Trojaner-Board
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Dorkbot.D Worm - Dateien auf USB-Stick nur noch Verknüpfungen (https://www.trojaner-board.de/103380-dorkbot-d-worm-dateien-usb-stick-nur-noch-verknuepfungen.html)

Malinche 23.09.2011 14:40
So, hier kommt das Kaspersky-Log: :)

Code:
15:36:27.0139 3268        TDSS rootkit removing tool 2.6.0.0 Sep 23 2011 07:42:37
15:36:27.0964 3268        ============================================================
15:36:27.0965 3268        Current date / time: 2011/09/23 15:36:27.0964
15:36:27.0965 3268        SystemInfo:
15:36:27.0965 3268       
15:36:27.0965 3268        OS Version: 6.1.7600 ServicePack: 0.0
15:36:27.0965 3268        Product type: Workstation
15:36:27.0966 3268        ComputerName: INNIW
15:36:27.0966 3268        UserName: Sabrina
15:36:27.0966 3268        Windows directory: C:\windows
15:36:27.0966 3268        System windows directory: C:\windows
15:36:27.0967 3268        Processor architecture: Intel x86
15:36:27.0967 3268        Number of processors: 2
15:36:27.0967 3268        Page size: 0x1000
15:36:27.0967 3268        Boot type: Normal boot
15:36:27.0967 3268        ============================================================
15:36:30.0067 3268        Initialize success
15:37:58.0841 3116        ============================================================
15:37:58.0841 3116        Scan started
15:37:58.0841 3116        Mode: Manual;
15:37:58.0841 3116        ============================================================
15:38:00.0510 3116        1394ohci        (6d2aca41739bfe8cb86ee8e85f29697d) C:\windows\system32\DRIVERS\1394ohci.sys
15:38:00.0526 3116        1394ohci - ok
15:38:00.0557 3116        ACPI            (f0e07d144c8685b8774bc32fc8da4df0) C:\windows\system32\DRIVERS\ACPI.sys
15:38:00.0557 3116        ACPI - ok
15:38:00.0588 3116        AcpiPmi        (98d81ca942d19f7d9153b095162ac013) C:\windows\system32\DRIVERS\acpipmi.sys
15:38:00.0604 3116        AcpiPmi - ok
15:38:00.0651 3116        adp94xx        (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys
15:38:00.0666 3116        adp94xx - ok
15:38:00.0760 3116        adpahci        (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys
15:38:00.0775 3116        adpahci - ok
15:38:00.0791 3116        adpu320        (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys
15:38:00.0807 3116        adpu320 - ok
15:38:00.0931 3116        AFD            (0db7a48388d54d154ebec120461a0fcd) C:\windows\system32\drivers\afd.sys
15:38:00.0947 3116        AFD - ok
15:38:00.0978 3116        agp440          (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\DRIVERS\agp440.sys
15:38:00.0978 3116        agp440 - ok
15:38:01.0041 3116        aic78xx        (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys
15:38:01.0056 3116        aic78xx - ok
15:38:01.0134 3116        aliide          (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\DRIVERS\aliide.sys
15:38:01.0134 3116        aliide - ok
15:38:01.0165 3116        amdagp          (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\DRIVERS\amdagp.sys
15:38:01.0181 3116        amdagp - ok
15:38:01.0212 3116        amdide          (cd5914170297126b6266860198d1d4f0) C:\windows\system32\DRIVERS\amdide.sys
15:38:01.0212 3116        amdide - ok
15:38:01.0259 3116        AmdK8          (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys
15:38:01.0259 3116        AmdK8 - ok
15:38:01.0290 3116        AmdPPM          (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys
15:38:01.0290 3116        AmdPPM - ok
15:38:01.0337 3116        amdsata        (2101a86c25c154f8314b24ef49d7fbc2) C:\windows\system32\DRIVERS\amdsata.sys
15:38:01.0353 3116        amdsata - ok
15:38:01.0384 3116        amdsbs          (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys
15:38:01.0384 3116        amdsbs - ok
15:38:01.0431 3116        amdxata        (b81c2b5616f6420a9941ea093a92b150) C:\windows\system32\DRIVERS\amdxata.sys
15:38:01.0431 3116        amdxata - ok
15:38:01.0555 3116        AppID          (feb834c02ce1e84b6a38f953ca067706) C:\windows\system32\drivers\appid.sys
15:38:01.0555 3116        AppID - ok
15:38:01.0618 3116        arc            (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys
15:38:01.0618 3116        arc - ok
15:38:01.0649 3116        arcsas          (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys
15:38:01.0665 3116        arcsas - ok
15:38:01.0743 3116        AsUpIO          (e67493490466b5f04b58c22d2590e8ca) C:\windows\system32\drivers\AsUpIO.sys
15:38:01.0743 3116        AsUpIO - ok
15:38:01.0852 3116        asushwio        (b6b5566b24329432e0fd1e4ed15a683b) C:\windows\system32\drivers\asushwio.sys
15:38:01.0852 3116        asushwio - ok
15:38:01.0914 3116        AsyncMac        (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys
15:38:01.0914 3116        AsyncMac - ok
15:38:01.0945 3116        atapi          (338c86357871c167a96ab976519bf59e) C:\windows\system32\DRIVERS\atapi.sys
15:38:01.0961 3116        atapi - ok
15:38:02.0039 3116        athr            (b01751cc563aecac09bbe36aaa21fbef) C:\windows\system32\DRIVERS\athr.sys
15:38:02.0086 3116        athr - ok
15:38:02.0226 3116        avgntflt        (1e4114685de1ffa9675e09c6a1fb3f4b) C:\windows\system32\DRIVERS\avgntflt.sys
15:38:02.0226 3116        avgntflt - ok
15:38:02.0289 3116        avipbb          (0f78d3dae6dedd99ae54c9491c62adf2) C:\windows\system32\DRIVERS\avipbb.sys
15:38:02.0289 3116        avipbb - ok
15:38:02.0382 3116        b06bdrv        (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys
15:38:02.0398 3116        b06bdrv - ok
15:38:02.0445 3116        b57nd60x        (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys
15:38:02.0460 3116        b57nd60x - ok
15:38:02.0569 3116        Beep            (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys
15:38:02.0585 3116        Beep - ok
15:38:02.0632 3116        blbdrive        (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys
15:38:02.0632 3116        blbdrive - ok
15:38:02.0679 3116        bowser          (9a5c671b7fbae4865149bb11f59b91b2) C:\windows\system32\DRIVERS\bowser.sys
15:38:02.0679 3116        bowser - ok
15:38:02.0725 3116        BrFiltLo        (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys
15:38:02.0725 3116        BrFiltLo - ok
15:38:02.0757 3116        BrFiltUp        (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys
15:38:02.0757 3116        BrFiltUp - ok
15:38:02.0819 3116        Brserid        (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys
15:38:02.0835 3116        Brserid - ok
15:38:02.0866 3116        BrSerWdm        (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys
15:38:02.0866 3116        BrSerWdm - ok
15:38:02.0913 3116        BrUsbMdm        (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys
