Trojaner-Board
Seite 3 von 3 12 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Keine Rückmeldung (https://www.trojaner-board.de/103253-keine-rueckmeldung.html)

cosinus 11.09.2011 19:00
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

fondorking 11.09.2011 21:26
Code:
ComboFix 11-09-11.05 - Cedric 11.09.2011  20:05:38.1.4 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.4095.2660 [GMT 2:00]
ausgeführt von:: c:\users\Admin\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\IsUn0407.exe
c:\windows\SysWow64\comct332.ocx
c:\windows\SysWow64\mfc100deu.dll
.
.
(((((((((((((((((((((((  Dateien erstellt von 2011-08-11 bis 2011-09-11  ))))))))))))))))))))))))))))))
.
.
2011-09-11 18:10 . 2011-09-11 18:10        --------        d-----w-        c:\users\ladmin\AppData\Local\temp
2011-09-11 18:10 . 2011-09-11 18:10        --------        d-----w-        c:\users\Default\AppData\Local\temp
2011-09-11 18:10 . 2011-09-11 18:10        --------        d-----w-        c:\users\Administrator\AppData\Local\temp
2011-09-11 16:44 . 2011-09-11 16:44        --------        d-----w-        C:\_OTL
2011-09-11 13:29 . 2011-09-11 13:29        --------        d-----w-        c:\program files (x86)\Reader 10.0
2011-09-11 13:29 . 2011-09-11 13:29        --------        d-----w-        c:\program files (x86)\Adobe Utilities - CS5
2011-09-11 13:28 . 2011-09-11 13:29        --------        d-----w-        c:\program files (x86)\Adobe Photoshop CS5
2011-09-11 13:28 . 2011-09-11 13:28        --------        d-----w-        c:\program files (x86)\Adobe Help
2011-09-11 13:28 . 2011-09-11 13:28        --------        d-----w-        c:\program files (x86)\Adobe Extension Manager CS5
2011-09-11 13:27 . 2011-09-11 13:28        --------        d-----w-        c:\program files (x86)\Adobe Device Central CS5
2011-09-11 13:27 . 2011-09-11 13:27        --------        d-----w-        c:\program files (x86)\Adobe Bridge CS5
2011-09-11 11:28 . 2011-08-16 06:48        8862544        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{C3B7D6CE-8F5C-4C1E-A974-6DC365F57CC0}\mpengine.dll
2011-09-10 09:07 . 2011-09-11 10:52        --------        d-----w-        c:\program files (x86)\Common Files\Steam
2011-09-10 09:07 . 2011-09-10 12:45        --------        d-----w-        c:\program files (x86)\Steam
2011-09-10 08:54 . 2011-09-10 08:54        --------        d-----w-        c:\users\Admin\AppData\Local\Activision
2011-09-10 08:45 . 2011-09-10 08:49        --------        d-----w-        c:\program files (x86)\Call of Duty Black Ops
2011-09-09 18:47 . 2011-09-09 18:47        --------        d-----w-        c:\program files (x86)\ESET
2011-09-08 19:22 . 2011-09-08 19:22        --------        d-----w-        c:\users\Admin\AppData\Roaming\Malwarebytes
2011-09-08 19:22 . 2011-09-08 19:22        --------        d-----w-        c:\programdata\Malwarebytes
2011-09-08 19:22 . 2011-07-06 17:52        41272        ----a-w-        c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-09-08 19:22 . 2011-09-08 19:22        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2011-09-08 19:22 . 2011-07-06 17:52        25912        ----a-w-        c:\windows\system32\drivers\mbam.sys
2011-09-08 13:36 . 2011-09-08 13:36        --------        d-----w-        c:\program files (x86)\7-Zip
2011-09-06 20:10 . 2011-09-06 20:10        --------        d-----w-        c:\users\Admin\AppData\Local\FixItCenter
2011-09-06 20:04 . 2011-09-06 20:04        --------        d-----w-        c:\program files\Microsoft Fix it Center
2011-09-06 20:04 . 2011-09-06 20:04        --------        d-----w-        c:\windows\MATS
2011-09-06 10:34 . 2011-09-06 10:34        472808        ----a-w-        c:\windows\SysWow64\deployJava1.dll
2011-09-06 10:29 . 2011-09-06 19:24        --------        d-----w-        c:\program files (x86)\JDownloader
2011-09-01 22:14 . 2002-12-11 17:12        760968        ----a-w-        c:\windows\SysWow64\WMSDMOD.DLL
2011-09-01 21:50 . 2011-09-01 21:50        --------        d-----w-        c:\program files (x86)\USM
2011-08-31 19:05 . 2011-08-31 19:05        --------        d-----w-        c:\program files (x86)\VirtualCloneDrive
2011-08-31 18:59 . 2011-08-31 19:43        --------        d-----w-        c:\program files (x86)\Landwirtschafts Simulator 2011
2011-08-31 08:30 . 2011-08-31 18:44        --------        d-----w-        c:\program files (x86)\Landwirtschafts Simulator 2011 old
