR - homepage: hxxp://www.google.com CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: hxxp://www.google.com CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\Application\20.0.1132.57\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\Application\20.0.1132.57\gcswf32.dll CHR - plugin: Shockwave Flash (Disabled) = C:\Users\***\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Skype Toolbars (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll CHR - plugin: Java(TM) Platform SE 7 U4 (Enabled) = C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll CHR - plugin: Java Deployment Toolkit 7.0.40.255 (Enabled) = C:\Windows\system32\npDeployJava1.dll CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa2.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: QUAKE LIVE (Enabled) = C:\ProgramData\id Software\QuakeLive\npquakezero.dll CHR - plugin: Google Update (Enabled) = C:\Users\***\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Facebook Plugin (Enabled) = C:\Users\***\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll CHR - plugin: Move Media Player 7 (Enabled) = C:\Users\***\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll CHR - Extension: YouTube = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google-Suche = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Skype Click to Call = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\ CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\ CHR - Extension: Google Mail = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) O2 - BHO: (no name) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - No CLSID value found. O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe () O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe (ASUS) O4 - HKLM..\Run: [ATKMEDIA] C:\Programme\ASUS\ATK Media\DMedia.exe (ASUS) O4 - HKLM..\Run: [ATKOSD2] C:\Programme\ASUS\ATKOSD2\ATKOSD2.exe (ASUS) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [HControlUser] C:\Programme\ASUS\ATK Hotkey\HControlUser.exe (ASUS) O4 - HKLM..\Run: [HTC Sync Loader] C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe () O4 - HKLM..\Run: [ Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [P2Go_Menu] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [PDFPrint] C:\Programme\PDF24\pdf24.exe (Geek Software GmbH) O4 - HKLM..\Run: [Skytel] C:\Programme\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000..\Run: [OscarEditor] "C:\Program Files\MOUSE Editor\\MouseEditor.exe" Minimum File not found O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil10c.exe (Adobe Systems, Inc.) O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe () O4 - Startup: C:\Users\User2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk = C:\Programme\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1 O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O13 - gopher Prefix: missing O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.de/common/asusTek_sys_ctrl.cab (asusTek_sysctrl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F3AEA16B-1611-4632-8548-634EC3598CBA}: DhcpNameServer = 192.168.43.1 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Programme\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O24 - Desktop WallPaper: C:\Users\***\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O24 - Desktop BackupWallPaper: C:\Users\***\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell - "" = AutoRun O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell\AutoRun\command - "" = F:\Setup.exe O33 - MountPoints2\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\Shell\dinstall\command - "" = F:\directx\dxsetup.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32: msacm.ac3filter - C:\Windows\System32\ac3filter.acm () Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.) Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L) Drivers32: vidc.i420 - C:\Windows\System32\i420vfw.dll (www.helixcommunity.org) Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.) CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2012.08.02 12:10:11 | 000,597,504 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe [2012.08.01 20:26:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1C8B1A5B-32F2-4872-B530-96F7DEB2075B} [2012.08.01 20:26:33 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{E973CC4F-916F-45CB-873C-58898AB1FAC0} [2012.07.31 23:59:29 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{4A81BC08-99EE-4B27-8CEB-86B6E2465682} [2012.07.31 23:59:16 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{F7CDEFFC-904C-4D36-B561-BB8D7CA0D987} [2012.07.31 09:26:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{85D841BA-A05C-4A1A-A3B4-9EFB8F21BEAF} [2012.07.31 09:24:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{FBB217E7-56FB-457B-8F7C-88BB3ACC9649} [2012.07.30 16:29:06 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{189DF4F4-96E4-4619-AB3C-DFD3B0FD014C} [2012.07.30 16:28:52 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{B72848D8-54E2-4125-AB8B-07A2AC1FD555} [2012.07.27 19:52:25 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1732372D-3B5A-4A7A-BC1B-3035E74AEF5F} [2012.07.27 19:52:11 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{EC7910C3-3F28-4DA7-9D37-CD7623969E4D} [2012.07.27 18:12:08 | 000,000,000 | -H-D | C] -- C:\dvmexp [2012.07.26 14:37:34 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2012.07.26 12:10:48 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2012.07.26 11:59:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A6AA22DA-861E-4F90-8CDB-9ADEEDCA971B} [2012.07.26 11:59:29 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{860DFF9A-139D-4361-A825-058F122C3F73} [2012.07.24 19:22:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{9BA75DB0-F4DC-4252-81D0-E95AEDAF90AF} [2012.07.24 19:21:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{E07BCC5F-2546-40E9-9165-90222C2811E5} [2012.07.23 21:37:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{DD171A30-289A-4E57-A1EC-BD5076A9FC23} [2012.07.23 21:36:51 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1070BA7C-EB72-4FE6-823E-58466380B8AE} [2012.07.22 22:35:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7D076970-BFD6-4244-AF29-B4A3608D22FC} [2012.07.22 22:35:33 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{B83D740C-013E-439E-815A-D2C4F802D957} [2012.07.22 20:30:19 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\viruszeugs [2012.07.21 14:35:23 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{E61564EC-BA2E-4A7F-A0AC-BBE988D70A32} [2012.07.21 14:34:45 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{EE462F51-646A-4232-8116-F40D5B89AD8C} [2012.07.20 23:49:48 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7F73E387-C28F-408F-AA79-AFFAE0F9A3FD} [2012.07.20 23:49:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{D57486E4-CC3E-4F0C-83AF-DF5A4180E7A5} [2012.07.20 23:43:49 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3457CA14-B8CD-4A90-AD7E-105067D3C458} [2012.07.20 23:43:32 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A60D35AC-7358-4245-8DC7-6C10B0EE4D6A} [2012.07.19 01:12:54 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\theHunter [2012.07.19 01:10:23 | 000,000,000 | ---D | C] -- C:\Windows\System32\directx [2012.07.19 01:04:55 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\CyberLink [2012.07.17 00:11:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carnivores 2 [2012.07.15 20:36:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carnivores [2012.07.15 20:02:25 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0ABC2912-0253-41A7-A288-0C75AECA11B1} [2012.07.15 20:02:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BE3F9F09-A7B7-4693-9670-B4F4E24825F2} [2012.07.08 20:29:33 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{78C72B40-BF69-467F-A8EC-3A908FCA4F36} [2012.07.08 20:29:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C92AE0D9-92DC-421F-B815-4F2B5C4FFF5B} [2012.07.08 20:26:39 | 000,000,000 | ---D | C] -- C:\Windows\de [2012.07.08 20:14:52 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{6335CED3-14E3-4B26-9D3F-750A5AED10A5} [2012.07.08 20:14:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{17DCA90B-2287-4FFB-BD6D-A39D928E9BBB} [2012.07.07 00:10:24 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2AFCDE61-8680-46D2-92D2-FF74FA5653B9} [2012.07.07 00:10:01 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{05109273-94C2-4D50-B76D-FDB373E9C22D} ========== Files - Modified Within 30 Days ========== [2012.08.02 12:10:14 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe [2012.08.02 12:03:03 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000UA.job [2012.08.02 11:32:00 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004UA.job [2012.08.02 11:32:00 | 000,001,068 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004Core.job [2012.08.02 11:19:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012.08.01 20:13:29 | 000,001,072 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000Core.job [2012.07.30 16:02:58 | 000,654,166 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2012.07.30 16:02:58 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012.07.30 16:02:58 | 000,130,006 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2012.07.30 16:02:58 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012.07.30 14:28:28 | 000,010,352 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.07.30 14:28:28 | 000,010,352 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.07.27 20:12:18 | 000,000,012 | -H-- | M] () -- C:\dvmexp.idx [2012.07.27 18:11:54 | 2415,394,816 | -HS- | M] () -- C:\hiberfil.sys [2012.07.27 17:52:04 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe [2012.07.26 12:11:54 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2012.07.25 18:11:28 | 000,053,978 | ---- | M] () -- C:\Users\***\Desktop\avir.jpg [2012.07.22 20:34:31 | 000,000,176 | ---- | M] () -- C:\Users\***\defogger_reenable [2012.07.22 20:00:31 | 000,001,078 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2012.07.17 01:11:37 | 000,001,593 | ---- | M] () -- C:\Windows\VPNUnInstall.MIF [2012.07.15 03:29:34 | 000,428,056 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2012.07.14 23:16:43 | 000,002,415 | ---- | M] () -- C:\Users\***\Desktop\Google Chrome.lnk [2012.07.06 13:59:34 | 000,838,258 | ---- | M] () -- C:\Users\***\Desktop\mieterfragebogen.jpg [2012.07.03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys ========== Files Created - No Company Name ========== [2012.07.27 20:12:18 | 000,000,012 | -H-- | C] () -- C:\dvmexp.idx [2012.07.25 18:11:27 | 000,053,978 | ---- | C] () -- C:\Users\***\Desktop\avir.jpg [2012.07.22 20:34:10 | 000,000,176 | ---- | C] () -- C:\Users\***\defogger_reenable [2012.07.22 20:00:31 | 000,001,078 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2012.07.17 01:10:19 | 000,001,593 | ---- | C] () -- C:\Windows\VPNUnInstall.MIF [2012.07.06 13:29:13 | 000,838,258 | ---- | C] () -- C:\Users\***\Desktop\mieterfragebogen.jpg [2012.05.12 02:15:08 | 000,000,000 | ---- | C] () -- C:\Windows\PowerReg.dat [2012.04.03 07:16:04 | 000,423,744 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe [2012.01.27 23:41:51 | 000,000,096 | ---- | C] () -- C:\Users\***\.asadminpass [2011.11.10 19:33:05 | 000,000,001 | ---- | C] () -- C:\Windows\System32\SI.bin [2011.11.06 16:48:31 | 000,410,942 | ---- | C] () -- C:\Windows\adb.exe [2011.11.06 16:48:31 | 000,401,408 | ---- | C] () -- C:\Windows\wget.exe [2011.11.06 16:48:31 | 000,356,009 | ---- | C] () -- C:\Windows\fastboot.exe [2011.11.06 16:48:31 | 000,063,488 | ---- | C] () -- C:\Windows\md5sum.exe [2011.11.04 22:47:29 | 000,032,256 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll [2011.03.03 22:36:38 | 000,007,168 | ---- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.06.29 20:44:07 | 000,001,418 | ---- | C] () -- C:\Users\***\.recently-used.xbel [2008.08.09 00:48:20 | 000,090,112 | ---- | C] () -- C:\Program Files\Common Files\CPInstallAction.dll [2008.05.22 19:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files\Common Files\banner.jpg ========== LOP Check ========== [2012.07.08 21:37:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\.minecraft [2010.11.04 04:50:33 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\AnvSoft [2012.05.12 02:41:38 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Atari [2011.12.26 17:53:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\calibre [2011.08.12 13:13:59 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Command & Conquer 3 Tiberium Wars [2009.04.08 23:35:55 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools [2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Lite [2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Pro [2012.08.02 00:27:44 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Dropbox [2012.05.10 21:54:54 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DVDVideoSoft [2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Electronic Arts [2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Facebook [2010.01.13 19:12:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\FVZilla [2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GetRightToGo [2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\gtk-2.0 [2012.01.12 21:40:34 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HandBrake [2012.01.29 21:24:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HTC [2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Imperium Romanum [2011.09.21 22:23:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Leadertech [2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade [2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade Warband [2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Moyea [2012.07.03 21:26:19 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mumble [2011.07.25 12:20:10 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\MyPhoneExplorer [2010.11.04 04:51:14 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\OpenOffice.org [2010.11.04 04:51:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\The Bat! [2012.07.21 16:01:39 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\uTorrent [2010.11.09 02:13:15 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Windows Live Writer [2011.03.17 01:28:56 | 000,000,000 | ---D | M] -- C:\Users\Gast\AppData\Roaming\HTC [2011.10.09 16:23:55 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\Canneverbe Limited [2012.04.01 21:22:08 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\Dropbox [2012.01.30 18:28:48 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\HTC [2011.08.12 22:42:22 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\ICQ [2011.08.04 19:02:17 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\MyPhoneExplorer [2011.06.10 18:44:28 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\OpenOffice.org [2011.07.21 14:36:44 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\RapidTyping [2012.04.01 21:18:05 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\Spotify [2012.03.30 13:48:34 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\uTorrent [2011.12.28 23:42:07 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %ALLUSERSPROFILE%\Application Data\*. > < %ALLUSERSPROFILE%\Application Data\*.exe /s > < %APPDATA%\*. > [2012.07.08 21:37:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\.minecraft [2011.07.25 20:56:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Adobe [2010.11.04 04:50:33 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\AnvSoft [2011.10.24 22:10:58 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Apple Computer [2012.05.12 02:41:38 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Atari [2011.10.20 00:34:01 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Avira [2011.12.26 17:53:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\calibre [2011.08.12 13:13:59 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Command & Conquer 3 Tiberium Wars [2012.07.19 