15:38:02.0913 3116        BrUsbMdm - ok
15:38:02.0944 3116        BrUsbSer        (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys
15:38:02.0944 3116        BrUsbSer - ok
15:38:03.0006 3116        BthEnum        (2865a5c8e98c70c605f417908cebb3a4) C:\windows\system32\drivers\BthEnum.sys
15:38:03.0006 3116        BthEnum - ok
15:38:03.0053 3116        BTHMODEM        (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys
15:38:03.0053 3116        BTHMODEM - ok
15:38:03.0100 3116        BthPan          (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\windows\system32\DRIVERS\bthpan.sys
15:38:03.0100 3116        BthPan - ok
15:38:03.0131 3116        BTHPORT        (88059ff1ded4472acd17eebabd393069) C:\windows\System32\Drivers\BTHport.sys
15:38:03.0147 3116        BTHPORT - ok
15:38:03.0193 3116        BTHUSB          (80e6384beec03b8bd45edea29802d657) C:\windows\System32\Drivers\BTHUSB.sys
15:38:03.0193 3116        BTHUSB - ok
15:38:03.0240 3116        btusbflt        (92c5b845803f3662637eb691ac0b250f) C:\windows\system32\drivers\btusbflt.sys
15:38:03.0240 3116        btusbflt - ok
15:38:03.0287 3116        btwaudio        (d57d29132efe13a83133d9bd449e0cf1) C:\windows\system32\drivers\btwaudio.sys
15:38:03.0303 3116        btwaudio - ok
15:38:03.0334 3116        btwavdt        (d282c14a69357d0e1bafaecc2ca98c3a) C:\windows\system32\DRIVERS\btwavdt.sys
15:38:03.0349 3116        btwavdt - ok
15:38:03.0396 3116        btwl2cap        (aafd7cb76ba61fbb08e302da208c974a) C:\windows\system32\DRIVERS\btwl2cap.sys
15:38:03.0396 3116        btwl2cap - ok
15:38:03.0443 3116        btwrchid        (02eb4d2b05967df2d32f29c84ab1fb17) C:\windows\system32\DRIVERS\btwrchid.sys
15:38:03.0443 3116        btwrchid - ok
15:38:03.0490 3116        cdfs            (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys
15:38:03.0490 3116        cdfs - ok
15:38:03.0537 3116        cdrom          (ba6e70aa0e6091bc39de29477d866a77) C:\windows\system32\DRIVERS\cdrom.sys
15:38:03.0537 3116        cdrom - ok
15:38:03.0583 3116        circlass        (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys
15:38:03.0599 3116        circlass - ok
15:38:03.0646 3116        CLFS            (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys
15:38:03.0661 3116        CLFS - ok
15:38:03.0708 3116        CmBatt          (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys
15:38:03.0708 3116        CmBatt - ok
15:38:03.0739 3116        cmdide          (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\DRIVERS\cmdide.sys
15:38:03.0739 3116        cmdide - ok
15:38:03.0771 3116        CNG            (1b675691ed940766149c93e8f4488d68) C:\windows\system32\Drivers\cng.sys
15:38:03.0786 3116        CNG - ok
15:38:03.0833 3116        Compbatt        (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys
15:38:03.0833 3116        Compbatt - ok
15:38:03.0911 3116        CompositeBus    (f1724ba27e97d627f808fb0ba77a28a6) C:\windows\system32\DRIVERS\CompositeBus.sys
15:38:03.0911 3116        CompositeBus - ok
15:38:03.0973 3116        crcdisk        (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys
15:38:03.0973 3116        crcdisk - ok
15:38:04.0083 3116        CVirtA          (b5ecadf7708960f1818c7fa015f4c239) C:\windows\system32\DRIVERS\CVirtA.sys
15:38:04.0083 3116        CVirtA - ok
15:38:04.0192 3116        CVPNDRVA        (18994842386fd3039279d7865740abbd) C:\windows\system32\Drivers\CVPNDRVA.sys
15:38:04.0207 3116        CVPNDRVA - ok
15:38:04.0285 3116        DfsC            (83d1ecea8faae75604c0fa49ac7ad996) C:\windows\system32\Drivers\dfsc.sys
15:38:04.0301 3116        DfsC - ok
15:38:04.0363 3116        discache        (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys
15:38:04.0363 3116        discache - ok
15:38:04.0410 3116        Disk            (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys
15:38:04.0410 3116        Disk - ok
15:38:04.0504 3116        DNE            (b5aa5aa5ac327bd7c1aec0c58f0c1144) C:\windows\system32\DRIVERS\dne2000.sys
15:38:04.0519 3116        DNE - ok
15:38:04.0582 3116        drmkaud        (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys
15:38:04.0582 3116        drmkaud - ok
15:38:04.0629 3116        DXGKrnl        (8b6c3464d7fac176500061dbfff42ad4) C:\windows\System32\drivers\dxgkrnl.sys
15:38:04.0660 3116        DXGKrnl - ok
15:38:04.0785 3116        ebdrv          (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys
15:38:04.0894 3116        ebdrv - ok
15:38:04.0956 3116        elxstor        (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys
15:38:04.0987 3116        elxstor - ok
15:38:05.0003 3116        ErrDev          (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\DRIVERS\errdev.sys
15:38:05.0003 3116        ErrDev - ok
15:38:05.0081 3116        exfat          (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys
15:38:05.0081 3116        exfat - ok
15:38:05.0128 3116        fastfat        (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys
15:38:05.0128 3116        fastfat - ok
15:38:05.0175 3116        fdc            (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys
15:38:05.0175 3116        fdc - ok
15:38:05.0362 3116        FileInfo        (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys
15:38:05.0362 3116        FileInfo - ok
15:38:05.0393 3116        Filetrace      (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys
15:38:05.0393 3116        Filetrace - ok
15:38:05.0424 3116        flpydisk        (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys
15:38:05.0440 3116        flpydisk - ok
15:38:05.0471 3116        FltMgr          (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys
15:38:05.0471 3116        FltMgr - ok
15:38:05.0580 3116        FsDepends      (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys
15:38:05.0580 3116        FsDepends - ok
15:38:05.0611 3116        Fs_Rec          (a574b4360e438977038aae4bf60d79a2) C:\windows\system32\drivers\Fs_Rec.sys
15:38:05.0611 3116        Fs_Rec - ok
15:38:05.0658 3116        fvevol          (5592f5dba26282d24d2b080eb438a4d7) C:\windows\system32\DRIVERS\fvevol.sys
15:38:05.0674 3116        fvevol - ok
15:38:05.0736 3116        gagp30kx        (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys
15:38:05.0736 3116        gagp30kx - ok
15:38:05.0783 3116        hcw85cir        (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys
15:38:05.0783 3116        hcw85cir - ok
15:38:05.0845 3116        HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\windows\system32\drivers\HdAudio.sys
15:38:05.0861 3116        HdAudAddService - ok
15:38:05.0908 3116        HDAudBus        (717a2207fd6f13ad3e664c7d5a43c7bf) C:\windows\system32\DRIVERS\HDAudBus.sys