2011-08-30 15:25 . 2011-08-30 15:25        --------        d-----w-        c:\programdata\ATI
2011-08-30 15:23 . 2011-08-30 15:23        --------        d-----w-        c:\program files (x86)\AMD APP
2011-08-30 11:49 . 2011-08-30 11:49        --------        d-----w-        c:\programdata\Raxco
2011-08-30 11:49 . 2011-08-30 11:49        --------        d-----w-        c:\program files\Raxco
2011-08-30 11:48 . 2011-08-30 11:48        --------        d-----w-        c:\program files (x86)\Raxco
2011-08-30 11:48 . 2011-08-30 11:48        --------        d-----w-        c:\program files (x86)\MARKEMENT
2011-08-30 11:44 . 2011-06-10 10:58        49152        ----a-w-        c:\windows\SysWow64\INETWH32.DLL
2011-08-30 11:44 . 2011-06-10 10:58        28672        ----a-w-        c:\windows\SysWow64\nnr.dll
2011-08-30 11:44 . 2011-06-10 10:58        1056768        ----a-w-        c:\windows\SysWow64\ROBOEX32.DLL
2011-08-30 11:43 . 2011-08-30 11:43        --------        d-----w-        c:\program files (x86)\NetObjects
2011-08-30 11:38 . 2011-09-06 19:35        --------        d-----w-        c:\users\Admin\AppData\Roaming\proDAD
2011-08-30 11:38 . 2011-08-30 11:38        --------        d-----w-        c:\program files (x86)\proDAD
2011-08-30 11:37 . 2011-09-02 00:22        --------        d-----w-        c:\programdata\proDAD
2011-08-30 11:29 . 2011-08-30 11:29        --------        d-----w-        c:\program files (x86)\Ashampoo
2011-08-30 11:28 . 2011-09-06 19:25        --------        d-----w-        c:\program files (x86)\Landwirtschafts-Simulator 2009
2011-08-25 17:45 . 2011-07-09 05:26        2048        ----a-w-        c:\windows\system32\tzres.dll
2011-08-25 17:45 . 2011-07-09 04:29        2048        ----a-w-        c:\windows\SysWow64\tzres.dll
2011-08-21 14:17 . 2011-08-21 14:17        --------        d-sh--w-        c:\programdata\SecuROM
2011-08-20 23:02 . 2011-08-21 14:16        --------        d-----w-        c:\program files (x86)\Microsoft Games for Windows - LIVE
2011-08-20 23:02 . 2011-08-20 23:02        --------        d-----w-        c:\windows\SysWow64\xlive
2011-08-19 13:32 . 2011-08-19 13:32        --------        d-----w-        c:\program files (x86)\Lavalys
2011-08-17 13:06 . 2011-08-17 13:06        --------        d-----w-        c:\users\Admin\AppData\Local\LogiShrd
2011-08-15 18:33 . 2011-08-15 18:33        53248        ----a-r-        c:\users\Admin\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2011-08-15 18:33 . 2011-08-15 18:33        --------        d-----w-        c:\users\Admin\AppData\Roaming\Leadertech
2011-08-15 18:33 . 2011-08-15 18:33        --------        d-----w-        c:\program files (x86)\Common Files\LogiShrd
2011-08-15 18:33 . 2011-08-17 13:03        18960        ----a-w-        c:\windows\system32\drivers\LNonPnP.sys
2011-08-15 18:32 . 2011-08-15 18:32        --------        d-----w-        c:\program files (x86)\SetPointG
2011-08-15 18:32 . 2011-08-15 18:32        --------        d-----w-        c:\program files (x86)\SetPointP
2011-08-15 18:31 . 2011-08-15 18:33        --------        d-----w-        c:\program files\Common Files\LogiShrd
2011-08-15 18:31 . 2011-08-15 18:34        --------        d-----w-        c:\users\Admin\AppData\Roaming\Logitech
2011-08-15 18:31 . 2011-08-15 18:31        --------        d-----w-        c:\users\Admin\AppData\Roaming\Logishrd
2011-08-13 18:43 . 2011-09-10 15:46        234768        ----a-w-        c:\windows\SysWow64\PnkBstrB.exe
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-10 15:46 . 2011-04-12 15:10        234768        ----a-w-        c:\windows\SysWow64\PnkBstrB.xtr
2011-09-06 10:06 . 2011-05-22 18:37        404640        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-09-01 13:58 . 2010-08-20 16:53        2300696        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2011-09-01 13:57 . 2010-08-20 16:53        42776        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2011-08-15 20:08 . 2011-03-06 12:47        59256        ----a-w-        c:\windows\system32\drivers\PktIcpt.sys
2011-08-15 12:05 . 2011-03-06 12:47        50552        ----a-w-        c:\windows\system32\drivers\GDBehave.sys
2011-08-15 12:05 . 2011-03-06 12:47        110968        ----a-w-        c:\windows\system32\drivers\MiniIcpt.sys
2011-08-15 12:05 . 2011-03-06 12:47        65912        ----a-w-        c:\windows\system32\drivers\gdwfpcd64.sys
2011-08-11 20:29 . 2011-06-29 17:32        75136        ----a-w-        c:\windows\SysWow64\PnkBstrA.exe