01:04:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\CyberLink [2009.04.08 23:35:55 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools [2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Lite [2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Pro [2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DivX [2012.08.02 00:27:44 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Dropbox [2012.06.03 23:48:50 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\dvdcss [2012.05.10 21:54:54 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DVDVideoSoft [2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Electronic Arts [2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Facebook [2010.01.13 19:12:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\FVZilla [2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GetRightToGo [2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\gtk-2.0 [2012.01.12 21:40:34 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HandBrake [2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HP [2012.02.06 19:08:29 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HpUpdate [2012.01.29 21:24:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HTC [2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Identities [2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Imperium Romanum [2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\InstallShield [2011.09.21 22:23:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Leadertech [2011.09.21 22:20:18 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Logishrd [2011.09.21 22:23:09 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Logitech [2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Macromedia [2010.11.04 04:50:51 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Malwarebytes [2009.07.14 10:56:41 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Media Center Programs [2012.07.22 20:19:52 | 000,000,000 | --SD | M] -- C:\Users\***\AppData\Roaming\Microsoft [2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade [2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade Warband [2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Moyea [2011.11.27 21:52:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mozilla [2012.07.03 21:26:19 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mumble [2011.07.25 12:20:10 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\MyPhoneExplorer [2011.08.13 02:23:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\NVIDIA [2010.11.04 04:51:14 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\OpenOffice.org [2010.11.04 04:51:17 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Real [2010.11.04 04:51:17 | 000,000,000 | RH-D | M] -- C:\Users\***\AppData\Roaming\SecuROM [2012.04.29 19:42:15 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Skype [2010.11.04 04:51:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\The Bat! [2012.07.21 16:01:39 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\uTorrent [2012.08.01 23:39:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\vlc [2012.03.25 00:11:51 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Winamp [2010.11.09 02:13:15 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Windows Live Writer [2009.04.08 23:25:00 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\WinRAR < %APPDATA%\*.exe /s > [2012.05.24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012.05.24 20:39:24 | 000,872,144 | ---- | M] (Dropbox, Inc.) -- C:\Users\***\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe [2012.05.24 20:39:56 | 000,177,280 | ---- | M] (Dropbox, Inc.) -- C:\Users\***\AppData\Roaming\Dropbox\bin\Uninstall.exe [2010.04.12 20:48:32 | 000,050,354 | ---- | M] (Facebook, Inc.) -- C:\Users\***\AppData\Roaming\Facebook\uninstall.exe [2010.11.25 00:59:45 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\***\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe [2011.09.21 22:23:02 | 000,053,248 | R--- | M] (Acresso Software Inc.) -- C:\Users\***\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe [2009.09.20 01:21:22 | 000,010,134 | R--- | M] () -- C:\Users\***\AppData\Roaming\Microsoft\Installer\{C5E882B1-C7A4-43EA-89E2-15E5ECA6CEA0}\ARPPRODUCTICON.exe [2009.09.20 01:21:24 | 000,053,248 | R--- | M] (InstallShield Software Corp.) -- C:\Users\***\AppData\Roaming\Microsoft\Installer\{C5E882B1-C7A4-43EA-89E2-15E5ECA6CEA0}\NewShortcut1_C5E882B1C7A443EA89E215E5ECA6CEA0.exe [2009.09.20 01:21:26 | 000,053,248 | R--- | M] (InstallShield Software Corp.) -- C:\Users\***\AppData\Roaming\Microsoft\Installer\{C5E882B1-C7A4-43EA-89E2-15E5ECA6CEA0}\NewShortcut2_C5E882B1C7A443EA89E215E5ECA6CEA0.exe [2010.05.30 21:39:20 | 000,443,912 | ---- | M] (RealNetworks, Inc.) -- C:\Users\***\AppData\Roaming\Real\Update\setup3.10\setup.exe [2011.01.26 23:15:23 | 000,510,120 | ---- | M] (RealNetworks, Inc.) -- C:\Users\***\AppData\Roaming\Real\Update\setup3.13\setup.exe [2011.11.19 23:30:18 | 000,317,048 | ---- | M] (RealNetworks, Inc.) -- C:\Users\***\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\9.00\rnupgagent.exe < %SYSTEMDRIVE%\*.exe > < MD5 for: AGP440.SYS > [2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys [2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys [2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys [2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys < MD5 for: ATAPI.SYS > [2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys [2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys [2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys [2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys < MD5 for: CNGAUDIT.DLL > [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll < MD5 for: IASTORV.SYS > [2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\drivers\iaStorV.sys [2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys [2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys [2011.03.11 07:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_aef580fde910b4b0\iaStorV.sys [2011.03.11 07:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys [2009.07.14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys [2010.11.20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys [2010.11.20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys [2011.03.11 07:52:21 | 000,332,160 | ---- | M] (Intel Corporation) MD5=B9039A34C2F8769490DCC494E2402445 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_afae2d45020c148b\iaStorV.sys < MD5 for: NETLOGON.DLL > [2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll [2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll [2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll < MD5 for: NVSTOR.SYS > [2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\drivers\nvstor.sys [2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys [2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys [2011.03.11 07:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_39bef1ad20475e88\nvstor.sys [2011.03.11 07:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys [2011.03.11 07:52:25 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=8A7583A3B58D3EEB28BB26626526BC91 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_3a779df43942be63\nvstor.sys [2010.11.20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys [2010.11.20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys [2009.07.14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys < MD5 for: SCECLI.DLL > [2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll [2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll [2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll < MD5 for: USER32.DLL > [2009.07.14 03:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll [2010.11.20 14:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\System32\user32.dll [2010.11.20 14:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll < MD5 for: USERINIT.EXE > [2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe [2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe [2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe < MD5 for: WININIT.EXE > [2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\System32\wininit.exe [2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe < MD5 for: WINLOGON.EXE > [2009.10.28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe [2009.10.28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe [2010.11.20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe [2010.11.20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe [2012.07.03 13:46:42 | 000,217,672 | ---- | M] () MD5=8A7F34F0BBD076EC3815680A7309114F -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe [2009.07.14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe < MD5 for: WS2IFSL.SYS > [2009.07.14 01:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys [2009.07.14 01:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > < > < End of report > |
|
03.08.2012, 11:58
| #18 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Internet extrem langsam - an anderen Endgeräten problemlos - Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)
__________________Code:
ATTFilter :OTL
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{53C30388-824D-4D09-AA65-87FD20D67DA1}: "URL" = http://flvdirect.iamwired.net/websearch.php?src=tops&search={SearchTerms}
IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
FF - prefs.js..extensions.enabledItems: facepad@lazyrussian.com:0.8.2
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q="
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 50370
FF - user.js - File not found
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "http://flvdirect.iamwired.net/websearch.php?src=tops&search="
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "http://start.icq.com/"
FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.5
O2 - BHO: (no name) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell - "" = AutoRun
O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell\AutoRun\command - "" = F:\Setup.exe
O33 - MountPoints2\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\Shell\dinstall\command - "" = F:\directx\dxsetup.exe
:Commands
[purity]
[emptytemp]
[emptyflash]
[resethosts]
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet. Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt. Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!
__________________ |
|
03.08.2012, 14:23
| #19 |
| | Internet extrem langsam - an anderen Endgeräten problemlos - Gesagt, getan! Code:
ATTFilter All processes killed
========== OTL ==========
HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\StartPageCache| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Internet Explorer\SearchScopes\{53C30388-824D-4D09-AA65-87FD20D67DA1}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53C30388-824D-4D09-AA65-87FD20D67DA1}\ not found.
Registry key HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
Prefs.js: facepad@lazyrussian.com:0.8.2 removed from extensions.enabledItems
Prefs.js: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q=" removed from keyword.URL
Prefs.js: "127.0.0.1" removed from network.proxy.http
Prefs.js: 50370 removed from network.proxy.http_port
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search=" removed from browser.search.defaulturl
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: "hxxp://start.icq.com/" removed from browser.startup.homepage
Prefs.js: smartwebprinting@hp.com:4.5 removed from extensions.enabledItems
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
C:\autoexec.bat moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\ not found.
File F:\Setup.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\ not found.
File F:\directx\dxsetup.exe not found.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: ***
->Temp folder emptied: 604934066 bytes
->Temporary Internet Files folder emptied: 152533362 bytes
->Java cache emptied: 40338330 bytes
->FireFox cache emptied: 52369685 bytes
->Google Chrome cache emptied: 144944274 bytes
->Apple Safari cache emptied: 44496896 bytes
->Flash cache emptied: 91475 bytes
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 677279 bytes
->Flash cache emptied: 56475 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Gast
->Temp folder emptied: 1578369 bytes
->Temporary Internet Files folder emptied: 83156660 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 41585955 bytes
->Flash cache emptied: 59163 bytes
User: User2
->Temp folder emptied: 58409804 bytes
->Temporary Internet Files folder emptied: 72659581 bytes
->Java cache emptied: 1877457 bytes
->FireFox cache emptied: 357548212 bytes
->Apple Safari cache emptied: 21386240 bytes
->Flash cache emptied: 85202 bytes
User: Public
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32768 bytes
->Flash cache emptied: 2870 bytes
User: UpdatusUser.***-PC
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 677279 bytes
->Flash cache emptied: 56475 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 108923791 bytes
RecycleBin emptied: 306300640 bytes
Total Files Cleaned = 1.998,00 mb
[EMPTYFLASH]
User: All Users
User: ***
->Flash cache emptied: 0 bytes
User: Default
->Flash cache emptied: 0 bytes
User: Default User
->Flash cache emptied: 0 bytes
User: Gast
->Flash cache emptied: 0 bytes
User: User2
->Flash cache emptied: 0 bytes
User: Public
User: UpdatusUser
->Flash cache emptied: 0 bytes
User: UpdatusUser.***-PC
->Flash cache emptied: 0 bytes
Total Flash Files Cleaned = 0,00 mb
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
OTL by OldTimer - Version 3.2.55.0 log created on 08032012_150426
Files\Folders moved on Reboot...
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
|
|
03.08.2012, 20:00
| #20 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Internet extrem langsam - an anderen Endgeräten problemlos - Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm! Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet, Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten. Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C nach, da speichert der TDSS-Killer seine Logs.Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten! 
__________________ Logfiles bitte immer in CODE-Tags posten |
|
07.08.2012, 19:17
| #21 |
| | Internet extrem langsam - an anderen Endgeräten problemlos - Hallo, hat leider ein paar Tage gedauert da ich kaum zu Hause war, aber hier das Log: Code:
ATTFilter 19:12:46.0113 5196 TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
19:12:48.0145 5196 ============================================================
19:12:48.0145 5196 Current date / time: 2012/08/07 19:12:48.0145
19:12:48.0146 5196 SystemInfo:
19:12:48.0146 5196
19:12:48.0146 5196 OS Version: 6.1.7601 ServicePack: 1.0
19:12:48.0146 5196 Product type: Workstation
19:12:48.0146 5196 ComputerName: ***-PC
19:12:48.0146 5196 UserName: ***
19:12:48.0146 5196 Windows directory: C:\Windows
19:12:48.0146 5196 System windows directory: C:\Windows
19:12:48.0147 5196 Processor architecture: Intel x86
19:12:48.0147 5196 Number of processors: 2
19:12:48.0147 5196 Page size: 0x1000
19:12:48.0147 5196 Boot type: Normal boot
19:12:48.0147 5196 ============================================================
19:12:54.0147 5196 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
19:12:54.0202 5196 ============================================================
19:12:54.0202 5196 \Device\Harddisk0\DR0:
19:12:54.0221 5196 MBR partitions:
19:12:54.0222 5196 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1770D7A, BlocksNum 0x12A14C00
19:12:54.0233 5196 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x141859B9, BlocksNum 0x112A7D08
19:12:54.0234 5196 ============================================================
19:12:54.0590 5196 C: <-> \Device\Harddisk0\DR0\Partition0
19:12:55.0282 5196 D: <-> \Device\Harddisk0\DR0\Partition1
19:12:55.0283 5196 ============================================================
19:12:55.0283 5196 Initialize success