15:38:05.0923 3116        HDAudBus - ok
15:38:05.0955 3116        HidBatt        (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys
15:38:05.0970 3116        HidBatt - ok
15:38:06.0001 3116        HidBth          (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys
15:38:06.0017 3116        HidBth - ok
15:38:06.0064 3116        HidIr          (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys
15:38:06.0064 3116        HidIr - ok
15:38:06.0157 3116        HidUsb          (25072fb35ac90b25f9e4e3bacf774102) C:\windows\system32\DRIVERS\hidusb.sys
15:38:06.0173 3116        HidUsb - ok
15:38:06.0251 3116        HpSAMD          (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\DRIVERS\HpSAMD.sys
15:38:06.0251 3116        HpSAMD - ok
15:38:06.0313 3116        HTTP            (c531c7fd9e8b62021112787c4e2c5a5a) C:\windows\system32\drivers\HTTP.sys
15:38:06.0329 3116        HTTP - ok
15:38:06.0376 3116        hwpolicy        (8305f33cde89ad6c7a0763ed0b5a8d42) C:\windows\system32\drivers\hwpolicy.sys
15:38:06.0376 3116        hwpolicy - ok
15:38:06.0438 3116        i8042prt        (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\DRIVERS\i8042prt.sys
15:38:06.0438 3116        i8042prt - ok
15:38:06.0532 3116        iaStor          (d483687eace0c065ee772481a96e05f5) C:\windows\system32\DRIVERS\iaStor.sys
15:38:06.0547 3116        iaStor - ok
15:38:06.0610 3116        iaStorV        (934af4d7c5f457b9f0743f4299b77b67) C:\windows\system32\DRIVERS\iaStorV.sys
15:38:06.0625 3116        iaStorV - ok
15:38:06.0797 3116        igfx            (81f7c715528ab621c6af58869d4b07b9) C:\windows\system32\DRIVERS\igdkmd32.sys
15:38:06.0937 3116        igfx - ok
15:38:06.0969 3116        iirsp          (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys
15:38:06.0969 3116        iirsp - ok
15:38:07.0203 3116        IntcAzAudAddService (6a0679b63f9f39103f76c9876efd01a0) C:\windows\system32\drivers\RTKVHDA.sys
15:38:07.0296 3116        IntcAzAudAddService - ok
15:38:07.0327 3116        intelide        (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\DRIVERS\intelide.sys
15:38:07.0343 3116        intelide - ok
15:38:07.0390 3116        intelppm        (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys
15:38:07.0390 3116        intelppm - ok
15:38:07.0421 3116        IpFilterDriver  (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys
15:38:07.0421 3116        IpFilterDriver - ok
15:38:07.0468 3116        IPMIDRV        (e4454b6c37d7ffd5649611f6496308a7) C:\windows\system32\DRIVERS\IPMIDrv.sys
15:38:07.0468 3116        IPMIDRV - ok
15:38:07.0499 3116        IPNAT          (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys
15:38:07.0515 3116        IPNAT - ok
15:38:07.0593 3116        IRENUM          (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys
15:38:07.0593 3116        IRENUM - ok
15:38:07.0624 3116        isapnp          (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\DRIVERS\isapnp.sys
15:38:07.0624 3116        isapnp - ok
15:38:07.0671 3116        iScsiPrt        (ed46c223ae46c6866ab77cdc41c404b7) C:\windows\system32\DRIVERS\msiscsi.sys
15:38:07.0686 3116        iScsiPrt - ok
15:38:07.0749 3116        kbdclass        (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\DRIVERS\kbdclass.sys
15:38:07.0749 3116        kbdclass - ok
15:38:07.0811 3116        kbdhid          (3d9f0ebf350edcfd6498057301455964) C:\windows\system32\DRIVERS\kbdhid.sys
15:38:07.0827 3116        kbdhid - ok
15:38:07.0858 3116        kbfiltr        (3eb803312987ff44265c87cb960df6ab) C:\windows\system32\DRIVERS\kbfiltr.sys
15:38:07.0873 3116        kbfiltr - ok
15:38:07.0905 3116        KSecDD          (e36a061ec11b373826905b21be10948f) C:\windows\system32\Drivers\ksecdd.sys
15:38:07.0905 3116        KSecDD - ok
15:38:07.0951 3116        KSecPkg        (365c6154bbbc5377173f1ca7bfb6cc59) C:\windows\system32\Drivers\ksecpkg.sys
15:38:07.0951 3116        KSecPkg - ok
15:38:07.0998 3116        L1C            (a158cea8644b8a5c1ec0e9a81b70f65a) C:\windows\system32\DRIVERS\L1C62x86.sys
15:38:08.0014 3116        L1C - ok
15:38:08.0154 3116        lltdio          (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys
15:38:08.0154 3116        lltdio - ok
15:38:08.0217 3116        LSI_FC          (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys
15:38:08.0217 3116        LSI_FC - ok
15:38:08.0232 3116        LSI_SAS        (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys
15:38:08.0248 3116        LSI_SAS - ok
15:38:08.0279 3116        LSI_SAS2        (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys
15:38:08.0279 3116        LSI_SAS2 - ok
15:38:08.0295 3116        LSI_SCSI        (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys
15:38:08.0295 3116        LSI_SCSI - ok
15:38:08.0341 3116        luafv          (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys
15:38:08.0341 3116        luafv - ok
15:38:08.0497 3116        MBAMProtector  (69a6268d7f81e53d568ab4e7e991caf3) C:\windows\system32\drivers\mbam.sys
15:38:08.0497 3116        MBAMProtector - ok
15:38:08.0560 3116        megasas        (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys
15:38:08.0575 3116        megasas - ok
15:38:08.0622 3116        MegaSR          (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys
15:38:08.0622 3116        MegaSR - ok
15:38:08.0653 3116        Modem          (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys
15:38:08.0653 3116        Modem - ok
15:38:08.0700 3116        monitor        (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys
15:38:08.0700 3116        monitor - ok
15:38:08.0731 3116        mouclass        (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\DRIVERS\mouclass.sys
15:38:08.0747 3116        mouclass - ok
15:38:08.0794 3116        mouhid          (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys
15:38:08.0794 3116        mouhid - ok
15:38:08.0856 3116        mountmgr        (921c18727c5920d6c0300736646931c2) C:\windows\system32\drivers\mountmgr.sys
15:38:08.0856 3116        mountmgr - ok
15:38:08.0903 3116        mpio            (2af5997438c55fb79d33d015c30e1974) C:\windows\system32\DRIVERS\mpio.sys
15:38:08.0903 3116        mpio - ok
15:38:08.0950 3116        mpsdrv          (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys
15:38:08.0950 3116        mpsdrv - ok
15:38:09.0012 3116        MRxDAV          (b1be47008d20e43da3adc37c24cdb89d) C:\windows\system32\drivers\mrxdav.sys
15:38:09.0012 3116        MRxDAV - ok
15:38:09.0090 3116        mrxsmb          (ca7570e42522e24324a12161db14ec02) C:\windows\system32\DRIVERS\mrxsmb.sys
15:38:09.0090 3116        mrxsmb - ok
15:38:09.0137 3116        mrxsmb10        (f965c3ab2b2ae5c378f4562486e35051) C:\windows\system32\DRIVERS\mrxsmb10.sys
15:38:09.0137 3116        mrxsmb10 - ok