2011-08-10 13:32 . 2010-12-19 13:23        34624        ----a-w-        c:\windows\system32\TURegOpt.exe
2011-08-10 13:23 . 2010-12-19 13:23        25920        ----a-w-        c:\windows\system32\authuitu.dll
2011-08-10 13:23 . 2010-12-19 13:23        21312        ----a-w-        c:\windows\SysWow64\authuitu.dll
2011-08-10 13:23 . 2010-12-19 13:23        36160        ----a-w-        c:\windows\system32\uxtuneup.dll
2011-08-10 13:23 . 2010-12-19 13:23        29504        ----a-w-        c:\windows\SysWow64\uxtuneup.dll
2011-08-09 10:27 . 2010-08-07 08:24        2300696        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2011-08-09 10:17 . 2010-08-07 08:23        42776        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2011-08-09 10:17 . 2010-08-20 16:52        1166144        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-08-08 16:55 . 2011-08-08 16:55        18328        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-07-28 22:23 . 2011-07-28 22:23        9980416        ----a-w-        c:\windows\system32\drivers\atikmdag.sys
2011-07-28 22:09 . 2011-07-28 22:09        23921664        ----a-w-        c:\windows\system32\atio6axx.dll
2011-07-28 21:44 . 2011-07-28 21:44        18388480        ----a-w-        c:\windows\SysWow64\atioglxx.dll
2011-07-28 21:40 . 2011-07-28 21:40        151552        ----a-w-        c:\windows\system32\atiapfxx.exe
2011-07-28 21:40 . 2011-07-28 21:40        726528        ----a-w-        c:\windows\SysWow64\aticfx32.dll
2011-07-28 21:39 . 2011-07-28 21:39        852992        ----a-w-        c:\windows\system32\aticfx64.dll
2011-07-28 21:36 . 2011-05-25 03:04        462848        ----a-w-        c:\windows\system32\ATIDEMGX.dll
2011-07-28 21:36 . 2011-07-28 21:36        485376        ----a-w-        c:\windows\system32\atieclxx.exe
2011-07-28 21:35 . 2011-07-28 21:35        204288        ----a-w-        c:\windows\system32\atiesrxx.exe
2011-07-28 21:34 . 2011-07-28 21:34        120320        ----a-w-        c:\windows\system32\atitmm64.dll
2011-07-28 21:34 . 2011-07-28 21:34        423424        ----a-w-        c:\windows\system32\atipdl64.dll
2011-07-28 21:33 . 2011-07-28 21:33        356352        ----a-w-        c:\windows\SysWow64\atipdlxx.dll
2011-07-28 21:33 . 2011-07-28 21:33        278528        ----a-w-        c:\windows\SysWow64\Oemdspif.dll
2011-07-28 21:33 . 2011-07-28 21:33        21504        ----a-w-        c:\windows\system32\atimuixx.dll
2011-07-28 21:33 . 2011-07-28 21:33        59392        ----a-w-        c:\windows\system32\atiedu64.dll
2011-07-28 21:33 . 2011-07-28 21:33        43520        ----a-w-        c:\windows\SysWow64\ati2edxx.dll
2011-07-28 21:30 . 2011-07-28 21:30        4198912        ----a-w-        c:\windows\SysWow64\atidxx32.dll
2011-07-28 21:20 . 2011-07-28 21:20        4943360        ----a-w-        c:\windows\system32\atidxx64.dll
2011-07-28 21:12 . 2011-07-28 21:12        1113088        ----a-w-        c:\windows\system32\atiumd6v.dll
2011-07-28 21:11 . 2011-07-28 21:11        1828864        ----a-w-        c:\windows\SysWow64\atiumdmv.dll
2011-07-28 21:11 . 2011-07-28 21:11        3871744        ----a-w-        c:\windows\system32\atiumd6a.dll
2011-07-28 21:11 . 2011-07-28 21:11        51200        ----a-w-        c:\windows\system32\aticalrt64.dll
2011-07-28 21:11 . 2011-07-28 21:11        46080        ----a-w-        c:\windows\SysWow64\aticalrt.dll
2011-07-28 21:11 . 2011-07-28 21:11        44544        ----a-w-        c:\windows\system32\aticalcl64.dll
2011-07-28 21:11 . 2011-07-28 21:11        44032        ----a-w-        c:\windows\SysWow64\aticalcl.dll
2011-07-28 21:10 . 2011-07-28 21:10        9644544        ----a-w-        c:\windows\system32\aticaldd64.dll
2011-07-28 21:09 . 2011-07-28 21:09        4256768        ----a-w-        c:\windows\SysWow64\atiumdag.dll
2011-07-28 21:07 . 2011-07-28 21:07        8247296        ----a-w-        c:\windows\SysWow64\aticaldd.dll
2011-07-28 21:03 . 2011-07-28 21:03        4056064        ----a-w-        c:\windows\SysWow64\atiumdva.dll
2011-07-28 21:02 . 2011-07-28 21:02        5399040        ----a-w-        c:\windows\system32\atiumd64.dll
2011-07-28 21:01 . 2011-07-28 21:01        58880        ----a-w-        c:\windows\system32\coinst.dll
2011-07-28 20:54 . 2011-05-25 02:26        378368        ----a-w-        c:\windows\system32\atiadlxx.dll
2011-07-28 20:54 . 2011-07-28 20:54        266240        ----a-w-        c:\windows\SysWow64\atiadlxy.dll