19:12:55.0283 5196 ============================================================
19:13:24.0574 7680 ============================================================
19:13:24.0575 7680 Scan started
19:13:24.0575 7680 Mode: Manual; SigCheck; TDLFS;
19:13:24.0575 7680 ============================================================
19:13:47.0662 7680 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
19:13:48.0116 7680 1394ohci - ok
19:13:49.0624 7680 AAV UpdateService (7eeb488346fbfa3731276c3ee8a8fd9e) C:\Program Files\AAVUpdateManager\aavus.exe
19:13:49.0640 7680 AAV UpdateService - ok
19:13:50.0351 7680 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
19:13:50.0399 7680 ACPI - ok
19:13:50.0501 7680 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
19:13:50.0879 7680 AcpiPmi - ok
19:13:51.0648 7680 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
19:13:51.0714 7680 AdobeARMservice - ok
19:13:52.0488 7680 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
19:13:52.0560 7680 adp94xx - ok
19:13:52.0643 7680 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
19:13:52.0671 7680 adpahci - ok
19:13:52.0952 7680 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
19:13:52.0976 7680 adpu320 - ok
19:13:53.0039 7680 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\Windows\System32\aelupsvc.dll
19:13:53.0174 7680 AeLookupSvc - ok
19:13:53.0475 7680 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys
19:13:53.0741 7680 AFD - ok
19:13:54.0076 7680 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
19:13:54.0164 7680 agp440 - ok
19:13:54.0573 7680 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
19:13:54.0597 7680 aic78xx - ok
19:13:54.0842 7680 ALG (18a54e132947cd98fea9accc57f98f13) C:\Windows\System32\alg.exe
19:13:55.0076 7680 ALG - ok
19:13:55.0158 7680 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
19:13:55.0175 7680 aliide - ok
19:13:55.0387 7680 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
19:13:55.0437 7680 amdagp - ok
19:13:55.0482 7680 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
19:13:55.0500 7680 amdide - ok
19:13:55.0573 7680 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
19:13:55.0679 7680 AmdK8 - ok
19:13:55.0728 7680 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
19:13:55.0813 7680 AmdPPM - ok
19:13:56.0079 7680 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys
19:13:56.0102 7680 amdsata - ok
19:13:56.0271 7680 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
19:13:56.0324 7680 amdsbs - ok
19:13:56.0415 7680 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys
19:13:56.0433 7680 amdxata - ok
19:13:56.0828 7680 AntiVirSchedulerService (466a0d95960dad3222c896d2cea99993) C:\Program Files\Avira\AntiVir Desktop\sched.exe
19:13:56.0863 7680 AntiVirSchedulerService - ok
19:13:57.0198 7680 AntiVirService (a489be6bb0aa1ff406b488b60542314b) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
19:13:57.0215 7680 AntiVirService - ok
19:13:57.0446 7680 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
19:13:58.0289 7680 AppID - ok
19:13:58.0469 7680 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\Windows\System32\appidsvc.dll
19:13:58.0537 7680 AppIDSvc - ok
19:13:58.0761 7680 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\Windows\System32\appinfo.dll
19:13:58.0883 7680 Appinfo - ok
19:13:59.0260 7680 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
19:13:59.0283 7680 arc - ok
19:13:59.0339 7680 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
19:13:59.0367 7680 arcsas - ok
19:13:59.0627 7680 ASLDRService (eb1807795cd3eeaa3288b4a30de254e8) C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
19:13:59.0724 7680 ASLDRService - ok
19:13:59.0833 7680 ASMMAP (7b4d08d2017ac06689d422e06c43f0aa) C:\Program Files\ATKGFNEX\ASMMAP.sys
19:13:59.0846 7680 ASMMAP - ok
19:14:00.0054 7680 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
19:14:00.0486 7680 AsyncMac - ok
19:14:00.0546 7680 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
19:14:00.0564 7680 atapi - ok
19:14:01.0107 7680 athr (76bab0c824e2d05b940c4dd40a9b08bf) C:\Windows\system32\DRIVERS\athr.sys
19:14:01.0208 7680 athr - ok
19:14:01.0401 7680 ATKGFNEXSrv (7c157574a181b19b9dcf5f339e25337e) C:\Program Files\ATKGFNEX\GFNEXSrv.exe
19:14:01.0451 7680 ATKGFNEXSrv ( UnsignedFile.Multi.Generic ) - warning
19:14:01.0451 7680 ATKGFNEXSrv - detected UnsignedFile.Multi.Generic (1)
19:14:02.0956 7680 atksgt (f0d933b42cd0594048e4d5200ae9e417) C:\Windows\system32\DRIVERS\atksgt.sys
19:14:03.0002 7680 atksgt - ok
19:14:03.0612 7680 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll
19:14:03.0712 7680 AudioEndpointBuilder - ok
19:14:03.0723 7680 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll
19:14:03.0758 7680 Audiosrv - ok
19:14:04.0127 7680 avgntflt (d5541f0afb767e85fc412fc609d96a74) C:\Windows\system32\DRIVERS\avgntflt.sys
19:14:04.0167 7680 avgntflt - ok
19:14:04.0440 7680 avipbb (7d967a682d4694df7fa57d63a2db01fe) C:\Windows\system32\DRIVERS\avipbb.sys
19:14:04.0482 7680 avipbb - ok
19:14:04.0528 7680 avkmgr (271cfd1a989209b1964e24d969552bf7) C:\Windows\system32\DRIVERS\avkmgr.sys
19:14:04.0543 7680 avkmgr - ok
19:14:04.0634 7680 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\Windows\System32\AxInstSV.dll
19:14:04.0814 7680 AxInstSV - ok
19:14:05.0278 7680 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
19:14:05.0406 7680 b06bdrv - ok
19:14:05.0772 7680 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
19:14:05.0840 7680 b57nd60x - ok
19:14:06.0247 7680 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\Windows\System32\bdesvc.dll
19:14:06.0457 7680 BDESVC - ok
19:14:06.0578 7680 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
19:14:06.0680 7680 Beep - ok
19:14:07.0176 7680 BFE (1e2bac209d184bb851e1a187d8a29136) C:\Windows\System32\bfe.dll
19:14:07.0279 7680 BFE - ok
19:14:07.0520 7680 BITS (e585445d5021971fae10393f0f1c3961) C:\Windows\System32\qmgr.dll
19:14:07.0618 7680 BITS - ok
19:14:07.0838 7680 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
19:14:07.0903 7680 blbdrive - ok
19:14:08.0072 7680 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
19:14:08.0164 7680 bowser - ok
19:14:08.0213 7680 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
19:14:08.0260 7680 BrFiltLo - ok
19:14:08.0325 7680 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
19:14:08.0410 7680 BrFiltUp - ok
19:14:08.0619 7680 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\Windows\System32\browser.dll
19:14:08.0790 7680 Browser - ok
19:14:08.0980 7680 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
19:14:09.0124 7680 Brserid - ok
19:14:09.0174 7680 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
19:14:09.0269 7680 BrSerWdm - ok
19:14:09.0362 7680 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
19:14:09.0495 7680 BrUsbMdm - ok
19:14:09.0559 7680 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
19:14:09.0629 7680 BrUsbSer - ok
19:14:09.0693 7680 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
19:14:09.0793 7680 BTHMODEM - ok
19:14:09.0966 7680 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\Windows\system32\bthserv.dll
19:14:10.0057 7680 bthserv - ok
19:14:10.0132 7680 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
19:14:10.0188 7680 cdfs - ok
19:14:10.0263 7680 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\DRIVERS\cdrom.sys
19:14:10.0295 7680 cdrom - ok
19:14:10.0370 7680 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll
19:14:10.0422 7680 CertPropSvc - ok
19:14:10.0512 7680 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
19:14:10.0599 7680 circlass - ok
19:14:11.0191 7680 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
19:14:11.0223 7680 CLFS - ok
19:14:11.0951 7680 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:14:11.0971 7680 clr_optimization_v2.0.50727_32 - ok
19:14:12.0502 7680 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:14:12.0592 7680 clr_optimization_v4.0.30319_32 - ok
19:14:12.0662 7680 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
19:14:12.0679 7680 CmBatt - ok
19:14:12.0819 7680 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
19:14:12.0885 7680 cmdide - ok
19:14:13.0104 7680 CNG (247b4ce2dab1160cd422d532d5241e1f) C:\Windows\system32\Drivers\cng.sys
19:14:13.0238 7680 CNG - ok
19:14:13.0324 7680 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
19:14:13.0406 7680 Compbatt - ok
19:14:13.0471 7680 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys
19:14:13.0498 7680 CompositeBus - ok
19:14:13.0519 7680 COMSysApp - ok
19:14:13.0541 7680 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
19:14:13.0557 7680 crcdisk - ok
19:14:13.0721 7680 CryptSvc (06e771aa596b8761107ab57e99f128d7) C:\Windows\system32\cryptsvc.dll
19:14:13.0895 7680 CryptSvc - ok
19:14:13.0930 7680 CVirtA (b5ecadf7708960f1818c7fa015f4c239) C:\Windows\system32\DRIVERS\CVirtA.sys
19:14:13.0979 7680 CVirtA - ok
19:14:14.0052 7680 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll
19:14:14.0143 7680 DcomLaunch - ok
19:14:14.0570 7680 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\Windows\System32\defragsvc.dll
19:14:14.0637 7680 defragsvc - ok
19:14:14.0826 7680 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
19:14:14.0890 7680 DfsC - ok
19:14:15.0220 7680 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\Windows\system32\dhcpcore.dll
19:14:15.0328 7680 Dhcp - ok
19:14:15.0537 7680 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
19:14:15.0684 7680 discache - ok
19:14:15.0745 7680 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
19:14:15.0768 7680 Disk - ok
19:14:15.0845 7680 DNE (b5aa5aa5ac327bd7c1aec0c58f0c1144) C:\Windows\system32\DRIVERS\dne2000.sys
19:14:15.0861 7680 DNE - ok
19:14:15.0922 7680 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\Windows\System32\dnsrslvr.dll
19:14:15.0981 7680 Dnscache - ok
19:14:16.0574 7680 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\Windows\System32\dot3svc.dll
19:14:16.0684 7680 dot3svc - ok
19:14:16.0997 7680 Dot4 (b5e479eb83707dd698f66953e922042c) C:\Windows\system32\DRIVERS\Dot4.sys
19:14:17.0044 7680 Dot4 - ok
19:14:17.0147 7680 Dot4Print (caefd09b6a6249c53a67d55a9a9fcabf) C:\Windows\system32\drivers\Dot4Prt.sys
19:14:17.0199 7680 Dot4Print - ok
19:14:17.0246 7680 dot4usb (cf491ff38d62143203c065260567e2f7) C:\Windows\system32\DRIVERS\dot4usb.sys
19:14:17.0278 7680 dot4usb - ok
19:14:17.0554 7680 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\Windows\system32\dps.dll
19:14:17.0623 7680 DPS - ok
19:14:17.0775 7680 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
19:14:17.0848 7680 drmkaud - ok
19:14:17.0929 7680 dtsoftbus01 (c0c7ceccb6c85994c2bc92d58e52d3f2) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
19:14:18.0016 7680 dtsoftbus01 - ok
19:14:18.0083 7680 DvmMDES (f6b7c3e5749fe84e081860962dac9ea3) C:\ASUS.SYS\DVMExportService.exe
19:14:18.0116 7680 DvmMDES ( UnsignedFile.Multi.Generic ) - warning
19:14:18.0116 7680 DvmMDES - detected UnsignedFile.Multi.Generic (1)
19:14:18.0189 7680 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
19:14:18.0298 7680 DXGKrnl - ok
19:14:18.0599 7680 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\Windows\System32\eapsvc.dll
19:14:18.0745 7680 EapHost - ok
19:14:22.0216 7680 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
19:14:22.0575 7680 ebdrv - ok
19:14:24.0494 7680 EFS (81951f51e318aecc2d68559e47485cc4) C:\Windows\System32\lsass.exe
19:14:24.0643 7680 EFS - ok
19:14:26.0130 7680 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\Windows\ehome\ehRecvr.exe
19:14:26.0296 7680 ehRecvr - ok
19:14:26.0552 7680 ehSched (d389bff34f80caede417bf9d1507996a) C:\Windows\ehome\ehsched.exe
19:14:26.0679 7680 ehSched - ok
19:14:28.0001 7680 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
19:14:28.0161 7680 elxstor - ok
19:14:28.0213 7680 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
19:14:28.0250 7680 ErrDev - ok
19:14:29.0035 7680 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\Windows\system32\es.dll
19:14:29.0136 7680 EventSystem - ok
19:14:29.0269 7680 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
19:14:29.0318 7680 exfat - ok
19:14:29.0724 7680 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
19:14:29.0790 7680 fastfat - ok
19:14:30.0907 7680 Fax (967ea5b213e9984cbe270205df37755b) C:\Windows\system32\fxssvc.exe
19:14:31.0070 7680 Fax - ok
19:14:31.0274 7680 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
19:14:31.0340 7680 fdc - ok
19:14:31.0462 7680 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\Windows\system32\fdPHost.dll
19:14:31.0641 7680 fdPHost - ok
19:14:31.0668 7680 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\Windows\system32\fdrespub.dll
19:14:31.0778 7680 FDResPub - ok
19:14:31.0789 7680 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
19:14:31.0805 7680 FileInfo - ok
19:14:31.0822 7680 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
19:14:31.0906 7680 Filetrace - ok
19:14:31.0994 7680 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
19:14:32.0084 7680 flpydisk - ok
19:14:32.0157 7680 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
19:14:32.0298 7680 FltMgr - ok
19:14:33.0644 7680 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\Windows\system32\FntCache.dll
19:14:33.0809 7680 FontCache - ok
19:14:34.0423 7680 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
19:14:34.0438 7680 FontCache3.0.0.0 - ok
19:14:34.0506 7680 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
19:14:34.0526 7680 FsDepends - ok
19:14:34.0631 7680 fssfltr (b0082808a6856a252f7cdd939892ce50) C:\Windows\system32\DRIVERS\fssfltr.sys
19:14:34.0713 7680 fssfltr - ok
19:14:36.0731 7680 fsssvc (28ddeeec44e988657b732cf404d504cb) C:\Program Files\Windows Live\Family Safety\fsssvc.exe
19:14:36.0872 7680 fsssvc - ok
19:14:38.0283 7680 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\Windows\system32\drivers\Fs_Rec.sys
19:14:38.0339 7680 Fs_Rec - ok
19:14:39.0157 7680 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
19:14:39.0278 7680 fvevol - ok
19:14:39.0650 7680 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
19:14:39.0667 7680 gagp30kx - ok
19:14:41.0650 7680 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\Windows\System32\gpsvc.dll
19:14:41.0753 7680 gpsvc - ok
19:14:41.0806 7680 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
19:14:41.0919 7680 hcw85cir - ok
19:14:42.0532 7680 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys
19:14:42.0638 7680 HDAudBus - ok
19:14:42.0791 7680 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
19:14:42.0879 7680 HidBatt - ok
19:14:43.0120 7680 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
19:14:43.0165 7680 HidBth - ok
19:14:43.0404 7680 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
19:14:43.0469 7680 HidIr - ok
19:14:43.0709 7680 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\Windows\system32\hidserv.dll
19:14:43.0793 7680 hidserv - ok
19:14:43.0855 7680 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\DRIVERS\hidusb.sys
19:14:43.0873 7680 HidUsb - ok
19:14:44.0028 7680 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\Windows\system32\kmsvc.dll
19:14:44.0092 7680 hkmsvc - ok
19:14:44.0504 7680 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\Windows\system32\ListSvc.dll
19:14:44.0647 7680 HomeGroupListener - ok
19:14:45.0080 7680 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\Windows\system32\provsvc.dll
19:14:45.0164 7680 HomeGroupProvider - ok
19:14:46.0546 7680 hpqcxs08 (0a3c6aa4a9fc38c20ba4eac2c3351c05) C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
19:14:46.0623 7680 hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning
19:14:46.0623 7680 hpqcxs08 - detected UnsignedFile.Multi.Generic (1)
19:14:46.0884 7680 hpqddsvc (f3f72a2a86c22610bca5439fa789dd52) C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
19:14:47.0066 7680 hpqddsvc ( UnsignedFile.Multi.Generic ) - warning
19:14:47.0066 7680 hpqddsvc - detected UnsignedFile.Multi.Generic (1)