15:38:09.0168 3116        mrxsmb20        (25c38264a3c72594dd21d355d70d7a5d) C:\windows\system32\DRIVERS\mrxsmb20.sys
15:38:09.0168 3116        mrxsmb20 - ok
15:38:09.0231 3116        msahci          (4326d168944123f38dd3b2d9c37a0b12) C:\windows\system32\DRIVERS\msahci.sys
15:38:09.0231 3116        msahci - ok
15:38:09.0262 3116        msdsm          (455029c7174a2dbb03dba8a0d8bddd9a) C:\windows\system32\DRIVERS\msdsm.sys
15:38:09.0277 3116        msdsm - ok
15:38:09.0324 3116        Msfs            (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys
15:38:09.0324 3116        Msfs - ok
15:38:09.0355 3116        mshidkmdf      (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys
15:38:09.0355 3116        mshidkmdf - ok
15:38:09.0387 3116        msisadrv        (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\DRIVERS\msisadrv.sys
15:38:09.0387 3116        msisadrv - ok
15:38:09.0449 3116        MSKSSRV        (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys
15:38:09.0465 3116        MSKSSRV - ok
15:38:09.0480 3116        MSPCLOCK        (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys
15:38:09.0496 3116        MSPCLOCK - ok
15:38:09.0511 3116        MSPQM          (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys
15:38:09.0511 3116        MSPQM - ok
15:38:09.0558 3116        MsRPC          (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys
15:38:09.0558 3116        MsRPC - ok
15:38:09.0605 3116        mssmbios        (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\DRIVERS\mssmbios.sys
15:38:09.0605 3116        mssmbios - ok
15:38:09.0636 3116        MSTEE          (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys
15:38:09.0636 3116        MSTEE - ok
15:38:09.0667 3116        MTConfig        (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys
15:38:09.0667 3116        MTConfig - ok
15:38:09.0699 3116        Mup            (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys
15:38:09.0714 3116        Mup - ok
15:38:09.0777 3116        NativeWifiP    (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys
15:38:09.0792 3116        NativeWifiP - ok
15:38:09.0839 3116        NDIS            (23759d175a0a9baaf04d05047bc135a8) C:\windows\system32\drivers\ndis.sys
15:38:09.0870 3116        NDIS - ok
15:38:09.0901 3116        NdisCap        (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys
15:38:09.0901 3116        NdisCap - ok
15:38:09.0948 3116        NdisTapi        (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys
15:38:09.0948 3116        NdisTapi - ok
15:38:09.0995 3116        Ndisuio        (b30ae7f2b6d7e343b0df32e6c08fce75) C:\windows\system32\DRIVERS\ndisuio.sys
15:38:09.0995 3116        Ndisuio - ok
15:38:10.0026 3116        NdisWan        (267c415eadcbe53c9ca873dee39cf3a4) C:\windows\system32\DRIVERS\ndiswan.sys
15:38:10.0026 3116        NdisWan - ok
15:38:10.0057 3116        NDProxy        (af7e7c63dcef3f8772726f86039d6eb4) C:\windows\system32\drivers\NDProxy.sys
15:38:10.0057 3116        NDProxy - ok
15:38:10.0104 3116        NetBIOS        (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys
15:38:10.0120 3116        NetBIOS - ok
15:38:10.0167 3116        NetBT          (dd52a733bf4ca5af84562a5e2f963b91) C:\windows\system32\DRIVERS\netbt.sys
15:38:10.0167 3116        NetBT - ok
15:38:10.0338 3116        nfrd960        (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys
15:38:10.0338 3116        nfrd960 - ok
15:38:10.0385 3116        Npfs            (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys
15:38:10.0385 3116        Npfs - ok
15:38:10.0432 3116        nsiproxy        (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys
15:38:10.0432 3116        nsiproxy - ok
15:38:10.0510 3116        Ntfs            (3795dcd21f740ee799fb7223234215af) C:\windows\system32\drivers\Ntfs.sys
15:38:10.0557 3116        Ntfs - ok
15:38:10.0588 3116        Null            (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys
15:38:10.0588 3116        Null - ok
15:38:10.0619 3116        nvraid          (3f3d04b1d08d43c16ea7963954ec768d) C:\windows\system32\DRIVERS\nvraid.sys
15:38:10.0635 3116        nvraid - ok
15:38:10.0666 3116        nvstor          (c99f251a5de63c6f129cf71933aced0f) C:\windows\system32\DRIVERS\nvstor.sys
15:38:10.0666 3116        nvstor - ok
15:38:10.0713 3116        nv_agp          (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\DRIVERS\nv_agp.sys
15:38:10.0713 3116        nv_agp - ok
15:38:10.0759 3116        ohci1394        (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\DRIVERS\ohci1394.sys
15:38:10.0775 3116        ohci1394 - ok
15:38:10.0822 3116        Parport        (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys
15:38:10.0837 3116        Parport - ok
15:38:10.0869 3116        partmgr        (ff4218952b51de44fe910953a3e686b9) C:\windows\system32\drivers\partmgr.sys
15:38:10.0869 3116        partmgr - ok
15:38:10.0900 3116        Parvdm          (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys
15:38:10.0900 3116        Parvdm - ok
15:38:10.0947 3116        pci            (c858cb77c577780ecc456a892e7e7d0f) C:\windows\system32\DRIVERS\pci.sys
15:38:10.0962 3116        pci - ok
15:38:11.0009 3116        pciide          (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\DRIVERS\pciide.sys
15:38:11.0009 3116        pciide - ok
15:38:11.0040 3116        pcmcia          (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys
15:38:11.0056 3116        pcmcia - ok
15:38:11.0071 3116        pcw            (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys
15:38:11.0087 3116        pcw - ok
15:38:11.0134 3116        PEAUTH          (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys
15:38:11.0149 3116        PEAUTH - ok
15:38:11.0305 3116        PptpMiniport    (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys
15:38:11.0321 3116        PptpMiniport - ok
15:38:11.0352 3116        Processor      (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys
15:38:11.0368 3116        Processor - ok
15:38:11.0415 3116        Psched          (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys
15:38:11.0430 3116        Psched - ok
15:38:11.0508 3116        ql2300          (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys
15:38:11.0555 3116        ql2300 - ok
15:38:11.0586 3116        ql40xx          (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys
15:38:11.0602 3116        ql40xx - ok
15:38:11.0633 3116        QWAVEdrv        (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys
15:38:11.0633 3116        QWAVEdrv - ok
15:38:11.0664 3116        RasAcd          (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys
15:38:11.0664 3116        RasAcd - ok
15:38:11.0711 3116        RasAgileVpn    (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys
15:38:11.0711 3116        RasAgileVpn - ok
15:38:11.0773 3116        Rasl2tp        (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys
15:38:11.0773 3116        Rasl2tp - ok
15:38:11.0898 3116        RasPppoe        (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys
15:38:11.0914 3116        RasPppoe - ok
15:38:11.0945 3116        RasSstp        (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys
15:38:11.0945 3116        RasSstp - ok
15:38:11.0976 3116        rdbss          (835d7e81bf517a3b72384bdcc85e1ce6) C:\windows\system32\DRIVERS\rdbss.sys
15:38:11.0992 3116        rdbss - ok
15:38:12.0023 3116        rdpbus          (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys
15:38:12.0023 3116        rdpbus - ok
15:38:12.0054 3116        RDPCDD          (1e016846895b15a99f9a176a05029075) C:\windows\system32\DRIVERS\RDPCDD.sys
15:38:12.0054 3116        RDPCDD - ok
15:38:12.0101 3116        RDPENCDD        (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys
15:38:12.0117 3116        RDPENCDD - ok
15:38:12.0148 3116        RDPREFMP        (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys
15:38:12.0148 3116        RDPREFMP - ok
15:38:12.0195 3116        RDPWD          (801371ba9782282892d00aadb08ee367) C:\windows\system32\drivers\RDPWD.sys
15:38:12.0195 3116        RDPWD - ok
15:38:12.0257 3116        rdyboost        (4ea225bf1cf05e158853f30a99ca29a7) C:\windows\system32\drivers\rdyboost.sys
15:38:12.0257 3116        rdyboost - ok
15:38:12.0351 3116        RFCOMM          (cb928d9e6daf51879dd6ba8d02f01321) C:\windows\system32\DRIVERS\rfcomm.sys
15:38:12.0351 3116        RFCOMM - ok
15:38:12.0491 3116        rspndr          (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys
15:38:12.0491 3116        rspndr - ok
15:38:12.0538 3116        sbp2port        (34ee0c44b724e3e4ce2eff29126de5b5) C:\windows\system32\DRIVERS\sbp2port.sys
15:38:12.0553 3116        sbp2port - ok
15:38:12.0585 3116        scfilter        (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\windows\system32\DRIVERS\scfilter.sys
15:38:12.0600 3116        scfilter - ok
15:38:12.0647 3116        secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys
15:38:12.0663 3116        secdrv - ok
15:38:12.0709 3116        Serenum        (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys
15:38:12.0709 3116        Serenum - ok
15:38:12.0756 3116        Serial          (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys
15:38:12.0756 3116        Serial - ok
15:38:12.0772 3116        sermouse        (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys
15:38:12.0787 3116        sermouse - ok
15:38:12.0850 3116        sffdisk        (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\DRIVERS\sffdisk.sys
15:38:12.0850 3116        sffdisk - ok
15:38:12.0881 3116        sffp_mmc        (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\DRIVERS\sffp_mmc.sys
15:38:12.0881 3116        sffp_mmc - ok
15:38:12.0912 3116        sffp_sd        (4f1e5b0fe7c8050668dbfade8999aefb) C:\windows\system32\DRIVERS\sffp_sd.sys
15:38:12.0928 3116        sffp_sd - ok
15:38:12.0959 3116        sfloppy        (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys
15:38:12.0959 3116        sfloppy - ok
15:38:13.0006 3116        sisagp          (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\DRIVERS\sisagp.sys
15:38:13.0006 3116        sisagp - ok
15:38:13.0037 3116        SiSRaid2        (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys
15:38:13.0037 3116        SiSRaid2 - ok
15:38:13.0068 3116        SiSRaid4        (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys
15:38:13.0068 3116        SiSRaid4 - ok
15:38:13.0099 3116        Smb            (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys
15:38:13.0099 3116        Smb - ok
15:38:13.0162 3116        spldr          (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys
15:38:13.0178 3116        spldr - ok
15:38:13.0287 3116        srv            (c4a027b8c0bd3fc0699f41fa5e9e0c87) C:\windows\system32\DRIVERS\srv.sys
15:38:13.0302 3116        srv - ok
15:38:13.0334 3116        srv2            (414bb592cad8a79649d01f9d94318fb3) C:\windows\system32\DRIVERS\srv2.sys
15:38:13.0349 3116        srv2 - ok
15:38:13.0380 3116        srvnet          (ff207d67700aa18242aaf985d3e7d8f4) C:\windows\system32\DRIVERS\srvnet.sys
15:38:13.0380 3116        srvnet - ok
15:38:13.0443 3116        ssmdrv          (a36ee93698802cd899f98bfd553d8185) C:\windows\system32\DRIVERS\ssmdrv.sys
15:38:13.0443 3116        ssmdrv - ok
15:38:13.0490 3116        stexstor        (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys
15:38:13.0505 3116        stexstor - ok
15:38:13.0536 3116        swenum          (e58c78a848add9610a4db6d214af5224) C:\windows\system32\DRIVERS\swenum.sys
15:38:13.0536 3116        swenum - ok
15:38:13.0677 3116        SynTP          (bd8e7f87de409a745a132a8812de5a96) C:\windows\system32\DRIVERS\SynTP.sys
15:38:13.0677 3116        SynTP - ok
15:38:13.0802 3116        Tcpip          (c2daaeb48f3a47c410b041a0d2382ee1) C:\windows\system32\drivers\tcpip.sys
15:38:13.0848 3116        Tcpip - ok
15:38:13.0926 3116        TCPIP6          (c2daaeb48f3a47c410b041a0d2382ee1) C:\windows\system32\DRIVERS\tcpip.sys
15:38:13.0942 3116        TCPIP6 - ok
15:38:13.0989 3116        tcpipreg        (e64444523add154f86567c469bc0b17f) C:\windows\system32\drivers\tcpipreg.sys
15:38:13.0989 3116        tcpipreg - ok
15:38:14.0036 3116        TDPIPE          (1875c1490d99e70e449e3afae9fcbadf) C:\windows\system32\drivers\tdpipe.sys
15:38:14.0036 3116        TDPIPE - ok
15:38:14.0067 3116        TDTCP          (7551e91ea999ee9a8e9c331d5a9c31f3) C:\windows\system32\drivers\tdtcp.sys
15:38:14.0067 3116        TDTCP - ok
15:38:14.0098 3116        tdx            (cb39e896a2a83702d1737bfd402b3542) C:\windows\system32\DRIVERS\tdx.sys
15:38:14.0098 3116        tdx - ok
15:38:14.0114 3116        TermDD          (c36f41ee20e6999dbf4b0425963268a5) C:\windows\system32\DRIVERS\termdd.sys
15:38:14.0129 3116        TermDD - ok
15:38:14.0238 3116        tssecsrv        (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\windows\system32\DRIVERS\tssecsrv.sys
15:38:14.0238 3116        tssecsrv - ok
15:38:14.0301 3116        tunnel          (3e461d890a97f9d4c168f5fda36e1d00) C:\windows\system32\DRIVERS\tunnel.sys
15:38:14.0301 3116        tunnel - ok
15:38:14.0332 3116        uagp35          (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys
15:38:14.0332 3116        uagp35 - ok
15:38:14.0379 3116        udfs            (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\windows\system32\DRIVERS\udfs.sys
15:38:14.0379 3116        udfs - ok
15:38:14.0441 3116        uliagpkx        (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\DRIVERS\uliagpkx.sys