2011-07-28 20:54 . 2011-07-28 20:54        15360        ----a-w-        c:\windows\system32\atig6pxx.dll
2011-07-28 20:54 . 2011-07-28 20:54        13312        ----a-w-        c:\windows\SysWow64\atiglpxx.dll
2011-07-28 20:54 . 2011-07-28 20:54        13312        ----a-w-        c:\windows\system32\atiglpxx.dll
2011-07-28 20:54 . 2011-07-28 20:54        39936        ----a-w-        c:\windows\system32\atig6txx.dll
2011-07-28 20:54 . 2011-07-28 20:54        32768        ----a-w-        c:\windows\SysWow64\atigktxx.dll
2011-07-28 20:54 . 2011-07-28 20:54        309248        ----a-w-        c:\windows\system32\drivers\atikmpag.sys
2011-07-28 20:53 . 2011-07-28 20:53        40960        ----a-w-        c:\windows\system32\atiuxp64.dll
2011-07-28 20:53 . 2011-07-28 20:53        31744        ----a-w-        c:\windows\SysWow64\atiuxpag.dll
2011-07-28 20:53 . 2011-07-28 20:53        38912        ----a-w-        c:\windows\system32\atiu9p64.dll
2011-07-28 20:53 . 2011-07-28 20:53        29184        ----a-w-        c:\windows\SysWow64\atiu9pag.dll
2011-07-28 20:52 . 2011-07-28 20:52        53248        ----a-w-        c:\windows\system32\drivers\ati2erec.dll
2011-07-28 20:51 . 2011-07-28 20:51        53760        ----a-w-        c:\windows\system32\atimpc64.dll
2011-07-28 20:51 . 2011-07-28 20:51        53760        ----a-w-        c:\windows\system32\amdpcom64.dll
2011-07-28 20:51 . 2011-07-28 20:51        52736        ----a-w-        c:\windows\SysWow64\atimpc32.dll
2011-07-28 20:51 . 2011-07-28 20:51        52736        ----a-w-        c:\windows\SysWow64\amdpcom32.dll
2011-07-28 15:49 . 2011-07-28 15:49        60416        ----a-w-        c:\windows\system32\OVDecode64.dll
2011-07-28 15:48 . 2011-07-28 15:48        16552960        ----a-w-        c:\windows\system32\amdocl64.dll
2011-07-22 05:42 . 2011-08-11 10:46        2303488        ----a-w-        c:\windows\system32\jscript9.dll
2011-07-22 05:36 . 2011-08-11 10:46        1389056        ----a-w-        c:\windows\system32\wininet.dll
2011-07-22 05:32 . 2011-08-11 10:46        2382848        ----a-w-        c:\windows\system32\mshtml.tlb
2011-07-22 02:54 . 2011-08-11 10:46        1797632        ----a-w-        c:\windows\SysWow64\jscript9.dll
2011-07-22 02:48 . 2011-08-11 10:46        1126912        ----a-w-        c:\windows\SysWow64\wininet.dll
2011-07-22 02:44 . 2011-08-11 10:46        2382848        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2011-07-17 21:54 . 2011-07-17 21:54        59904        ----a-w-        c:\windows\SysWow64\OVDecode.dll
2011-07-16 05:41 . 2011-08-10 18:16        362496        ----a-w-        c:\windows\system32\wow64win.dll
2011-07-16 05:41 . 2011-08-10 18:16        243200        ----a-w-        c:\windows\system32\wow64.dll
2011-07-16 05:41 . 2011-08-10 18:16        13312        ----a-w-        c:\windows\system32\wow64cpu.dll
2011-07-16 05:39 . 2011-08-10 18:16        16384        ----a-w-        c:\windows\system32\ntvdm64.dll
2011-07-16 05:37 . 2011-08-10 18:16        421888        ----a-w-        c:\windows\system32\KernelBase.dll
2011-07-16 05:21 . 2011-08-10 18:16        6144        ---ha-w-        c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-16 05:21 . 2011-08-10 18:16        5120        ---ha-w-        c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2006-05-03 10:06        163328        --sha-r-        c:\windows\SysWOW64\flvDX.dll
2007-02-21 11:47        31232        --sha-r-        c:\windows\SysWOW64\msfDX.dll
2008-03-16 13:30        216064        --sha-r-        c:\windows\SysWOW64\nbDX.dll
2010-01-06 22:00        107520        --sha-r-        c:\windows\SysWOW64\TAKDSDecoder.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          \0autocheck autochk *
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages        REG_MULTI_SZ          kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"FixCamera"=c:\windows\FixCamera.exe
"tsnpstd3"=c:\windows\tsnpstd3.exe
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
"WheelMouse"=c:\advanc~1\wh_exec.exe
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 EyelineService;Eyeline Video System;c:\program files (x86)\NCH Software\Eyeline\eyeline.exe [x]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-17 135664]
R3 BazisVirtualCDBus;WinCDEmu Virtual Bus Driver;c:\windows\system32\DRIVERS\BazisVirtualCDBus.sys [x]