19:14:47.0473 7680 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
19:14:47.0549 7680 HpSAMD - ok
19:14:47.0607 7680 HTCAND32 (950cc1e6ae3a6cd23e0945cde089b02c) C:\Windows\system32\Drivers\ANDROIDUSB.sys
19:14:47.0661 7680 HTCAND32 - ok
19:14:47.0710 7680 htcnprot (339adefad60353f960e3ca67ce468c24) C:\Windows\system32\DRIVERS\htcnprot.sys
19:14:47.0735 7680 htcnprot - ok
19:14:49.0682 7680 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
19:14:49.0781 7680 HTTP - ok
19:14:49.0949 7680 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
19:14:49.0964 7680 hwpolicy - ok
19:14:50.0263 7680 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
19:14:50.0388 7680 i8042prt - ok
19:14:50.0548 7680 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys
19:14:50.0596 7680 iaStorV - ok
19:14:52.0133 7680 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:14:52.0192 7680 idsvc - ok
19:14:53.0990 7680 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
19:14:54.0088 7680 iirsp - ok
19:14:56.0228 7680 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\Windows\System32\ikeext.dll
19:14:56.0333 7680 IKEEXT - ok
19:14:59.0883 7680 IntcAzAudAddService (43f5535aa4d6c75a37f70fb9c561cc9b) C:\Windows\system32\drivers\RTKVHDA.sys
19:15:00.0028 7680 IntcAzAudAddService - ok
19:15:01.0434 7680 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
19:15:01.0450 7680 intelide - ok
19:15:01.0630 7680 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
19:15:01.0745 7680 intelppm - ok
19:15:02.0029 7680 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\Windows\system32\ipbusenum.dll
19:15:02.0174 7680 IPBusEnum - ok
19:15:02.0213 7680 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:15:02.0314 7680 IpFilterDriver - ok
19:15:02.0395 7680 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\Windows\System32\iphlpsvc.dll
19:15:02.0486 7680 iphlpsvc - ok
19:15:02.0514 7680 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
19:15:02.0534 7680 IPMIDRV - ok
19:15:02.0846 7680 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
19:15:02.0952 7680 IPNAT - ok
19:15:03.0018 7680 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
19:15:03.0099 7680 IRENUM - ok
19:15:03.0147 7680 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
19:15:03.0170 7680 isapnp - ok
19:15:03.0297 7680 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
19:15:03.0319 7680 iScsiPrt - ok
19:15:03.0389 7680 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
19:15:03.0405 7680 kbdclass - ok
19:15:03.0452 7680 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\DRIVERS\kbdhid.sys
19:15:03.0491 7680 kbdhid - ok
19:15:03.0563 7680 kbfiltr (27bd4ac228ef6c0d490617c32e86a672) C:\Windows\system32\DRIVERS\kbfiltr.sys
19:15:03.0577 7680 kbfiltr - ok
19:15:03.0611 7680 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
19:15:03.0629 7680 KeyIso - ok
19:15:04.0201 7680 KSecDD (b7895b4182c0d16f6efadeb8081e8d36) C:\Windows\system32\Drivers\ksecdd.sys
19:15:04.0269 7680 KSecDD - ok
19:15:04.0491 7680 KSecPkg (d30159ac9237519fbc62c6ec247d2d46) C:\Windows\system32\Drivers\ksecpkg.sys
19:15:04.0513 7680 KSecPkg - ok
19:15:05.0255 7680 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\Windows\system32\msdtckrm.dll
19:15:05.0373 7680 KtmRm - ok
19:15:05.0876 7680 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\Windows\system32\srvsvc.dll
19:15:06.0002 7680 LanmanServer - ok
19:15:06.0076 7680 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\Windows\System32\wkssvc.dll
19:15:06.0192 7680 LanmanWorkstation - ok
19:15:06.0290 7680 LHidFilt (05d6b85ecc3204931923ab7940b9596e) C:\Windows\system32\DRIVERS\LHidFilt.Sys
19:15:06.0305 7680 LHidFilt - ok
19:15:06.0939 7680 LightScribeService (abf90fc5a127f481219b873c1b8dfc1c) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
19:15:06.0991 7680 LightScribeService ( UnsignedFile.Multi.Generic ) - warning
19:15:06.0991 7680 LightScribeService - detected UnsignedFile.Multi.Generic (1)
19:15:07.0367 7680 lirsgt (f8a7212d0864ef5e9185fb95e6623f4d) C:\Windows\system32\DRIVERS\lirsgt.sys
19:15:07.0460 7680 lirsgt - ok
19:15:07.0543 7680 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
19:15:07.0701 7680 lltdio - ok
19:15:08.0233 7680 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\Windows\System32\lltdsvc.dll
19:15:08.0272 7680 lltdsvc - ok
19:15:08.0310 7680 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\Windows\System32\lmhsvc.dll
19:15:08.0408 7680 lmhosts - ok
19:15:08.0530 7680 LMouFilt (053dbcc1082fdf74ab145a71917a6556) C:\Windows\system32\DRIVERS\LMouFilt.Sys
19:15:08.0545 7680 LMouFilt - ok
19:15:08.0961 7680 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
19:15:09.0012 7680 LSI_FC - ok
19:15:09.0671 7680 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
19:15:09.0753 7680 LSI_SAS - ok
19:15:09.0953 7680 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
19:15:09.0970 7680 LSI_SAS2 - ok
19:15:10.0255 7680 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
19:15:10.0271 7680 LSI_SCSI - ok
19:15:10.0680 7680 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
19:15:10.0773 7680 luafv - ok
19:15:10.0909 7680 lullaby (8039f480c192dd99fed4ebc71ffbf795) C:\Windows\system32\DRIVERS\lullaby.sys
19:15:10.0925 7680 lullaby - ok
19:15:11.0161 7680 MBAMSwissArmy (0db7527db188c7d967a37bb51bbf3963) C:\Windows\system32\drivers\mbamswissarmy.sys
19:15:11.0297 7680 MBAMSwissArmy - ok
19:15:11.0456 7680 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\Windows\system32\Mcx2Svc.dll
19:15:11.0536 7680 Mcx2Svc - ok
19:15:11.0668 7680 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
19:15:11.0688 7680 megasas - ok
19:15:11.0760 7680 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
19:15:11.0787 7680 MegaSR - ok
19:15:12.0312 7680 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
19:15:12.0331 7680 Microsoft Office Groove Audit Service - ok
19:15:12.0487 7680 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
19:15:12.0563 7680 MMCSS - ok
19:15:12.0723 7680 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
19:15:12.0835 7680 Modem - ok
19:15:12.0875 7680 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
19:15:12.0920 7680 monitor - ok
19:15:13.0042 7680 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
19:15:13.0070 7680 mouclass - ok
19:15:13.0229 7680 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
19:15:13.0269 7680 mouhid - ok
19:15:13.0534 7680 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
19:15:13.0560 7680 mountmgr - ok
19:15:13.0802 7680 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
19:15:13.0820 7680 mpio - ok
19:15:14.0099 7680 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
19:15:14.0214 7680 mpsdrv - ok
19:15:16.0091 7680 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\Windows\system32\mpssvc.dll
19:15:16.0192 7680 MpsSvc - ok
19:15:16.0482 7680 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
19:15:16.0589 7680 MRxDAV - ok
19:15:16.0663 7680 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
19:15:16.0782 7680 mrxsmb - ok
19:15:16.0848 7680 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:15:16.0904 7680 mrxsmb10 - ok
19:15:16.0942 7680 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:15:17.0023 7680 mrxsmb20 - ok
19:15:17.0046 7680 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
19:15:17.0063 7680 msahci - ok
19:15:17.0087 7680 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
19:15:17.0106 7680 msdsm - ok
19:15:17.0172 7680 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\Windows\System32\msdtc.exe
19:15:17.0234 7680 MSDTC - ok
19:15:17.0308 7680 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
19:15:17.0351 7680 Msfs - ok
19:15:17.0383 7680 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
19:15:17.0476 7680 mshidkmdf - ok
19:15:17.0535 7680 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
19:15:17.0550 7680 msisadrv - ok
19:15:18.0023 7680 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\Windows\system32\iscsiexe.dll
19:15:18.0132 7680 MSiSCSI - ok
19:15:18.0138 7680 msiserver - ok
19:15:18.0254 7680 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
19:15:18.0324 7680 MSKSSRV - ok
19:15:18.0375 7680 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
19:15:18.0419 7680 MSPCLOCK - ok
19:15:18.0474 7680 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
19:15:18.0533 7680 MSPQM - ok
19:15:18.0592 7680 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
19:15:18.0610 7680 MsRPC - ok
19:15:18.0694 7680 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys
19:15:18.0710 7680 mssmbios - ok
19:15:18.0826 7680 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
19:15:18.0858 7680 MSTEE - ok
19:15:18.0881 7680 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
19:15:18.0924 7680 MTConfig - ok
19:15:18.0995 7680 MTsensor (97affa9d95ffe20eee6229bc6be166cf) C:\Windows\system32\DRIVERS\ATKACPI.sys
19:15:19.0148 7680 MTsensor - ok
19:15:19.0183 7680 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
19:15:19.0201 7680 Mup - ok
19:15:20.0002 7680 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\Windows\system32\qagentRT.dll
19:15:20.0084 7680 napagent - ok
19:15:21.0025 7680 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
19:15:21.0122 7680 NativeWifiP - ok
19:15:23.0543 7680 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
19:15:23.0627 7680 NDIS - ok
19:15:23.0701 7680 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
19:15:23.0830 7680 NdisCap - ok
19:15:23.0851 7680 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
19:15:23.0898 7680 NdisTapi - ok
19:15:24.0087 7680 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
19:15:24.0186 7680 Ndisuio - ok
19:15:24.0732 7680 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
19:15:24.0823 7680 NdisWan - ok
19:15:24.0870 7680 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
19:15:24.0949 7680 NDProxy - ok
19:15:25.0213 7680 Net Driver HPZ12 (a081cb6fb9a12668f233eb5414be3a0e) C:\Windows\system32\HPZinw12.dll
19:15:25.0248 7680 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
19:15:25.0248 7680 Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
19:15:25.0398 7680 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
19:15:25.0481 7680 NetBIOS - ok
19:15:26.0248 7680 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
19:15:26.0321 7680 NetBT - ok
19:15:26.0396 7680 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
19:15:26.0413 7680 Netlogon - ok
19:15:27.0376 7680 Netman (7cccfca7510684768da22092d1fa4db2) C:\Windows\System32\netman.dll
19:15:27.0437 7680 Netman - ok
19:15:28.0892 7680 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\Windows\System32\netprofm.dll
19:15:28.0935 7680 netprofm - ok
19:15:29.0568 7680 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:15:29.0585 7680 NetTcpPortSharing - ok
19:15:29.0867 7680 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
19:15:29.0891 7680 nfrd960 - ok
19:15:29.0971 7680 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\Windows\System32\nlasvc.dll
19:15:30.0034 7680 NlaSvc - ok
19:15:30.0088 7680 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
19:15:30.0141 7680 Npfs - ok
19:15:30.0267 7680 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\Windows\system32\nsisvc.dll
19:15:30.0317 7680 nsi - ok
19:15:30.0436 7680 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
19:15:30.0483 7680 nsiproxy - ok
19:15:34.0083 7680 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys
19:15:34.0162 7680 Ntfs - ok
19:15:37.0367 7680 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
19:15:37.0400 7680 Null - ok
19:15:41.0240 7680 nvlddmkm (c593ca398f26b34b71b0579ceb6ffaa5) C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:15:41.0680 7680 nvlddmkm - ok
19:15:42.0410 7680 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys
19:15:42.0428 7680 nvraid - ok
19:15:42.0674 7680 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys
19:15:42.0697 7680 nvstor - ok
19:15:43.0123 7680 nvsvc (3d207c5cf5f65a1f31c9f0260725ae82) C:\Windows\system32\nvvsvc.exe
19:15:43.0176 7680 nvsvc - ok
19:15:44.0325 7680 nvUpdatusService (5ba460f39d2d4032ee8c5474192d5a11) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
19:15:44.0417 7680 nvUpdatusService - ok
19:15:45.0301 7680 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
19:15:45.0320 7680 nv_agp - ok
19:15:46.0557 7680 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
19:15:46.0623 7680 odserv - ok
19:15:46.0778 7680 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
19:15:46.0856 7680 ohci1394 - ok
19:15:47.0308 7680 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:15:47.0373 7680 ose - ok
19:15:47.0859 7680 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
19:15:47.0947 7680 p2pimsvc - ok
19:15:48.0549 7680 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\Windows\system32\p2psvc.dll
19:15:48.0613 7680 p2psvc - ok
19:15:48.0769 7680 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
19:15:48.0955 7680 Parport - ok
19:15:49.0132 7680 partmgr (3f34a1b4c5f6475f320c275e63afce9b) C:\Windows\system32\drivers\partmgr.sys
19:15:49.0149 7680 partmgr - ok
19:15:49.0203 7680 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
19:15:49.0248 7680 Parvdm - ok
19:15:49.0619 7680 PassThru Service (39b9dcd7040654c2e57d7396736c718e) C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
19:15:49.0685 7680 PassThru Service ( UnsignedFile.Multi.Generic ) - warning
19:15:49.0685 7680 PassThru Service - detected UnsignedFile.Multi.Generic (1)
19:15:49.0834 7680 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\Windows\System32\pcasvc.dll
19:15:49.0863 7680 PcaSvc - ok
19:15:50.0259 7680 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
19:15:50.0343 7680 pci - ok
19:15:50.0389 7680 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
19:15:50.0407 7680 pciide - ok
19:15:50.0777 7680 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
19:15:50.0796 7680 pcmcia - ok
19:15:50.0852 7680 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
19:15:50.0868 7680 pcw - ok
19:15:51.0870 7680 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
19:15:51.0975 7680 PEAUTH - ok
19:15:54.0096 7680 pla (414bba67a3ded1d28437eb66aeb8a720) C:\Windows\system32\pla.dll
19:15:54.0182 7680 pla - ok
19:15:55.0713 7680 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\Windows\system32\umpnpmgr.dll
19:15:55.0846 7680 PlugPlay - ok
19:15:55.0889 7680 Pml Driver HPZ12 (65bc271f337637731d3c71455ae1f476) C:\Windows\system32\HPZipm12.dll
19:15:55.0918 7680 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
19:15:55.0918 7680 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
19:15:56.0005 7680 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\Windows\system32\pnrpauto.dll
19:15:56.0126 7680 PNRPAutoReg - ok
19:15:56.0696 7680 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
19:15:56.0719 7680 PNRPsvc - ok
19:15:57.0242 7680 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\Windows\System32\ipsecsvc.dll
19:15:57.0335 7680 PolicyAgent - ok
19:15:57.0627 7680 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\Windows\system32\umpo.dll
19:15:57.0666 7680 Power - ok
19:15:58.0089 7680 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
19:15:58.0201 7680 PptpMiniport - ok
19:15:58.0251 7680 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
19:15:58.0308 7680 Processor - ok
19:15:58.0373 7680 ProfSvc (cadefac453040e370a1bdff3973be00d) C:\Windows\system32\profsvc.dll
19:15:58.0461 7680 ProfSvc - ok
19:15:58.0495 7680 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
19:15:58.0512 7680 ProtectedStorage - ok
19:15:58.0862 7680 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
19:15:58.0921 7680 Psched - ok
19:16:01.0800 7680 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
19:16:01.0915 7680 ql2300 - ok
19:16:03.0689 7680 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
19:16:03.0714 7680 ql40xx - ok
19:16:04.0153 7680 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\Windows\system32\qwave.dll