15:38:14.0441 3116        uliagpkx - ok
15:38:14.0504 3116        umbus          (049b3a50b3d646baeeee9eec9b0668dc) C:\windows\system32\DRIVERS\umbus.sys
15:38:14.0504 3116        umbus - ok
15:38:14.0550 3116        UmPass          (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys
15:38:14.0550 3116        UmPass - ok
15:38:14.0644 3116        usbaudio        (2436a42aab4ad48a9b714e5b0f344627) C:\windows\system32\drivers\usbaudio.sys
15:38:14.0660 3116        usbaudio - ok
15:38:14.0706 3116        usbccgp        (8455c4ed038efd09e99327f9d2d48ffa) C:\windows\system32\DRIVERS\usbccgp.sys
15:38:14.0722 3116        usbccgp - ok
15:38:14.0753 3116        usbcir          (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\DRIVERS\usbcir.sys
15:38:14.0753 3116        usbcir - ok
15:38:14.0784 3116        usbehci        (97c8c2750090ca722c73b8c8ddc7c82b) C:\windows\system32\DRIVERS\usbehci.sys
15:38:14.0784 3116        usbehci - ok
15:38:14.0847 3116        usbhub          (8b8601b4933275edab38d9994e0c0dda) C:\windows\system32\DRIVERS\usbhub.sys
15:38:14.0862 3116        usbhub - ok
15:38:14.0894 3116        usbohci        (a6fb7957ea7afb1165991e54ce934b74) C:\windows\system32\DRIVERS\usbohci.sys
15:38:14.0894 3116        usbohci - ok
15:38:14.0925 3116        usbprint        (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys
15:38:14.0925 3116        usbprint - ok
15:38:14.0956 3116        USBSTOR        (d8889d56e0d27e57ed4591837fe71d27) C:\windows\system32\DRIVERS\USBSTOR.SYS
15:38:14.0956 3116        USBSTOR - ok
15:38:14.0987 3116        usbuhci        (78780c3ebce17405b1ccd07a3a8a7d72) C:\windows\system32\DRIVERS\usbuhci.sys
15:38:14.0987 3116        usbuhci - ok
15:38:15.0018 3116        usbvideo        (f642a7e4bf78cfa359cca0a3557c28d7) C:\windows\system32\Drivers\usbvideo.sys
15:38:15.0034 3116        usbvideo - ok
15:38:15.0081 3116        vdrvroot        (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\DRIVERS\vdrvroot.sys
15:38:15.0096 3116        vdrvroot - ok
15:38:15.0143 3116        vga            (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys
15:38:15.0143 3116        vga - ok
15:38:15.0159 3116        VgaSave        (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys
15:38:15.0159 3116        VgaSave - ok
15:38:15.0206 3116        vhdmp          (3be6e1f3a4f1afec8cee0d7883f93583) C:\windows\system32\DRIVERS\vhdmp.sys
15:38:15.0206 3116        vhdmp - ok
15:38:15.0252 3116        viaagp          (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\DRIVERS\viaagp.sys
15:38:15.0252 3116        viaagp - ok
15:38:15.0284 3116        ViaC7          (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys
15:38:15.0284 3116        ViaC7 - ok
15:38:15.0299 3116        viaide          (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\DRIVERS\viaide.sys
15:38:15.0315 3116        viaide - ok
15:38:15.0346 3116        volmgr          (384e5a2aa49934295171e499f86ba6f3) C:\windows\system32\DRIVERS\volmgr.sys
15:38:15.0346 3116        volmgr - ok
15:38:15.0393 3116        volmgrx        (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys
15:38:15.0424 3116        volmgrx - ok
15:38:15.0440 3116        volsnap        (58df9d2481a56edde167e51b334d44fd) C:\windows\system32\DRIVERS\volsnap.sys
15:38:15.0455 3116        volsnap - ok
15:38:15.0486 3116        vsmraid        (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys
15:38:15.0502 3116        vsmraid - ok
15:38:15.0518 3116        vwifibus        (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys
15:38:15.0533 3116        vwifibus - ok
15:38:15.0564 3116        vwififlt        (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys
15:38:15.0564 3116        vwififlt - ok
15:38:15.0611 3116        vwifimp        (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys
15:38:15.0611 3116        vwifimp - ok
15:38:15.0658 3116        WacomPen        (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys
15:38:15.0674 3116        WacomPen - ok
15:38:15.0720 3116        WANARP          (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
15:38:15.0720 3116        WANARP - ok
15:38:15.0736 3116        Wanarpv6        (692a712062146e96d28ba0b7d75de31b) C:\windows\system32\DRIVERS\wanarp.sys
15:38:15.0736 3116        Wanarpv6 - ok
15:38:15.0798 3116        Wd              (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys
15:38:15.0814 3116        Wd - ok
15:38:15.0845 3116        Wdf01000        (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys
15:38:15.0876 3116        Wdf01000 - ok
15:38:16.0001 3116        WfpLwf          (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys
15:38:16.0001 3116        WfpLwf - ok
15:38:16.0048 3116        WIMMount        (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys
15:38:16.0048 3116        WIMMount - ok
15:38:16.0220 3116        WinUsb          (30fc6e5448d0cbaaa95280eeef7fedae) C:\windows\system32\DRIVERS\WinUsb.sys
15:38:16.0235 3116        WinUsb - ok
15:38:16.0282 3116        WmiAcpi        (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\DRIVERS\wmiacpi.sys
15:38:16.0282 3116        WmiAcpi - ok
15:38:16.0376 3116        ws2ifsl        (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys
15:38:16.0376 3116        ws2ifsl - ok
15:38:16.0454 3116        WudfPf          (6f9b6c0c93232cff47d0f72d6db1d21e) C:\windows\system32\drivers\WudfPf.sys
15:38:16.0454 3116        WudfPf - ok
15:38:16.0516 3116        WUDFRd          (f91ff1e51fca30b3c3981db7d5924252) C:\windows\system32\DRIVERS\WUDFRd.sys
15:38:16.0532 3116        WUDFRd - ok
15:38:16.0625 3116        MBR (0x1B8)    (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
15:38:16.0656 3116        \Device\Harddisk0\DR0 - ok
15:38:16.0672 3116        MBR (0x1B8)    (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk1\DR1
15:38:16.0781 3116        \Device\Harddisk1\DR1 - ok
15:38:16.0797 3116        Boot (0x1200)  (7cccd5bad98e3b81ed830b480899d34f) \Device\Harddisk0\DR0\Partition0
15:38:16.0797 3116        \Device\Harddisk0\DR0\Partition0 - ok
15:38:16.0828 3116        Boot (0x1200)  (1df8d7b7d27ec5089f4b30abb09ffa49) \Device\Harddisk0\DR0\Partition1
15:38:16.0828 3116        \Device\Harddisk0\DR0\Partition1 - ok
15:38:16.0844 3116        Boot (0x1200)  (eb16f239bab9fbbe0f82be92bb682a2b) \Device\Harddisk1\DR1\Partition0
15:38:16.0844 3116        \Device\Harddisk1\DR1\Partition0 - ok
15:38:16.0859 3116        ============================================================
15:38:16.0859 3116        Scan finished
15:38:16.0859 3116        ============================================================
15:38:16.0906 1576        Detected object count: 0
15:38:16.0906 1576        Actual detected object count: 0