R3 dump_wmimmc;dump_wmimmc;c:\aeriagames\WolfTeam\GameGuard\dump_wmimmc.sys [x]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-17 135664]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [x]
R3 MatSvc;Microsoft Fix it Supportcenter;c:\program files\Microsoft Fix it Center\Matsvc.exe [2011-06-13 343856]
R3 PAC207;SoC PC-Camera;c:\windows\system32\DRIVERS\PFC027.SYS [x]
R3 SaiH5F0D;SaiH5F0D;c:\windows\system32\DRIVERS\SaiH5F0D.sys [x]
R3 SaiU5F0D;SaiU5F0D;c:\windows\system32\DRIVERS\SaiU5F0D.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2010-11-29 11856]
R3 whfltr2k;WheelMouse USB Lower Filter Driver;c:\windows\system32\DRIVERS\whfltr2k.sys [x]
R3 X6va005;X6va005;c:\users\Admin\AppData\Local\Temp\0056D43.tmp [x]
R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
R4 DTProTS;DTProTS 2.01;c:\program files (x86)\DTProTS\DTProTS.exe [1999-12-31 271360]
R4 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
R4 TeamViewer5;TeamViewer 5;c:\program files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [2010-02-11 172328]
R4 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-08-10 2027840]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [x]
S2 WinRing0_1_2_0;WinRing0_1_2_0;c:\users\Admin\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries24.gadget\WinRing0x64.sys [2010-12-18 14544]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2011-09-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-17 11:41]
.
2011-09-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-17 11:41]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Launch LGDCore"="c:\program files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2010-08-03 4725320]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-11 162328]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-11 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-11 417304]
"EvtMgr6"="c:\program files (x86)\SetPointP\SetPoint.exe" [2011-06-23 1744152]
"Launch LgDeviceAgent"="c:\program files\Logitech\GamePanel Software\LgDevAgt.exe" [2010-08-03 415816]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mStart Page =
mLocal Page =
IE: Free YouTube Download - c:\users\Admin\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
IE: Free YouTube to MP3 Converter - c:\users\Admin\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 195.50.140.116 192.168.123.254
TCP: Interfaces\{BD5AE1E4-714D-4E03-920D-ABE9EE787A4C}: DhcpNameServer = 195.50.140.116 192.168.123.254
FF - ProfilePath - c:\users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\o4751zle.default\
FF - prefs.js: browser.search.selectedEngine - Facemoods Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-Adobe Acrobat 4.0 - c:\windows\ISUN0407.EXE
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc_p4f.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\services\X6va005]
"ImagePath"="\??\c:\users\Admin\AppData\Local\Temp\0056D43.tmp"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
  d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,9f,fd,ba,5b,7a,48,a6,48,ad,5f,a0,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
  d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,9f,fd,ba,5b,7a,48,a6,48,ad,5f,a0,\
.
[HKEY_USERS\S-1-5-21-741516300-845660521-4105745025-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:51,1a,2b,e1,e1,bb,06,1c,97,56,52,b3,e5,0d,da,f8,e9,3c,77,87,76,94,f1,
  24,11,1f,8d,86,a8,d7,15,25,c4,27,6c,af,2f,23,43,a3,6a,3a,19,9b,a4,5b,59,04,\
"??"=hex:59,e5,97,70,47,08,a5,1e,f6,13,83,cc,52,0d,a6,6c
.
[HKEY_USERS\S-1-5-21-741516300-845660521-4105745025-1000\Software\SecuROM\License information*]
"datasecu"=hex:d2,6e,9d,27,cd,87,8a,aa,2a,78,f6,d1,4f,d7,ec,ef,9f,aa,ad,78,9a,
  e3,50,2f,5d,9b,a0,b1,b6,38,b5,ae,c5,b1,b7,51,a6,ba,be,88,f7,e5,65,a8,7c,79,\
"rkeysecu"=hex:4a,52,43,84,f2,c6,e6,de,5a,6b,96,31,80,df,cc,1c
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10e.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10e.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10h.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10h.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10h.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10h.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2011-09-11  21:53:44 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2011-09-11 19:53
.
Vor Suchlauf: 14 Verzeichnis(se), 1.089.255.792.640 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 1.089.138.237.440 Bytes frei
.
- - End Of File - - AF7335277CD8E300E7845385EA0AAF1C