19:16:04.0252 7680 QWAVE - ok
19:16:04.0294 7680 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
19:16:04.0314 7680 QWAVEdrv - ok
19:16:04.0815 7680 RapiMgr (8f97d374ad1857e1eed85a79f29a1d3d) C:\Windows\WindowsMobile\rapimgr.dll
19:16:04.0833 7680 RapiMgr - ok
19:16:04.0919 7680 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
19:16:05.0008 7680 RasAcd - ok
19:16:05.0096 7680 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
19:16:05.0128 7680 RasAgileVpn - ok
19:16:05.0432 7680 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\Windows\System32\rasauto.dll
19:16:05.0488 7680 RasAuto - ok
19:16:05.0685 7680 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
19:16:05.0720 7680 Rasl2tp - ok
19:16:06.0366 7680 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\Windows\System32\rasmans.dll
19:16:06.0448 7680 RasMan - ok
19:16:06.0832 7680 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
19:16:06.0915 7680 RasPppoe - ok
19:16:07.0189 7680 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
19:16:07.0266 7680 RasSstp - ok
19:16:08.0012 7680 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
19:16:08.0087 7680 rdbss - ok
19:16:08.0158 7680 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
19:16:08.0249 7680 rdpbus - ok
19:16:08.0342 7680 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
19:16:08.0442 7680 RDPCDD - ok
19:16:08.0499 7680 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
19:16:08.0545 7680 RDPENCDD - ok
19:16:08.0638 7680 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
19:16:08.0668 7680 RDPREFMP - ok
19:16:09.0169 7680 RDPWD (f031683e6d1fea157abb2ff260b51e61) C:\Windows\system32\drivers\RDPWD.sys
19:16:09.0314 7680 RDPWD - ok
19:16:09.0623 7680 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
19:16:09.0673 7680 rdyboost - ok
19:16:09.0826 7680 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\Windows\System32\mprdim.dll
19:16:09.0907 7680 RemoteAccess - ok
19:16:10.0055 7680 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\Windows\system32\regsvc.dll
19:16:10.0151 7680 RemoteRegistry - ok
19:16:10.0193 7680 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\Windows\System32\RpcEpMap.dll
19:16:10.0247 7680 RpcEptMapper - ok
19:16:10.0332 7680 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\Windows\system32\locator.exe
19:16:10.0360 7680 RpcLocator - ok
19:16:11.0358 7680 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll
19:16:11.0395 7680 RpcSs - ok
19:16:11.0507 7680 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
19:16:11.0578 7680 rspndr - ok
19:16:11.0708 7680 RTSTOR (830b682cb24206f457ea8a617605209f) C:\Windows\system32\drivers\RTSTOR.SYS
19:16:11.0741 7680 RTSTOR - ok
19:16:11.0845 7680 SamSs (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
19:16:11.0861 7680 SamSs - ok
19:16:11.0939 7680 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
19:16:11.0961 7680 sbp2port - ok
19:16:12.0150 7680 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\Windows\System32\SCardSvr.dll
19:16:12.0197 7680 SCardSvr - ok
19:16:12.0274 7680 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
19:16:12.0318 7680 scfilter - ok
19:16:13.0723 7680 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\Windows\system32\schedsvc.dll
19:16:13.0834 7680 Schedule - ok
19:16:13.0984 7680 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll
19:16:14.0013 7680 SCPolicySvc - ok
19:16:14.0432 7680 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\Windows\System32\SDRSVC.dll
19:16:14.0525 7680 SDRSVC - ok
19:16:14.0611 7680 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
19:16:14.0665 7680 secdrv - ok
19:16:14.0779 7680 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\Windows\system32\seclogon.dll
19:16:14.0889 7680 seclogon - ok
19:16:14.0922 7680 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\Windows\System32\sens.dll
19:16:15.0011 7680 SENS - ok
19:16:15.0124 7680 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\Windows\system32\sensrsvc.dll
19:16:15.0191 7680 SensrSvc - ok
19:16:15.0258 7680 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
19:16:15.0276 7680 Serenum - ok
19:16:15.0577 7680 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
19:16:15.0659 7680 Serial - ok
19:16:15.0820 7680 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
19:16:15.0868 7680 sermouse - ok
19:16:16.0122 7680 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\Windows\system32\sessenv.dll
19:16:16.0234 7680 SessionEnv - ok
19:16:16.0286 7680 sfdrv01 (4c0d673281178cb496011a2e28571fc8) C:\Windows\system32\drivers\sfdrv01.sys
19:16:16.0294 7680 sfdrv01 ( UnsignedFile.Multi.Generic ) - warning
19:16:16.0294 7680 sfdrv01 - detected UnsignedFile.Multi.Generic (1)
19:16:16.0315 7680 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
19:16:16.0334 7680 sffdisk - ok
19:16:16.0357 7680 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
19:16:16.0469 7680 sffp_mmc - ok
19:16:16.0480 7680 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys
19:16:16.0499 7680 sffp_sd - ok
19:16:16.0539 7680 sfhlp02 (15be2b5e4dc5b8623cf167720682abc9) C:\Windows\system32\drivers\sfhlp02.sys
19:16:16.0546 7680 sfhlp02 ( UnsignedFile.Multi.Generic ) - warning
19:16:16.0546 7680 sfhlp02 - detected UnsignedFile.Multi.Generic (1)
19:16:16.0640 7680 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
19:16:16.0674 7680 sfloppy - ok
19:16:17.0078 7680 sfvfs02 (d5a7e09d2c6a702809e49190d52adc9f) C:\Windows\system32\drivers\sfvfs02.sys
19:16:17.0169 7680 sfvfs02 ( UnsignedFile.Multi.Generic ) - warning
19:16:17.0169 7680 sfvfs02 - detected UnsignedFile.Multi.Generic (1)
19:16:17.0245 7680 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\Windows\System32\ipnathlp.dll
19:16:17.0350 7680 SharedAccess - ok
19:16:18.0013 7680 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\Windows\System32\shsvcs.dll
19:16:18.0110 7680 ShellHWDetection - ok
19:16:18.0403 7680 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
19:16:18.0465 7680 sisagp - ok
19:16:18.0766 7680 SiSGbeLH (6f0c643c7f49f2091b01d014eae72e1a) C:\Windows\system32\DRIVERS\SiSGB6.sys
19:16:18.0841 7680 SiSGbeLH - ok
19:16:18.0909 7680 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
19:16:18.0927 7680 SiSRaid2 - ok
19:16:18.0943 7680 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
19:16:18.0962 7680 SiSRaid4 - ok
19:16:18.0998 7680 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
19:16:19.0030 7680 Smb - ok
19:16:19.0144 7680 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\Windows\System32\snmptrap.exe
19:16:19.0172 7680 SNMPTRAP - ok
19:16:21.0987 7680 SNP2UVC (a709dfa1674c1ed61ef7b5f29b38eeb1) C:\Windows\system32\DRIVERS\snp2uvc.sys
19:16:22.0151 7680 SNP2UVC - ok
19:16:24.0206 7680 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
19:16:24.0234 7680 spldr - ok
19:16:24.0512 7680 Spooler (866a43013535dc8587c258e43579c764) C:\Windows\System32\spoolsv.exe
19:16:24.0573 7680 Spooler - ok
19:16:27.0484 7680 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\Windows\system32\sppsvc.exe
19:16:27.0631 7680 sppsvc - ok
19:16:28.0600 7680 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\Windows\system32\sppuinotify.dll
19:16:28.0794 7680 sppuinotify - ok
19:16:29.0715 7680 sptd (cdddec541bc3c96f91ecb48759673505) C:\Windows\System32\Drivers\sptd.sys
19:16:29.0771 7680 sptd - ok
19:16:29.0830 7680 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys
19:16:29.0869 7680 srv - ok
19:16:29.0954 7680 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys
19:16:30.0004 7680 srv2 - ok
19:16:30.0216 7680 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys
19:16:30.0274 7680 srvnet - ok
19:16:30.0328 7680 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\Windows\System32\ssdpsrv.dll
19:16:30.0366 7680 SSDPSRV - ok
19:16:30.0441 7680 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys
19:16:30.0456 7680 ssmdrv - ok
19:16:30.0527 7680 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\Windows\system32\sstpsvc.dll
19:16:30.0578 7680 SstpSvc - ok
19:16:31.0510 7680 Stereo Service (a8f1a34f855887fc721dc9539223b543) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
19:16:31.0529 7680 Stereo Service - ok
19:16:31.0612 7680 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
19:16:31.0662 7680 stexstor - ok
19:16:32.0270 7680 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\Windows\System32\wiaservc.dll
19:16:32.0332 7680 StiSvc - ok
19:16:32.0399 7680 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\drivers\swenum.sys
19:16:32.0420 7680 swenum - ok
19:16:32.0611 7680 swprv (a28bd92df340e57b024ba433165d34d7) C:\Windows\System32\swprv.dll
19:16:32.0683 7680 swprv - ok
19:16:32.0908 7680 SynTP (55f6e55cc2430ca8713387106fa79817) C:\Windows\system32\DRIVERS\SynTP.sys
19:16:32.0999 7680 SynTP - ok
19:16:33.0455 7680 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\Windows\system32\sysmain.dll
19:16:33.0540 7680 SysMain - ok
19:16:33.0802 7680 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\Windows\System32\TabSvc.dll
19:16:33.0833 7680 TabletInputService - ok
19:16:33.0986 7680 TapiSrv (613bf4820361543956909043a265c6ac) C:\Windows\System32\tapisrv.dll
19:16:34.0043 7680 TapiSrv - ok
19:16:34.0090 7680 TBS (b799d9fdb26111737f58288d8dc172d9) C:\Windows\System32\tbssvc.dll
19:16:34.0128 7680 TBS - ok
19:16:34.0319 7680 Tcpip (7fa2e0f8b072bd04b77b421480b6cc22) C:\Windows\system32\drivers\tcpip.sys
19:16:34.0389 7680 Tcpip - ok
19:16:35.0493 7680 TCPIP6 (7fa2e0f8b072bd04b77b421480b6cc22) C:\Windows\system32\DRIVERS\tcpip.sys
19:16:35.0530 7680 TCPIP6 - ok
19:16:36.0218 7680 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys
19:16:36.0248 7680 tcpipreg - ok
19:16:36.0368 7680 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys
19:16:36.0462 7680 TDPIPE - ok
19:16:36.0577 7680 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\Windows\system32\drivers\tdtcp.sys
19:16:36.0621 7680 TDTCP - ok
19:16:36.0721 7680 tdx (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys
19:16:36.0763 7680 tdx - ok
19:16:37.0332 7680 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\drivers\termdd.sys
19:16:37.0349 7680 TermDD - ok
19:16:37.0609 7680 TermService (382c804c92811be57829d8e550a900e2) C:\Windows\System32\termsrv.dll
19:16:37.0718 7680 TermService - ok
19:16:37.0855 7680 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\Windows\system32\themeservice.dll
19:16:37.0878 7680 Themes - ok
19:16:37.0942 7680 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
19:16:37.0976 7680 THREADORDER - ok
19:16:38.0143 7680 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\Windows\System32\trkwks.dll
19:16:38.0260 7680 TrkWks - ok
19:16:38.0460 7680 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\Windows\servicing\TrustedInstaller.exe
19:16:38.0565 7680 TrustedInstaller - ok
19:16:38.0605 7680 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys
19:16:38.0661 7680 tssecsrv - ok
19:16:38.0713 7680 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys
19:16:38.0758 7680 TsUsbFlt - ok
19:16:39.0008 7680 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys
19:16:39.0051 7680 tunnel - ok
19:16:39.0218 7680 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
19:16:39.0267 7680 uagp35 - ok
19:16:39.0501 7680 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys
19:16:39.0549 7680 udfs - ok
19:16:39.0718 7680 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\Windows\system32\UI0Detect.exe
19:16:39.0835 7680 UI0Detect - ok
19:16:39.0896 7680 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys
19:16:39.0915 7680 uliagpkx - ok
19:16:39.0956 7680 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\drivers\umbus.sys
19:16:40.0020 7680 umbus - ok
19:16:40.0100 7680 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
19:16:40.0128 7680 UmPass - ok
19:16:40.0209 7680 upnphost (833fbb672460efce8011d262175fad33) C:\Windows\System32\upnphost.dll
19:16:40.0247 7680 upnphost - ok
19:16:40.0337 7680 USBAAPL (d4fb6ecc60a428564ba8768b0e23c0fc) C:\Windows\system32\Drivers\usbaapl.sys
19:16:40.0411 7680 USBAAPL ( UnsignedFile.Multi.Generic ) - warning
19:16:40.0411 7680 USBAAPL - detected UnsignedFile.Multi.Generic (1)
19:16:40.0474 7680 usbaudio (1d9f2bd026e8e2d45033a4df3f16b78c) C:\Windows\system32\drivers\usbaudio.sys
19:16:40.0504 7680 usbaudio - ok
19:16:40.0530 7680 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\DRIVERS\usbccgp.sys
19:16:40.0598 7680 usbccgp - ok
19:16:40.0654 7680 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys
19:16:40.0688 7680 usbcir - ok
19:16:40.0709 7680 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\DRIVERS\usbehci.sys
19:16:40.0739 7680 usbehci - ok
19:16:40.0790 7680 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys
19:16:40.0913 7680 usbhub - ok
19:16:40.0930 7680 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\DRIVERS\usbohci.sys
19:16:40.0966 7680 usbohci - ok
19:16:41.0075 7680 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
19:16:41.0113 7680 usbprint - ok
19:16:41.0166 7680 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
19:16:41.0241 7680 usbscan - ok
19:16:41.0341 7680 USBSTOR (f991ab9cc6b908db552166768176896a) C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:16:41.0412 7680 USBSTOR - ok
19:16:41.0529 7680 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\drivers\usbuhci.sys
19:16:41.0551 7680 usbuhci - ok
19:16:41.0631 7680 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\Windows\System32\uxsms.dll
19:16:41.0679 7680 UxSms - ok
19:16:41.0824 7680 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
19:16:41.0841 7680 VaultSvc - ok
19:16:41.0889 7680 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys
19:16:41.0908 7680 vdrvroot - ok
19:16:42.0057 7680 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\Windows\System32\vds.exe
19:16:42.0129 7680 vds - ok
19:16:42.0219 7680 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
19:16:42.0242 7680 vga - ok
19:16:42.0450 7680 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
19:16:42.0492 7680 VgaSave - ok
19:16:42.0699 7680 vhdmp (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys
19:16:42.0722 7680 vhdmp - ok
19:16:42.0811 7680 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys
19:16:42.0828 7680 viaagp - ok
19:16:42.0967 7680 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
19:16:43.0019 7680 ViaC7 - ok
19:16:43.0116 7680 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys
19:16:43.0158 7680 viaide - ok
19:16:43.0174 7680 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys
19:16:43.0191 7680 volmgr - ok
19:16:43.0669 7680 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
19:16:43.0716 7680 volmgrx - ok
19:16:43.0906 7680 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys
19:16:43.0962 7680 volsnap - ok
19:16:44.0059 7680 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
19:16:44.0082 7680 vsmraid - ok
19:16:44.0289 7680 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\Windows\system32\vssvc.exe
19:16:44.0395 7680 VSS - ok
19:16:44.0444 7680 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\system32\DRIVERS\vwifibus.sys
19:16:44.0488 7680 vwifibus - ok
19:16:44.0560 7680 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys
19:16:44.0595 7680 vwififlt - ok
19:16:44.0934 7680 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\Windows\system32\w32time.dll
19:16:45.0012 7680 W32Time - ok
19:16:45.0062 7680 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
19:16:45.0133 7680 WacomPen - ok
19:16:45.0215 7680 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
19:16:45.0270 7680 WANARP - ok
19:16:45.0276 7680 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
19:16:45.0306 7680 Wanarpv6 - ok
19:16:46.0428 7680 wbengine (691e3285e53dca558e1a84667f13e15a) C:\Windows\system32\wbengine.exe
19:16:46.0567 7680 wbengine - ok
19:16:46.0865 7680 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\Windows\System32\wbiosrvc.dll
19:16:46.0946 7680 WbioSrvc - ok