cosinus 23.09.2011 14:54
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Malinche 23.09.2011 16:24
Danke für die Einleitung - hier kommt auch schon das CF-Log:

Code:
ComboFix 11-09-23.03 - Sabrina 23.09.2011  16:08:02.1.2 - x86
Microsoft Windows 7 Starter  6.1.7600.0.1252.49.1031.18.1014.289 [GMT 2:00]
ausgeführt von:: c:\users\Sabrina\Downloads\ComboFix.exe
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\FullRemove.exe
c:\users\Sabrina\AppData\Local\TempDIR
c:\windows\security\Database\tmp.edb
D:\install.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2011-08-23 bis 2011-09-23  ))))))))))))))))))))))))))))))
.
.
2011-09-23 15:04 . 2011-09-23 15:04        --------        d-----w-        c:\users\Default\AppData\Local\temp
2011-09-21 14:46 . 2011-09-21 14:46        --------        d-----w-        C:\_OTL
2011-09-12 14:36 . 2011-09-12 14:36        --------        d-----w-        c:\program files\ESET
2011-09-11 15:25 . 2011-09-11 15:25        --------        d-----w-        c:\users\Sabrina\AppData\Roaming\Malwarebytes
2011-09-11 15:14 . 2011-09-11 15:14        --------        d-----w-        c:\programdata\Malwarebytes
2011-09-11 15:14 . 2011-09-14 14:54        --------        d-----w-        c:\program files\Malwarebytes' Anti-Malware
2011-09-11 15:14 . 2011-08-31 15:00        22216        ----a-w-        c:\windows\system32\drivers\mbam.sys
2011-09-01 19:29 . 2011-09-01 19:29        --------        d-----w-        c:\users\Sabrina\.realobjects
2011-09-01 19:13 . 2011-09-01 19:13        --------        d-----w-        c:\program files\Common Files\Java
2011-09-01 19:13 . 2011-09-01 19:12        476904        ----a-w-        c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
2011-09-01 19:13 . 2011-09-01 19:12        472808        ----a-w-        c:\windows\system32\deployJava1.dll
2011-09-01 19:12 . 2011-09-01 19:12        --------        d-----w-        c:\program files\Java
2011-08-26 21:28 . 2011-08-26 21:28        --------        d-----w-        c:\program files\Amazon
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-26 02:32 . 2010-07-29 09:41        66616        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2011-07-26 02:32 . 2010-07-29 09:41        138192        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2011-07-22 04:56 . 2011-08-10 12:51        1638912        ----a-w-        c:\windows\system32\mshtml.tlb
2011-07-16 04:37 . 2011-08-10 12:51        169984        ----a-w-        c:\windows\system32\winsrv.dll
2011-07-16 04:34 . 2011-08-10 12:51        290816        ----a-w-        c:\windows\system32\KernelBase.dll
2011-07-16 04:31 . 2011-08-10 12:51        271360        ----a-w-        c:\windows\system32\conhost.exe
2011-07-16 04:19 . 2011-08-10 12:51        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        5120        ---ha-w-        c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-16 04:19 . 2011-08-10 12:51        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-16 02:21 . 2011-08-10 12:51        6144        ---ha-w-        c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-16 02:21 . 2011-08-10 12:51        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 02:21 . 2011-08-10 12:51        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 02:21 . 2011-08-10 12:51        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-09 04:30 . 2011-08-24 12:51        2048        ----a-w-        c:\windows\system32\tzres.dll
2011-07-09 02:26 . 2011-08-10 12:52        222720        ----a-w-        c:\windows\system32\drivers\mrxsmb10.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}"
[HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{618A47A2-528B-4D9A-AFC8-97D3233511E2}"
[HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-04-13 1594664]
"SynAsusAcpi"="c:\program files\Synaptics\SynTP\SynAsusAcpi.exe" [2010-04-13 83240]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"HotkeyMon"="AsusSender.exe" [2010-03-03 29184]
"HotkeyService"="AsusSender.exe" [2010-03-03 29184]
"SuperHybridEngine"="AsusSender.exe" [2010-03-03 29184]
"LiveUpdate"="AsusSender.exe" [2010-03-03 29184]
"CapsHook"="AsusSender.exe" [2010-03-03 29184]
"Eee Docking"="c:\program files\ASUS\Eee Docking\Eee Docking.exe" [2010-03-29 415920]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-13 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-13 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-13 150552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-04-09 8555040]
"Boingo Wi-Fi"="c:\program files\Boingo\Boingo Wi-Fi\Boingo.lnk" [2010-07-29 2429]
"ASUSPRP"="c:\program files\ASUS\APRP\APRP.EXE" [2010-04-26 2018032]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-11-19 281768]
"ASUSWebStorage"="c:\program files\ASUS\ASUS WebStorage\2.2.56.108\ASUSWSDashBoard.exe" [2010-09-01 5096784]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
.
c:\users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-8-2 795936]
Password 2.lnk - c:\windows\Temp\Password 2.exe [N/A]
VPN Client.lnk - c:\windows\Installer\{B0BF7057-6869-4E4B-920C-EA2A58DA07F0}\Icon3E5562ED7.ico [2010-11-11 6144]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 AsusService;Asus Launcher Service;c:\windows\System32\AsusService.exe [2009-08-19 219136]
R3 asushwio;asushwio;c:\windows\system32\drivers\asushwio.sys [1999-03-06 6144]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2010-04-13 11448]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2011-05-06 136360]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]
S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-04-13 43944]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-04-13 29472]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [2010-04-13 51712]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-08-31 22216]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 86968098
*Deregistered* - 86968098
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation        REG_MULTI_SZ          SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc
HPZ12        REG_MULTI_SZ          Pml Driver HPZ12 Net Driver HPZ12
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://asus.msn.com
IE: &Citavi Picker... - file://c:\program files\Internet Explorer\PLUGINS\Citavi Picker\ShowContextMenu.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Free YouTube to MP3 Converter - c:\users\Sabrina\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - d:\icq7.5\ICQ.exe
TCP: DhcpNameServer = 200.48.225.130 200.48.225.146
FF - ProfilePath - c:\users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\f5q7cz65.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://forum.tintenzirkel.de/index.php
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Free YouTube Download (Free Studio) Menu: {ACAA314B-EEBA-48e4-AD47-84E31C44796C} - %profile%\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
HKLM-Run-EeeSplendidAgent - c:\program files\ASUS\EPC\EeeSplendid\AsAgent.exe
HKLM-Run-ASUS WebStorage - c:\program files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(3220)
c:\progra~1\ASUS\ASUSWE~1\2256~1.108\ASUSWS~1.DLL
c:\program files\WIDCOMM\Bluetooth Software\btmmhook.dll
c:\windows\assembly\GAC\Interop.SHDocVw\1.1.0.0__4b827ebe229d539f\Interop.SHDocVw.dll
c:\windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
c:\program files\ASUS\ASUS WebStorage\2.2.56.108\LogicNP.EZNamespaceExtensions.dll
c:\windows\assembly\GAC_32\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll
c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
c:\progra~1\ASUS\ASUSWE~1\2256~1.108\SIMPLE~1.DLL
.
Zeit der Fertigstellung: 2011-09-23  17:13:03
ComboFix-quarantined-files.txt  2011-09-23 15:12
.
Vor Suchlauf: 10 Verzeichnis(se), 59.786.526.720 Bytes frei
Nach Suchlauf: 14 Verzeichnis(se), 59.453.292.544 Bytes frei
.
- - End Of File - - C8E5E6FD99B57518FC41A51B31BC41D2