cosinus 12.09.2011 10:35
Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung) Vista und Win7 User mit Rechtsklick "als Admininstartor starten"
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

fondorking 12.09.2011 15:53
des scan button ist "ausgeschaltet"

mal eine frage, wieviele von solchen programmen muss ich denn noch starten?^^

cosinus 12.09.2011 15:54
Nur noch das, dann kommen Kontrollscans.

=> Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

fondorking 12.09.2011 17:27
so, jetzt scant es gerade. mir ist auch mal aufgefallen, dass das mit dem "keine rückmeldung" immer dann kommt wenn gerade irgendwas anderes mit dem internet beschäftigt ist. oder wie jetzt im mom mit diesem programm was grade scant.

fondorking 12.09.2011 17:37
Code:
aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-09-12 18:05:43
-----------------------------
18:05:43.461    OS Version: Windows x64 6.1.7601 Service Pack 1
18:05:43.461    Number of processors: 4 586 0x170A
18:05:43.462    ComputerName: ENERMAX  UserName: Cedric
18:05:45.250    Initialize success
18:19:16.142    AVAST engine defs: 11091200
18:20:14.018    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
18:20:14.020    Disk 0 Vendor: SAMSUNG_HD154UI 1AG01118 Size: 1430799MB BusType: 3
18:20:16.025    Disk 0 MBR read successfully
18:20:16.027    Disk 0 MBR scan
18:20:16.036    Disk 0 Windows 7 default MBR code
18:20:16.038    Service scanning
18:20:17.751    Modules scanning
18:20:17.754    Disk 0 trace - called modules:
18:20:17.764    ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS intelide.sys PCIIDEX.SYS hal.dll atapi.sys
18:20:17.767    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004a3a060]
18:20:17.769    3 CLASSPNP.SYS[fffff880016a643f] -> nt!IofCallDriver -> [0xfffffa80047d6520]
18:20:17.772    5 ACPI.sys[fffff88000f4e7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0xfffffa80047d7680]
18:20:19.552    AVAST engine scan C:\Windows
18:20:23.700    AVAST engine scan C:\Windows\system32
18:21:56.380    AVAST engine scan C:\Windows\system32\drivers
18:22:08.524    AVAST engine scan C:\Users\Admin
18:33:52.839    AVAST engine scan C:\ProgramData
18:36:10.279    Scan finished successfully
18:36:52.207    Disk 0 MBR has been saved successfully to "C:\Users\Admin\Desktop\MBR.dat"
18:36:52.208    The log file has been saved successfully to "C:\Users\Admin\Desktop\aswMBR.txt"

cosinus 12.09.2011 20:59
Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!


Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


fondorking 14.09.2011 13:22
malwarebytes lässt ich nicht updaten, da immer die meldung kommt das gewisse dateien sich nicht überschreiben lassen da ich nicht die richtigen rechte habe.
Ich bin aber Admin.
und mir fällt gerade beim schreiben auf, dass wieder kein rückmeldung kommt, warscheinlich weil ich gerade anty spyware runterade.. ist schon echt nervig.

cosinus 14.09.2011 15:08
Starte MBAM per Rechtsklick => als Administrator

fondorking 14.09.2011 16:45
ok mach ich gleich mal, ich hab in der zeit mal mit anti spyware weiter gemacht hier der log (heißt doch DER log oder?:pfeiff: ) :
Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 09/14/2011 at 04:25 PM