19:16:47.0936 7680 WcesComm (59e19bd13c3bdb857646b9e436ba27f7) C:\Windows\WindowsMobile\wcescomm.dll
19:16:48.0090 7680 WcesComm - ok
19:16:48.0229 7680 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\Windows\System32\wcncsvc.dll
19:16:48.0299 7680 wcncsvc - ok
19:16:48.0405 7680 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\Windows\System32\WcsPlugInService.dll
19:16:48.0535 7680 WcsPlugInService - ok
19:16:48.0835 7680 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
19:16:48.0865 7680 Wd - ok
19:16:49.0578 7680 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
19:16:49.0654 7680 Wdf01000 - ok
19:16:49.0675 7680 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
19:16:49.0838 7680 WdiServiceHost - ok
19:16:49.0843 7680 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
19:16:49.0865 7680 WdiSystemHost - ok
19:16:50.0040 7680 WebClient (a9d880f97530d5b8fee278923349929d) C:\Windows\System32\webclnt.dll
19:16:50.0120 7680 WebClient - ok
19:16:50.0532 7680 Wecsvc (760f0afe937a77cff27153206534f275) C:\Windows\system32\wecsvc.dll
19:16:50.0590 7680 Wecsvc - ok
19:16:50.0782 7680 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\Windows\System32\wercplsupport.dll
19:16:50.0823 7680 wercplsupport - ok
19:16:50.0876 7680 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\Windows\System32\WerSvc.dll
19:16:50.0909 7680 WerSvc - ok
19:16:51.0015 7680 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
19:16:51.0055 7680 WfpLwf - ok
19:16:51.0095 7680 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
19:16:51.0114 7680 WIMMount - ok
19:16:51.0839 7680 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll
19:16:52.0000 7680 WinDefend - ok
19:16:52.0009 7680 WinHttpAutoProxySvc - ok
19:16:52.0324 7680 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\Windows\system32\wbem\WMIsvc.dll
19:16:52.0384 7680 Winmgmt - ok
19:16:53.0525 7680 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\Windows\system32\WsmSvc.dll
19:16:53.0698 7680 WinRM - ok
19:16:53.0881 7680 WINUSB (a67e5f9a400f3bd1be3d80613b45f708) C:\Windows\system32\DRIVERS\WinUsb.sys
19:16:53.0914 7680 WINUSB - ok
19:16:54.0538 7680 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\Windows\System32\wlansvc.dll
19:16:54.0609 7680 Wlansvc - ok
19:16:56.0342 7680 wlidsvc (fb01d4ae207b9efdbabfc55dc95c7e31) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:16:56.0469 7680 wlidsvc - ok
19:16:57.0429 7680 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys
19:16:57.0449 7680 WmiAcpi - ok
19:16:57.0675 7680 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\Windows\system32\wbem\WmiApSrv.exe
19:16:57.0788 7680 wmiApSrv - ok
19:16:59.0120 7680 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe
19:16:59.0228 7680 WMPNetworkSvc - ok
19:16:59.0869 7680 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\Windows\System32\wpcsvc.dll
19:16:59.0922 7680 WPCSvc - ok
19:17:00.0069 7680 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\Windows\system32\wpdbusenum.dll
19:17:00.0146 7680 WPDBusEnum - ok
19:17:00.0311 7680 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
19:17:00.0371 7680 ws2ifsl - ok
19:17:00.0453 7680 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\Windows\System32\wscsvc.dll
19:17:00.0487 7680 wscsvc - ok
19:17:00.0493 7680 WSearch - ok
19:17:02.0043 7680 wuauserv (fc3ec24fce372c89423e015a2ac1a31e) C:\Windows\system32\wuaueng.dll
19:17:02.0146 7680 wuauserv - ok
19:17:03.0599 7680 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys
19:17:03.0632 7680 WudfPf - ok
19:17:03.0883 7680 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys
19:17:03.0917 7680 WUDFRd - ok
19:17:04.0102 7680 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\Windows\System32\WUDFSvc.dll
19:17:04.0137 7680 wudfsvc - ok
19:17:04.0428 7680 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\Windows\System32\wwansvc.dll
19:17:04.0515 7680 WwanSvc - ok
19:17:04.0586 7680 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
19:17:09.0503 7680 \Device\Harddisk0\DR0 - ok
19:17:09.0582 7680 Boot (0x1200) (b0db6d43ddd578d9fc39c5adfce039d3) \Device\Harddisk0\DR0\Partition0
19:17:09.0589 7680 \Device\Harddisk0\DR0\Partition0 - ok
19:17:09.0602 7680 Boot (0x1200) (dde6d37ffcad197e240283a37cca4e88) \Device\Harddisk0\DR0\Partition1
19:17:09.0605 7680 \Device\Harddisk0\DR0\Partition1 - ok
19:17:09.0606 7680 ============================================================
19:17:09.0606 7680 Scan finished
19:17:09.0606 7680 ============================================================
19:17:09.0630 7112 Detected object count: 12
19:17:09.0630 7112 Actual detected object count: 12
19:45:43.0069 7112 ATKGFNEXSrv ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0070 7112 ATKGFNEXSrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:45:43.0073 7112 DvmMDES ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0073 7112 DvmMDES ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:45:43.0076 7112 hpqcxs08 ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0077 7112 hpqcxs08 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:45:43.0081 7112 hpqddsvc ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0081 7112 hpqddsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:45:43.0085 7112 LightScribeService ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0085 7112 LightScribeService ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:45:43.0088 7112 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0088 7112 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:45:43.0091 7112 PassThru Service ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0092 7112 PassThru Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:45:43.0097 7112 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0097 7112 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:45:43.0100 7112 sfdrv01 ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0100 7112 sfdrv01 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:45:43.0104 7112 sfhlp02 ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0104 7112 sfhlp02 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:45:43.0108 7112 sfvfs02 ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0108 7112 sfvfs02 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:45:43.0113 7112 USBAAPL ( UnsignedFile.Multi.Generic ) - skipped by user
19:45:43.0113 7112 USBAAPL ( UnsignedFile.Multi.Generic ) - User select action: Skip
|
|
08.08.2012, 19:11
| #22 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Internet extrem langsam - an anderen Endgeräten problemlos - Dann bitte jetzt CF ausführen: ComboFix Ein Leitfaden und Tutorium zur Nutzung von ComboFix
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat! Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie Zitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.08.2012, 08:38
| #23 |
| | Internet extrem langsam - an anderen Endgeräten problemlos - GUten Morgen, nach Ausführung von CF bisher keine gemeldeten Probleme vom Rechner (Registrierungsschlüssel ungültig etc.) Code:
ATTFilter ComboFix 12-08-09.01 - *** 11.08.2012 16:02:53.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3071.2008 [GMT 2:00]
ausgeführt von:: c:\users\***\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Outdated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Outdated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Common Files\ASPG_icon.ico
c:\windows\security\Database\tmp.edb
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-07-11 bis 2012-08-11 ))))))))))))))))))))))))))))))
.
.
2012-08-11 14:12 . 2012-08-11 14:12 -------- d-----w- c:\users\***\AppData\Local\temp
2012-08-11 14:12 . 2012-08-11 14:12 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-08-11 13:33 . 2012-06-29 08:44 6891424 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6B273A6-3F84-4AF9-B2E0-A44C521D20E7}\mpengine.dll
2012-08-03 13:17 . 2012-08-03 13:17 -------- d-----w- C:\dvmexp
2012-08-03 13:04 . 2012-08-03 13:04 -------- d-----w- C:\_OTL
2012-07-26 12:37 . 2012-07-26 12:37 -------- d-----w- c:\program files\ESET
2012-07-26 10:10 . 2012-07-26 10:11 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2012-07-21 12:59 . 2012-07-21 12:59 -------- d-----w- c:\users\User2\AppData\Local\Macromedia
2012-07-18 23:12 . 2012-07-18 23:12 -------- d-----w- c:\users\***\AppData\Local\theHunter
2012-07-18 23:04 . 2012-07-18 23:04 -------- d-----w- c:\users\***\AppData\Roaming\CyberLink
2012-07-18 23:04 . 2012-07-18 23:04 -------- d-----w- c:\users\Public\CyberLink
2012-07-15 18:12 . 2012-06-06 05:05 352256 ----a-w- c:\program files\Common Files\System\ado\msadomd.dll
2012-07-15 18:12 . 2012-06-06 05:05 1019904 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2012-07-15 18:12 . 2012-06-06 05:03 805376 ----a-w- c:\windows\system32\cdosys.dll
2012-07-15 18:12 . 2012-06-06 05:05 143360 ----a-w- c:\program files\Common Files\System\ado\msjro.dll
2012-07-15 18:12 . 2012-06-06 05:05 372736 ----a-w- c:\program files\Common Files\System\ado\msadox.dll
2012-07-15 18:12 . 2012-06-06 05:05 57344 ----a-w- c:\program files\Common Files\System\ado\msador15.dll
2012-07-15 18:12 . 2012-06-06 05:05 212992 ----a-w- c:\program files\Common Files\System\msadc\msadco.dll
2012-07-15 01:04 . 2012-06-12 02:40 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-07-14 21:48 . 2012-06-06 05:05 1390080 ----a-w- c:\windows\system32\msxml6.dll
2012-07-14 21:48 . 2012-06-06 05:05 1236992 ----a-w- c:\windows\system32\msxml3.dll
2012-07-14 21:48 . 2010-06-26 03:24 2048 ----a-w- c:\windows\system32\msxml3r.dll
2012-07-14 21:46 . 2012-06-02 04:45 134000 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-07-14 21:46 . 2012-06-02 04:40 369336 ----a-w- c:\windows\system32\drivers\cng.sys
2012-07-14 21:46 . 2012-06-02 04:39 219136 ----a-w- c:\windows\system32\ncrypt.dll
2012-07-14 21:46 . 2012-06-02 04:45 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-07-14 21:46 . 2012-06-02 04:40 225280 ----a-w- c:\windows\system32\schannel.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-03 13:17 . 2009-03-23 18:36 45056 ----a-w- c:\windows\system32\acovcnt.exe
2012-07-08 18:20 . 2012-07-08 18:20 19736 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2012-07-03 11:46 . 2010-11-03 19:24 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-06-25 14:04 . 2012-06-25 14:04 1394248 ----a-w- c:\windows\system32\msxml4.dll
2012-06-08 16:32 . 2012-06-08 16:32 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-06-08 16:32 . 2011-05-30 16:51 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-02 22:19 . 2012-06-21 16:56 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-21 16:56 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-21 16:56 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-21 16:56 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 22:19 . 2012-06-21 16:56 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 22:12 . 2012-06-21 16:56 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-06-02 22:12 . 2012-06-21 16:56 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-06-02 13:19 . 2012-06-21 16:55 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-02 13:12 . 2012-06-21 16:55 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-05-31 10:25 . 2009-10-04 16:40 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-05-15 03:03 . 2012-06-14 18:53 981504 ----a-w- c:\windows\system32\wininet.dll
2008-08-08 22:48 . 2008-08-08 22:48 90112 ----a-w- c:\program files\Common Files\CPInstallAction.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2010-11-20 144384]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-06-09 2363392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2008-11-25 6691360]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2008-11-25 1833504]
"ASUS Camera ScreenSaver"="c:\windows\AsScrProlog.exe" [2009-02-26 47672]
"ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2009-02-26 3054136]
"ATKMEDIA"="c:\program files\ASUS\ATK Media\DMedia.exe" [2008-08-19 159744]
"ATKOSD2"="c:\program files\ASUS\ATKOSD2\ATKOSD2.exe" [2008-09-03 8105984]
"CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe" [2008-07-19 104936]
"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2012-03-08 884584]
"HControlUser"="c:\program files\ASUS\ATK Hotkey\HControlUser.exe" [2008-08-18 98304]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
" Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2012-07-03 973488]
"P2Go_Menu"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-06-14 210216]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-10-05 198160]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-04-04 843712]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-05-11 348624]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"PDFPrint"="c:\program files\PDF24\pdf24.exe" [2011-12-16 220744]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2011-12-20 634880]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
c:\users\User2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840]
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [x]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [x]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S0 lullaby;lullaby;c:\windows\system32\DRIVERS\lullaby.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AAV UpdateService;AAV UpdateService;c:\program files\AAVUpdateManager\aavus.exe [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [x]
S2 DvmMDES;DeviceVM Meta Data Export Service;c:\asus.sys\DVMExportService.exe [x]
S2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 SiSGbeLH;NDIS 6.0-Treiber für SiS191/SiS190-Ethernet-Gerät;c:\windows\system32\DRIVERS\SiSGB6.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 30786651
*Deregistered* - 30786651
*Deregistered* - acedrv11
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
.
Inhalt des "geplante Tasks" Ordners
.
2012-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000Core.job
- c:\users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-27 19:59]
.
2012-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000UA.job
- c:\users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-27 19:59]
.
2012-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004Core.job
- c:\users\User2\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-21 17:48]
.
2012-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004UA.job
- c:\users\User2\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-21 17:48]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page =
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.43.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKCU-Run-OscarEditor - c:\program files\MOUSE Editor\\MouseEditor.exe
AddRemove-Android SDK Tools - c:\users\***\tools\uninstall.exe
AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files\DivX\DivXCodecUninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Apple Computer, Inc.\QuickTime\Favorite Movies]
@DACL=(02 0000)
.
[HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Apple Computer, Inc.\QuickTime\Recent Movies]
@DACL=(02 0000)
"5174526"="1,h:\\2010\\5174526.avi"
"Punisher_2_War_Zone_synchron_BlueRay-Rip_XviD_by_Genius2007_shared_by_Freibeuter_der_Meere"="1,d:\\Filme\\Punisher_2_War_Zone_synchron_BlueRay-Rip_XviD_by_Genius2007_shared_by_Freibeuter_der_Meere.avi"
.
[HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000_Classes\VirtualStore\MACHINE\SOFTWARE\EasiestUtils.com\YouTube FLV to AVI easy converter]
@DACL=(02 0000)
"APPWelcomeScreenDis"=dword:00000000
"K1"=hex:0b,1d,78,3d,b0,26,c3,41
"K2"=hex:71,3d,0a,57,12,14,59,41
"K3"="YouTube FLV to AVI easy converter 2.2.4"
"Key"=hex:de,45,6d,18,9f,29,b8,ee,52,ee,66,87,32,c9,78,cd,bd,9c,33,f5,55,c4,80,
c7,97,8e,a8,59,e1,70,de,e8,a6,5f,66,e9,7e,e4,6e,6a,2a,ce,e1,5f,e7,8c,bf,81,\
"Limitations"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-08-11 16:15:09
ComboFix-quarantined-files.txt 2012-08-11 14:15
.
Vor Suchlauf: 3.950.723.072 Bytes frei
Nach Suchlauf: 3.808.886.784 Bytes frei
.