Application Version : 5.0.1118

Core Rules Database Version : 7688
Trace Rules Database Version: 5500

Scan type      : Complete Scan
Total Scan Time : 01:49:44

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned      : 505
Memory threats detected  : 0
Registry items scanned    : 73158
Registry threats detected : 2
File items scanned        : 334156
File threats detected    : 328

Adware.Tracking Cookie
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@2o7[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ad.adc-serv[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ad.adition[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ad.adnet[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ad.adserver01[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ad.yieldmanager[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ad.yieldmanager[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ad.zanox[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ad1.adfarm1.adition[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ad2.adfarm1.adition[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ad2.adfarm1.adition[3].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ad2.adfarm1.adition[4].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@adbrite[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@adcentriconline[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@adfarm1.adition[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@adfarm1.adition[3].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@adfarm1.adition[4].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ads.adshopping[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ads.medienhaus[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@ads.pointroll[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@adserver.traffictrack[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@adserving.claxon[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@adtech[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@advertise[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@advertising[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@apmebf[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@atdmt.combing[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@atdmt[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@atdmt[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@atwola[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@bluestreak[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@bs.serving-sys[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@bs.serving-sys[3].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@cdn.at.atwola[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@clicksor[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@content.yieldmanager[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@content.yieldmanager[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@content.yieldmanager[3].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@content.yieldmanager[4].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@doubleclick[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@eaeacom.112.2o7[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@eas.apm.emediate[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@euros4click[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@gamecenter.oberon-media[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@im.banner.t-online[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@imrworldwide[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@maniahome.trackmania[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@maniapub.trackmania[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@mediaplex[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@msnportal.112.2o7[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@myroitracking[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@oberon-media[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@pointroll[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@pro-market[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@questionmarket[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@realaporn[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@revsci[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@serving-sys[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@serving-sys[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@smartadserver[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@tacoda[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@track.adform[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@track.adform[3].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@tracking.mindshare[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@tracking.mlsat02[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@tracking.quisma[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@trackmania-best-racing.de[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@tradedoubler[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@traffictrack[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@unitymedia[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@vdwp.solution.weborama[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@webmasterplan[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@weborama[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@www.active-tracking[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@www.xxxmsncam[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@www.zanox-affiliate[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@xxxmsncam[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@yadro[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@zanox-affiliate[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@zanox[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\cedric@adtech[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\cedric@content.yieldmanager[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\cedric@doubleclick[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\system@ad.yieldmanager[2].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\system@atdmt[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\system@fastclick[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\system@interclick[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\system@microsoftwindows.112.2o7[1].txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\V01ZCWEU.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\KOWPPKE6.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\MC5FOQ3L.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\VKCZLMOI.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\K5GSB9OE.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\6O32LJ43.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\U1DBJOQ2.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\ZIDKQ79O.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\DNDQ4DXE.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\YUBHCCHQ.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\E6QID304.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\79NIGSC3.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\V03QK15W.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\CNT8EL4E.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\C13SQ84R.txt
        C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\GFVVMI81.txt
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@112.2O7[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@2O7[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@4STATS[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@A7.ADSERVER01[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AD.AD-SRV[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AD.AD-SRV[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AD.ADC-SERV[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AD.ADNET[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AD.ADSERVER01[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AD.BAUERVERLAG[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AD.MOGELPOWER[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AD.SALEBROKER[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AD.YIELDMANAGER[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AD.YIELDMANAGER[3].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AD.ZANOX[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AD2.ADFARM1.ADITION[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADFARM1.ADITION[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADFORM[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADS.AD4GAME[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADS.ADSHOPPING[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADS.CLICKADSERVER[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADS.CREATIVE-SERVING[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADS.DZO-MARKETING[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADS.ETELEON[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADS.PAGENSTECHER[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADS.QUARTERMEDIA[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADS.WEBME[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADS.WEBME[3].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADS2.UCLICK[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADSERVER.ADTECHUS[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADSRV.ADMEDIATE[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADTECH[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADVERTISING[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADVIVA[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADX.CHIP[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ADX.CHIP[3].