- - End Of File - - E7EDBCCC06D1D768EBFD7142176952E1
|
|
13.08.2012, 17:35
| #24 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Internet extrem langsam - an anderen Endgeräten problemlos - Bitte nun Logs mit GMER und OSAM erstellen und posten. GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen. Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst. Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM! Downloade dir bitte  aswMBR.exe und speichere die Datei auf deinem Desktop.
Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none). Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes: Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
19.08.2012, 17:54
| #25 |
| | Internet extrem langsam - an anderen Endgeräten problemlos - Köln, 39 Grad Hier endlich die logs: Code:
ATTFilter GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-08-19 13:59:43
Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1 ST9320320AS rev.0303
Running: m6jzjhk9.exe; Driver: C:\Users\***\AppData\Local\Temp\kglirpod.sys
---- System - GMER 1.0.15 ----
SSDT 967C0F1E ZwCreateSection
SSDT 967C0F28 ZwRequestWaitReplyPort
SSDT 967C0F23 ZwSetContextThread
SSDT 967C0F2D ZwSetSecurityObject
SSDT 967C0F32 ZwSystemDebugControl
SSDT 967C0EBF ZwTerminateProcess
---- Kernel code sections - GMER 1.0.15 ----
.text ntkrnlpa.exe!ZwRollbackEnlistment + 140D 830923C9 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 830CBD52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!KeRemoveQueueEx + 11F7 830D2EAC 4 Bytes [1E, 0F, 7C, 96]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1553 830D3208 4 Bytes [28, 0F, 7C, 96] {SUB [EDI], CL; JL 0xffffffffffffff9a}
.text ntkrnlpa.exe!KeRemoveQueueEx + 1597 830D324C 4 Bytes [23, 0F, 7C, 96] {AND ECX, [EDI]; JL 0xffffffffffffff9a}
.text ntkrnlpa.exe!KeRemoveQueueEx + 1613 830D32C8 4 Bytes [2D, 0F, 7C, 96]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1667 830D331C 4 Bytes [32, 0F, 7C, 96] {XOR CL, [EDI]; JL 0xffffffffffffff9a}
.text ...
.text C:\Windows\system32\DRIVERS\atksgt.sys section is writeable [0x9A174300, 0x3B6D8, 0xE8000020]
.text C:\Windows\system32\DRIVERS\lirsgt.sys section is writeable [0x825EA300, 0x1BEE, 0xE8000020]
---- User IAT/EAT - GMER 1.0.15 ----
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [741F24CB] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [741D562E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [741D56EC] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [741F2546] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [741E85AA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [741E4D5E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [741E5105] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [741E51DA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromHBITMAP] [741E6707] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [741E8301] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [741E8850] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [741E90B1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [741EE254] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [741E4C90] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
---- Devices - GMER 1.0.15 ----
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
Device \Driver\ACPI_HAL \Device\0000004f halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation)
---- Registry - GMER 1.0.15 ----
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update@NextSqmReportTime 2012-08-19 11:24:42
---- EOF - GMER 1.0.15 ----
Code:
ATTFilter Report of OSAM: Autorun Manager v5.0.11926.0 hxxp://www.online-solutions.ru/en/ Saved at 14:08:17 on 19.08.2012 OS: Windows 7 Home Premium Edition Service Pack 1 (Build 7601), 32-bit Default Browser: Google Inc. Google Chrome 21.0.1180.60 Scanner Settings [x] Rootkits detection (hidden registry) [x] Rootkits detection (hidden files) [x] Retrieve files information [x] Check Microsoft signatures Filters [ ] Trusted entries [ ] Empty entries [x] Hidden registry entries (rootkit activity) [x] Exclusively opened files [x] Not found files [x] Files without detailed information [x] Existing files [ ] Non-startable services [ ] Non-startable drivers [x] Active entries [x] Disabled entries [Common] -----( %SystemRoot%\Tasks )----- "GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000Core.job" - "Google Inc." - C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe "GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000UA.job" - "Google Inc." - C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe "GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004Core.job" - "Google Inc." - C:\Users\User2\AppData\Local\Google\Update\GoogleUpdate.exe "GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004UA.job" - "Google Inc." - C:\Users\User2\AppData\Local\Google\Update\GoogleUpdate.exe [Control Panel Objects] -----( %SystemRoot%\system32 )----- "DivXControlPanelApplet.cpl" - "DivX, Inc." - C:\Windows\system32\DivXControlPanelApplet.cpl "FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\Windows\system32\FlashPlayerCPLApp.cpl "nvcpl.cpl" - "NVIDIA Corporation" - C:\Windows\system32\nvcpl.cpl -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )----- "mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLCFG32.CPL "QuickTime" - "Apple Inc." - C:\Program Files\QuickTime\QTSystem\QuickTime.cpl "wmdConn.cpl" - "Microsoft Corporation" - C:\Windows\WindowsMobile\wmdConn.cpl [Drivers] -----( HKLM\SYSTEM\CurrentControlSet\Services )----- "Apple Mobile USB Driver" (USBAAPL) - "Apple, Inc." - C:\Windows\System32\Drivers\usbaapl.sys "ASMMAP" (ASMMAP) - ? - C:\Program Files\ATKGFNEX\ASMMAP.sys "atksgt" (atksgt) - ? - C:\Windows\System32\DRIVERS\atksgt.sys (File found, but it contains no detailed information) "avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys "avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys "avkmgr" (avkmgr) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avkmgr.sys "catchme" (catchme) - ? - C:\Users\***\AppData\Local\Temp\catchme.sys (File not found) "FssFltr" (fssfltr) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\fssfltr.sys "kglirpod" (kglirpod) - ? - C:\Users\***\AppData\Local\Temp\kglirpod.sys (Hidden registry entry, rootkit activity | File not found) "lirsgt" (lirsgt) - ? - C:\Windows\System32\DRIVERS\lirsgt.sys (File found, but it contains no detailed information) "Logitech SetPoint KMDF HID Filter Driver" (LHidFilt) - "Logitech, Inc." - C:\Windows\System32\DRIVERS\LHidFilt.Sys "Logitech SetPoint KMDF Mouse Filter Driver" (LMouFilt) - "Logitech, Inc." - C:\Windows\System32\DRIVERS\LMouFilt.Sys "lullaby" (lullaby) - "Windows (R) Codename Longhorn DDK provider" - C:\Windows\System32\DRIVERS\lullaby.sys "MBAMSwissArmy" (MBAMSwissArmy) - "Malwarebytes Corporation" - C:\Windows\system32\drivers\mbamswissarmy.sys "ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys "StarForce Protection Environment Driver (version 1.x)" (sfdrv01) - "Protection Technology" - C:\Windows\System32\drivers\sfdrv01.sys "StarForce Protection Helper Driver (version 2.x)" (sfhlp02) - "Protection Technology" - C:\Windows\System32\drivers\sfhlp02.sys "StarForce Protection VFS Driver (version 2.x)" (sfvfs02) - "Protection Technology" - C:\Windows\System32\drivers\sfvfs02.sys [Explorer] -----( HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )----- {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? - (File not found | COM-object registry key not found) {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? - (File not found | COM-object registry key not found) {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? - (File not found | COM-object registry key not found) {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? - (File not found | COM-object registry key not found) -----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )----- {F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll -----( HKLM\Software\Classes\Protocols\Filter )----- {807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL -----( HKLM\Software\Classes\Protocols\Handler )----- {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} "Album Download IE Asynchronous Pluggable Protocol Interface" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll {314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll {828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\Program Files\Windows Live\Messenger\msgrapp.dll {88FED34C-F0CA-4636-A375-3CB6248B04CD} "Local Groove Web Services Protocol" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll {828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Messenger\msgrapp.dll {91774881-D725-4E58-B298-07617B9B86A8} "Skype IE add-on Pluggable Protocol" - "Skype Technologies S.A." - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll {03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Program Files\Windows Live\Mail\mailcomm.dll -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )----- {B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )----- {911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? - (File not found | COM-object registry key not found) {1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? - (File not found | COM-object registry key not found) {34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? - (File not found | COM-object registry key not found) {0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? - (File not found | COM-object registry key not found) {A70C977A-BF00-412C-90B7-034C51DA2439} "DesktopContext Class" - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\Display\nvui.dll {D8D1CE8C-B1EB-4E95-B63B-1531BA60E992} "DivX Property Handler" - "DivX, Inc." - C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXPropertyHandler.dll {83238FAE-D346-4E12-8734-D42F7554B3E6} "DivX Thumbnail Provider" - "DivX, Inc." - C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXThumbnailProvider.dll {2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? - (File not found | COM-object registry key not found) {99FD978C-D287-4F50-827F-B2C658EDA8E7} "Groove Explorer Icon Overlay 1 (GFS Unread Stub)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} "Groove Explorer Icon Overlay 2 (GFS Stub)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll {920E6DB1-9907-4370-B3A0-BAFC03D81399} "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll {16F3DD56-1AF5-4347-846D-7C10C4192619} "Groove Explorer Icon Overlay 3 (GFS Folder)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} "Groove Explorer Icon Overlay 4 (GFS Unread Mark)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll {2A541AE1-5BF6-4665-A8A3-CFA9672E4291} "Groove Folder Synchronization" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll {72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll {6C467336-8281-4E60-8204-430CED96822D} "Groove GFS Context Menu Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll {B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll {A449600E-1DC6-4232-B948-9BD794D62056} "Groove GFS Stub Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll {387E725D-DC16-4D76-B310-2C93ED4752A0} "Groove XML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll {42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll {993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll {5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONFILTER.DLL {00020d75-0000-0000-c000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLSHEXT.DLL {C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} "NVIDIA CPL Context Menu Extension" - "NVIDIA Corporation" - C:\Windows\system32\nvshext.dll {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\OLKFSTUB.DLL {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class" - "RealNetworks, Inc." - C:\Program Files\Real\RealPlayer\rpshell.dll {C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? - (File not found | COM-object registry key not found) {E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? - (File not found | COM-object registry key not found) {45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll {2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe {00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe {00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll {00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll {00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll {00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe {00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll {da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? - (File not found | COM-object registry key not found) {B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - ? - C:\Program Files\WinRAR\rarext.dll {0563DB41-F538-4B37-A92D-4659049B7766} "WLMD Message Handler" - ? - (File not found | COM-object registry key not found) {06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe Logitech Setpoint Extension "{B9B9F083-2B04-452A-8691-83694AC1037B}" - ? - (File not found | COM-object registry key not found) [Internet Explorer] -----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars )----- {555D4D79-4BD2-4094-A395-CFC534424A05} "HP Smart Web Printing" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll -----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )----- ITBar7Height "ITBar7Height" - ? - (File not found | COM-object registry key not found) <binary data> "ITBar7Layout" - ? - (File not found | COM-object registry key not found) -----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )----- {0D41B8C5-2599-4893-8183-00195EC8D5F9} "asusTek_sysctrl Class" - ? - C:\Windows\DOWNLO~1\ASUSTE~1.DLL / hxxp://support.asus.de/common/asusTek_sys_ctrl.cab {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} "Java Plug-in 1.6.0_31" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab {8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 10.5.1" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 10.5.1" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab {D27CDB6E-AE6D-11CF-96B8-444553540000} "Shockwave Flash Object" - "Adobe Systems, Inc." - C:\Windows\system32\Macromed\Flash\Flash10c.ocx / hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab {E6F480FC-BD44-4CBA-B74A-89AF7842937D} "{E6F480FC-BD44-4CBA-B74A-89AF7842937D}" - ? - (File not found | COM-object registry key not found) / hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab -----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )----- {5F7B1267-94A9-47F5-98DB-E99415F33AEC} "@C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004" - "Microsoft Corporation" - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} "@C:\Windows\WindowsMobile\INetRepl.dll,-222" - "Microsoft Corporation" - C:\Windows\WindowsMobile\INetRepl.dll {48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} "ClsidExtension" - "Microsoft Corporation" - C:\Windows\WindowsMobile\INetRepl.dll {DDE87865-83C5-48c4-8357-2F5B1AA84522} "HP Smart Web Printing ein- oder ausblenden" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll {FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL {898EA8C8-E7FF-479B-8935-AEC46303B9E5} "Skype Click to Call" - "Skype Technologies S.A." - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )----- {18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll {326E768D-4182-46FD-9C16-1449A49795F4} "DivX Plus Web Player HTML5 <video>" - "DivX, LLC" - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll {72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll {0347C33E-8762-4905-BF09-768834316C61} "HP Print Enhancer" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} "HP Smart BHO Class" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll {DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} "Java(tm) Plug-In SSV Helper" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} "Skype Browser Helper" - "Skype Technologies S.A." - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll {9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live ID Sign-in Helper" - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [LSA Providers] -----( HKLM\SYSTEM\CurrentControlSet\Control\Lsa )----- "Security Packages" - "Microsoft Corp." - C:\Windows\system32\livessp.dll [Logon] -----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )----- "desktop.ini" - ? - C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini "Dropbox.lnk" - "Dropbox, Inc." - C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Shortcut exists | File exists) "OpenOffice.org 3.0.lnk" - ? - C:\Program Files\OpenOffice.org 3\program\quickstart.exe (Shortcut exists | File found, but it contains no detailed information | File exists) -----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )----- "desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini "HP Digital Imaging Monitor.lnk" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Shortcut exists | File exists) -----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )----- "LightScribe Control Panel" - "Hewlett-Packard Company" - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden -----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )----- "StartupPrograms" - ? - rdpclip (File not found) -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )----- "Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "ASUS Camera ScreenSaver" - ? - C:\Windows\AsScrProlog.exe (File found, but it contains no detailed information) "ASUS Screen Saver Protector" - "ASUS" - C:\Windows\AsScrPro.exe "ATKMEDIA" - "ASUS" - C:\Program Files\ASUS\ATK Media\DMedia.exe "ATKOSD2" - "ASUS" - C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe "avgnt" - "Avira Operations GmbH & Co. KG" - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min "CLMLServer" - "CyberLink" - "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe" "DivXUpdate" - ? - "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW "fssui" - "Microsoft Corporation" - "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun "GrooveMonitor" - "Microsoft Corporation" - "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" "HControlUser" - "ASUS" - C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe "HP Software Update" - "Hewlett-Packard" - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe "HTC Sync Loader" - ? - "C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup " Malwarebytes Anti-Malware (reboot)" - "Malwarebytes Corporation" - "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript "P2Go_Menu" - "CyberLink Corp." - "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" "PDFPrint" - "Geek Software GmbH" - C:\Program Files\PDF24\pdf24.exe "QuickTime Task" - "Apple Inc." - "C:\Program Files\QuickTime\QTTask.exe" -atboottime "SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe" "TkBellExe" - "RealNetworks, Inc." - "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot "Windows Mobile Device Center" - "Microsoft Corporation" - %windir%\WindowsMobile\wmdc.exe [Print Monitors] -----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )----- "Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\Windows\system32\msonpmon.dll [Services] -----( HKLM\SYSTEM\CurrentControlSet\Services )----- "@%windir%\WindowsMobile\rapimgr.dll,-104" (RapiMgr) - "Microsoft Corporation" - C:\Windows\WindowsMobile\rapimgr.dll "@%windir%\WindowsMobile\wcescomm.dll,-40079" (WcesComm) - "Microsoft Corporation" - C:\Windows\WindowsMobile\wcescomm.dll "AAV UpdateService" (AAV UpdateService) - ? - C:\Program Files\AAVUpdateManager\aavus.exe "Adobe Acrobat Update Service" (AdobeARMservice) - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe "ASLDR Service" (ASLDRService) - ? - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe "ATKGFNEX Service" (ATKGFNEXSrv) - ? - C:\Program Files\ATKGFNEX\GFNEXSrv.exe "Avira Echtzeit Scanner" (AntiVirService) - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe "Avira Planer" (AntiVirSchedulerService) - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\sched.exe "DeviceVM Meta Data Export Service" (DvmMDES) - "DeviceVM" - C:\ASUS.SYS\DVMExportService.exe "HP CUE DeviceDiscovery Service" (hpqddsvc) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll "hpqcxs08" (hpqcxs08) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll "Internet Pass-Through Service" (PassThru Service) - ? - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe "LightScribeService Direct Disc Labeling Service" (LightScribeService) - "Hewlett-Packard Company" - C:\Program Files\Common Files\LightScribe\LSSrvc.exe "Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe "Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE "Microsoft Office Groove Audit Service" (Microsoft Office Groove Audit Service) - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe "Net Driver HPZ12" (Net Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZinw12.dll "NVIDIA Display Driver Service" (nvsvc) - "NVIDIA Corporation" - C:\Windows\system32\nvvsvc.exe "NVIDIA Stereoscopic 3D Driver Service" (Stereo Service) - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe "NVIDIA Update Service Daemon" (nvUpdatusService) - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe "Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE "Pml Driver HPZ12" (Pml Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZipm12.dll "Windows Live Family Safety Service" (fsssvc) - "Microsoft Corporation" - C:\Program Files\Windows Live\Family Safety\fsssvc.exe "Windows Live ID Sign-in Assistant" (wlidsvc) - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [Winsock Providers] -----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )----- "WindowsLive Local NSP" - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL "WindowsLive NSP" - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL ===[ Logfile end ]=========================================[ Logfile end ]=== If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru Code:
ATTFilter aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-19 14:10:25
-----------------------------
14:10:25.809 OS Version: Windows 6.1.7601 Service Pack 1
14:10:25.809 Number of processors: 2 586 0xF0D
14:10:25.811 ComputerName: ***-PC UserName: ***
14:10:27.453 Initialize success
14:16:31.715 AVAST engine defs: 12081900
14:16:45.816 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1
14:16:45.816 Disk 0 Vendor: ST9320320AS 0303 Size: 305245MB BusType: 3
14:16:46.440 Disk 0 MBR read successfully
14:16:46.440 Disk 0 MBR scan
14:16:46.455 Disk 0 Windows 7 default MBR code
14:16:46.502 Disk 0 Partition 1 00 1C Hidd FAT32 LBA MSDOS5.0 12001 MB offset 63
14:16:46.611 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 152617 MB offset 24579450
14:16:46.611 Disk 0 Partition - 00 0F Extended LBA 140623 MB offset 337140090
14:16:46.830 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 140623 MB offset 337140153
14:16:47.423 Disk 0 scanning sectors +625137345
14:16:48.187 Disk 0 scanning C:\Windows\system32\drivers
14:18:36.826 Service scanning
14:19:17.698 Modules scanning
14:21:51.373 Disk 0 trace - called modules:
14:21:51.436 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys
14:21:51.436 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8676f278]
14:21:51.451 3 CLASSPNP.SYS[8b9b959e] -> nt!IofCallDriver -> [0x8667f918]
14:21:51.451 5 ACPI.sys[8b4c53d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-1[0x8667a030]
14:21:52.419 AVAST engine scan C:\Windows
14:24:12.788 AVAST engine scan C:\Windows\system32
14:48:04.121 AVAST engine scan C:\Windows\system32\drivers
14:53:15.904 AVAST engine scan C:\Users\***
16:30:15.993 AVAST engine scan C:\ProgramData
16:37:33.418 Scan finished successfully
18:50:03.785 Disk 0 MBR has been saved successfully to "C:\Users\***\Desktop\neue scans\MBR.dat"
18:50:03.800 The log file has been saved successfully to "C:\Users\***\Desktop\neue scans\aswMBR.txt"
|
|
20.08.2012, 21:00
| #26 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Internet extrem langsam - an anderen Endgeräten problemlos - Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs. Denk dran beide Tools zu updaten vor dem Scan!!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
09.09.2012, 11:56
| #27 |
| | Internet extrem langsam - an anderen Endgeräten problemlos - Hallo Hoffe dein Urlaub war ok? Ich war auch ein paar Tage nicht im Lande. Hier die Logs:Code:
ATTFilter Malwarebytes Anti-Malware 1.62.0.1300 www.malwarebytes.org Datenbank Version: v2012.09.02.02 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 8.0.7601.17514 *** :: ***-PC [Administrator] 02.09.2012 12:03:03 mbam-log-2012-09-02 (12-03-03).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 520238 Laufzeit: 3 Stunde(n), 18 Minute(n), 51 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com
Generated 09/07/2012 at 06:23 PM
Application Version : 5.5.1012
Core Rules Database Version : 9168
Trace Rules Database Version: 6980
Scan type : Complete Scan
Total Scan Time : 04:35:08
Operating System Information
Windows 7 Home Premium 32-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Administrator
Memory items scanned : 948
Memory threats detected : 0
Registry items scanned : 36720
Registry threats detected : 0
File items scanned : 219189
File threats detected : 839
Adware.Tracking Cookie
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\2J9QDHCJ.txt [ /ad3.adfarm1.adition.com ]
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\PLZDXMDB.txt [ /ad2.adfarm1.adition.com ]
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\P2CMPVEK.txt [ /adfarm1.adition.com ]
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\4PKFLJTW.txt [ /c.atdmt.com ]
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\PFFELTMY.txt [ /microsoftwllivemkt.112.2o7.net ]
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\F6MB3HRC.txt [ /atdmt.com ]
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\UHJRA66L.txt [ /doubleclick.net ]
C:\USERS\***\Cookies\PLZDXMDB.txt [ Cookie:***@ad2.adfarm1.adition.com/ ]
C:\USERS\***\Cookies\P2CMPVEK.txt [ Cookie:***@adfarm1.adition.com/ ]
C:\USERS\***\Cookies\4PKFLJTW.txt [ Cookie:***@c.atdmt.com/ ]
C:\USERS\***\Cookies\F6MB3HRC.txt [ Cookie:***@atdmt.com/ ]
C:\USERS\***\Cookies\UHJRA66L.txt [ Cookie:***@doubleclick.net/ ]
.doubleclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.histats.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adserver.adtechus.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ads.rokatraffic.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.sevenoneintermedia.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.xiti.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.a.revenuemax.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ibanner.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.gostats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
adserv3.deutschland-spion.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
tracking.gameforge.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.easy-adserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adxpose.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
adserv.kwick.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
adserv.kwick.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ehg-twi.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
media.fragster.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adserve.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.server.cpmstar.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
wstat.wibiya.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.unitymedia.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.gwarez.cc [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.gwarez.cc [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.multimediaxis.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.multimediaxis.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.multimediaxis.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.multimediaxis.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adlegend.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adlegend.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
xxx-blog.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
adserver.w3anythink.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.weborama.fr [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.leylines.solution.weborama.fr [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.mm.chitika.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.mediafire.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.oms.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.olympiaverlag.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.h.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.h.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.h.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.h.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.microsoftsto.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.c.gigcount.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
adserver.heavenmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adinterax.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adinterax.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.guj.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
s2.netxmedia.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.histats.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.histats.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.bs.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
adserver2.clipkit.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
accounts.google.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
banner.testberichte.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.thewarezscene.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.thewarezscene.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
pornrush.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
pornrush.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
statse.webtrendslive.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.media-dealer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.media-dealer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.azjmp.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
adserver.seedpeer.me [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.aim4media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.horyzon-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.horyzon-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.horyzon-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.horyzon-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.foxfilmedentertainment.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.easy-adserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.easy-adserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.wegotmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.wegotmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ox-d.yadomedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.amazon-adsystem.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
dc.tremormedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.active-tracking.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.active-tracking.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.active-tracking.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tribalfusion.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.amazon-adsystem.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.msnportal.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
eas4.emediate.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.bs.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tracking.mindshare.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.mmotraffic.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.mmotraffic.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.mediafire.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.mediafire.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.komtrack.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.komtrack.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
track.adform.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ceramex-media.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ceramex-media.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.comstats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.comstats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.comstats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.aim4media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.yieldmanager.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.pro-market.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.adserver01.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
accounts.google.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
accounts.google.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
counter.f-thies.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.yadro.ru [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.paypal.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.trackcorner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.trackcorner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.clickfuse.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
tracking.sim-technik.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad3.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
adserver.11freunde.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.hightraffic.hugoboss.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.hightraffic.hugoboss.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.hightraffic.hugoboss.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
stats.zebralog.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ehg-foxmovies.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.ehg-foxmovies.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.adition.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.adition.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad4.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
studivz.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
studivz.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
track.adform.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adform.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.mentorcorporation.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ww251.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.zanox-affiliate.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.dyntracker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.counter.sexsuche.tv [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
counter2.sexmoney.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.tldadserv.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
media.campartner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
media.campartner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
media.campartner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
media.campartner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
click.iwantuonline.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
click.iwantuonline.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
click.iwantuonline.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
banner.publisher.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webstats4u.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
toplisted.us [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
tracking.alternads.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tracking.alternads.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tracking.alternads.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tracking.alternads.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.netxmedia.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
s1.netxmedia.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad1.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad2.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.traffictrack.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
view.advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
view.advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
media.quakelive.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.www.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
web.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.adviva.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.zanox-affiliate.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.zanox-affiliate.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]
C:\USERS\User2\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\User2@CONTENT.YIELDMANAGER[1].TXT [ /CONTENT.YIELDMANAGER ]
.xiti.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.premiumtv.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.moviepilot.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adviva.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adxpose.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.wissende.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
adserver2.clipkit.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.a.revenuemax.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.adition.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.adition.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.rainbowmedia.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
g.blogads.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
f.blogads.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
f.blogads.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
f.blogads.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
adservercentral.info [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.server.cpmstar.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.webstats4u.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.easy-adserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.easy-adserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.traveladvertising.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.amazonservices.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.webstats4u.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.xm.xtendmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.advert-layer.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.advert-layer.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.amazonwebstore.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.mtvn.112.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.harrenmedianetwork.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.ad-emea.doubleclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.azjmp.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.googleads.g.doubleclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.adserver01.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.guj.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad1.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.mediatraffic.com.ua [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.horyzon-media.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.horyzon-media.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.horyzon-media.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.horyzon-media.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.amazon-adsystem.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.amazon-adsystem.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.pro-market.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ads.247activemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
adsrv1.admediate.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.viewablemedia.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.bs.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
media.quakelive.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.nextag.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.nextag.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.casalemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.casalemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.casalemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.casalemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.yieldmanager.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.histats.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.histats.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
statse.webtrendslive.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.care2.112.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
www.mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
gotacha.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
gotacha.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
track.adform.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
tracking.mlsat02.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.dyntracker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ww251.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.bs.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adviva.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adxvalue.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
www.netdebit-counter.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.gostats.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.gostats.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.ar.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.zanox-affiliate.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.traffictrack.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
track.adform.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adform.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad4.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.paypal.112.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.stats.paypal.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.deutschepostag.112.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.c.gigcount.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
blogcounter.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
www.blogcounter.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
www.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
tracking.dc-storm.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
web.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.unitymedia.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad3.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.www.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
www.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
tracking.dc-storm.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
adserver.seedpeer.me [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
7.rotator.wigetmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
7.rotator.wigetmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
7.rotator.wigetmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.wegotmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.wegotmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.wegotmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.toplist.cz [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.toplist.eu [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
www.etracker.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.blogads.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.blogads.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
onlineadtracker.co.uk [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.zanox.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad2.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
counters.gigya.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
www.youporn.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
www.youporn.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.de.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.sexad.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
.exoclick.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
Trojan.Agent/Gen-FakeAV
C:\PROGRAM FILES\WINRAR\DEFAULT.SFX
|
|
10.09.2012, 15:50
| #28 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Internet extrem langsam - an anderen Endgeräten problemlos - Sieht ok aus, da wurden nur Cookies gefunden, der angebliche Fund bei WinRAR ist ein Fehalarm. Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie ) Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/ Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird. Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da. Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
20.09.2012, 09:29
| #29 |
| | Internet extrem langsam - an anderen Endgeräten problemlos - HAllo, Es scheint tatsächlich alles in Ordnung zu sein. Keine Probleme nach mehrtägiger Nutzung festgestellt. Danke! |
|
20.09.2012, 15:01
| #30 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Internet extrem langsam - an anderen Endgeräten problemlos - Dann wären wir durch!  Die Programme, die hier zum Einsatz kamen, können alle wieder runter. Mit Hilfe von OTL kannst du auch viele Tools entfernen: Starte bitte OTL und klicke auf Bereinigung. Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen. Malwarebytes zu behalten ist zu empfehlen. Kannst ja 1x im Monat damit einen Vollscan machen, aber immer vorher ans Update denken. Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden. Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern. Microsoftupdate Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren. Windows Vista/7: Anleitung Windows-Update PDF-Reader aktualisieren Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast) Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader. Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers: Prüfen => Adobe - Flash Player Downloadlinks => Adobe Flash Player Distribution | Adobe Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind. Java-Update Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Internet extrem langsam - an anderen Endgeräten problemlos - |
| antivir, autorun, avira, bho, browser, desktop, error, excel, firefox, format, helper, home, internet, langsam, logfile, netzwerk, nvidia update, object, picasa, plug-in, problem, realtek, registry, scan, searchscopes, senden, software, super, windows, wlan |
Textbox von OTL - wenn OTL auf deutsch ist wird sie mit 
beschriftet
.
Linear-Darstellung