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@APMEBF[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@AT.ATWOLA[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ATDMT[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@BILDER.XXXSRV[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@BOB.ELITEPVPERS[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@BS.SERVING-SYS[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@BS.SERVING-SYS[3].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@CDN5.SPECIFICCLICK[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@CHITIKA[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@CLICK.MEDIADOME[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@CLICKAIDER[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@COLLECTIVE-MEDIA[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@CONRAD.122.2O7[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@CONTENT.YIELDMANAGER[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@CONTENT.YIELDMANAGER[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@CONTENT.YIELDMANAGER[3].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@DE.PARTYPOKER[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@DIVX.112.2O7[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@DOUBLECLICK[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@E-2DJ6WJLIWODPMEO.STATS.ESOMNITURE[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@E-2DJ6WJMIGPAZACQ.STATS.ESOMNITURE[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@EAEACOM.112.2O7[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@EAS.APM.EMEDIATE[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ELITEPVPERS[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ELITEPVPERS[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@EUROS4CLICK[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@FASTCLICK[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@HIMEDIA.INDIVIDUAD[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@IM.BANNER.T-ONLINE[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@IMRWORLDWIDE[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@IMRWORLDWIDE[3].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@INVITEMEDIA[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@KOMTRACK[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@KQV.112.2O7[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@LARGEBANNER360[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@MEDIA.PHOTOBUCKET[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@MEDIA6DEGREES[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@MEDIAMARKT.DESIGNCAPE[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@MEDIAPLEX[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@MEDIAX.MOBILENOBO[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@MICROSOFTWINDOWS.112.2O7[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@MMEDIA.T134[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@MSNPORTAL.112.2O7[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@OAS.ADSERVINGML[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@OFFICIAL.TRACKMANIA[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@PARTNERS.WEBMASTERPLAN[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@PARTYPOKER[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@QUESTIONMARKET[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@REVENUE[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@REVSCI[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ROTATOR.ADJUGGLER[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@RTS.PGMEDIASERVE[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@SALES.LIVEPERSON[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@SALES.LIVEPERSON[3].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@SERVER.CPMSTAR[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@SERVING-SYS[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@SERVING-SYS[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@SEVENONEINTERMEDIA.112.2O7[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@SHOP.ZANOX[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@SMARTADSERVER[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@SPECIFICCLICK[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@STAT.DEALTIME[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@STATCOUNTER[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@STATSE.WEBTRENDSLIVE[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@STUDIVZ.ADFARM1.ADITION[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TACODA[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRACK.ADFORM[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRACK.EFFILIATION[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRACK.EFFILIATION[3].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRACK.WEBTREKK[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRACKING.INTERAKTIVFABRIK[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRACKING.MINDSHARE[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRACKING.QUISMA[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRACKING.QUISMA[3].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRACKMANIA-BEST-RACING.DE[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRACKMANIA-BEST-RACING.DE[3].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRACKMANIA-CARPARK[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRACKMANIA-THE-GAME[3].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRADEDOUBLER[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRAFFICTRACK[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@TRIBALFUSION[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@UK.AT.ATWOLA[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@UNITYMEDIA[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@UNITYMEDIA[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@WEBMASTERPLAN[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@WW251.SMARTADSERVER[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@WWW.ACTIVE-TRACKING[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@WWW.ELITEPVPERS[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@WWW.ETRACKER[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@WWW.GOOGLEADSERVICES[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@WWW.TRACKMANIA-CARPARK[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@WWW.USENEXT[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@WWW.ZANOX-AFFILIATE[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@WWW.ZANOX-AFFILIATE[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@XITI[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@YADRO[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ZANOX-AFFILIATE[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ZANOX-AFFILIATE[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ZANOX[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ZANOX[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ZBOX.ZANOX[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ZEDO[1].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\ADMIN@ZIELTRACK[2].TXT
        C:\USERS\ADMIN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\CEDRIC@EAEACOM.112.2O7[1].TXT
        .atdmt.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        zbox.zanox.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        tracking.mlsat02.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .content.yieldmanager.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .adlegend.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        banner.testberichte.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        www.bike-discount.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .bike-discount.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .bike-discount.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .bike-discount.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .shop.fahrradnet24.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .shop.fahrradnet24.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .shop.fahrradnet24.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .yadro.ru [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .yadro.ru [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        studivz.adfarm1.adition.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KR7KWNM2.DEFAULT\COOKIES.SQLITE ]
        trackmania-best-racing.de.tl [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O4751ZLE.DEFAULT\COOKIES.SQLITE ]
        trackmania-best-racing.de.tl [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O4751ZLE.DEFAULT\COOKIES.SQLITE ]
        .trackmania-best-racing.de.tl [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O4751ZLE.DEFAULT\COOKIES.SQLITE ]
        .trackmania-best-racing.de.tl [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O4751ZLE.DEFAULT\COOKIES.SQLITE ]
        .trackmania-best-racing.de.tl [ C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O4751ZLE.DEFAULT\COOKIES.SQLITE ]

Browser Hijacker.Deskbar
        (x64) HKCR\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
        (x64) HKCR\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}\ProxyStubClsid32

fondorking 14.09.2011 19:24
Ich hab auch mal gegoogelt und da stand, dass das mit der Rückmeldung auch bei ihm kam und dann nach einiger zeit seine festplatte kaputt war, kanns daran liegen?


Alle Zeitangaben in WEZ +1. Es ist jetzt 14:44 Uhr.
Seite 3 von 3 12 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131