cosinus 23.09.2011 18:03
Ok. Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).

Malinche 28.09.2011 05:43
So - danke wieder mal und hier kommen auch endlich die Logs.

Zuerst GMER - da hab ich zwei Sachen abgespeichert und hoffe, die richtige ist dabei:

Code:
GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2011-09-25 22:24:06
Windows 6.1.7601 Service Pack 1
Running: h6d2bggk.exe; Driver: C:\Users\Sabrina\AppData\Local\Temp\kxldrpod.sys


---- Registry - GMER 1.0.15 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\002243d42c76                                                                                                                                                       
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\1c4bd610c4b0                                                                                                                                                       
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\002243d42c76 (not active ControlSet)                                                                                                                                   
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\1c4bd610c4b0 (not active ControlSet)                                                                                                                                   
Reg  HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortcuts@C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intel\xae Matrix Storage Manager\Intel\xae Matrix Storage Console.lnk  1
Reg  HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortcuts@C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel\xae Matrix Storage Manager\Intel\xae Matrix Storage Console.lnk                          1

---- EOF - GMER 1.0.15 ----
Code:
GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit quick scan 2011-09-25 22:24:37
Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 ST925031 rev.0003
Running: h6d2bggk.exe; Driver: C:\Users\Sabrina\AppData\Local\Temp\kxldrpod.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\fastfat \Fat                fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation)
AttachedDevice  \FileSystem\fastfat \Fat                fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation)
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0  Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1  Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)

---- EOF - GMER 1.0.15 ----

OSAM:

Code:
Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 06:09:47 on 28.09.2011

OS: Windows 7 Starter Edition Service Pack 1 (Build 7601), 32-bit
Default Browser: Mozilla Corporation Firefox 3.6.20

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"AsUpIO" (AsUpIO) - ? - C:\windows\System32\drivers\AsUpIO.sys  (File found, but it contains no detailed information)
"avgntflt" (avgntflt) - "Avira GmbH" - C:\windows\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\windows\System32\DRIVERS\avipbb.sys
"catchme" (catchme) - ? - C:\Users\Sabrina\AppData\Local\Temp\catchme.sys  (File not found)
"Cisco Systems Inc. IPSec Driver" (CVPNDRVA) - "Cisco Systems, Inc." - C:\windows\system32\Drivers\CVPNDRVA.sys
"MBAMProtector" (MBAMProtector) - "Malwarebytes Corporation" - C:\windows\system32\drivers\mbam.sys
"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\windows\System32\DRIVERS\ssmdrv.sys

[Explorer]
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
-----( HKLM\Software\Classes\Protocols\Handler )-----
{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll
{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\ONFILTER.DLL
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - "Alexander Roshal" - C:\Program Files\WinRAR\rarext.dll

[Internet Explorer]
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_27" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab
{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} "Java Plug-in 1.6.0_27" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_27" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_27.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab
{C345E174-3E87-4F41-A01C-B066A90A49B4} "WRC Class" - "Microsoft Corporation" - C:\Windows\Downloaded Program Files\wrc32.ocx / hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
"ICQ7.5" - "ICQ, LLC." - D:\ICQ7.5\ICQ.exe
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
{48E73304-E1D6-4330-914C-F5F514E3486C} "Send to OneNote" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{D381FF29-7CFB-4D4E-B92A-C4EDDC696614} "ASUS Windows 7 Starter Helper" - "ASUSTeK Computer Inc." - C:\Program Files\asus\SystemSetting\StarterHelper.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE  (Shortcut exists | File exists)
"desktop.ini" - ? - C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"OpenOffice.org 3.2.lnk" - ? - C:\Program Files\OpenOffice.org 3\program\quickstart.exe  (Shortcut exists | File found, but it contains no detailed information | File exists)
-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"Password 2.lnk" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Password 2.lnk  (Shortcut exists | File not found)
"VPN Client.lnk" - "Cisco Systems, Inc." - C:\Program Files\Cisco Systems\VPN Client\vpngui.exe  (Shortcut exists | File exists)
"Bluetooth.lnk" - "Broadcom Corporation." - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe  (Shortcut exists | File exists)
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"ASUSPRP" - "ASUSTek Computer Inc." - C:\Program Files\ASUS\APRP\APRP.EXE
"ASUSWebStorage" - "eCareme" - C:\Program Files\ASUS\ASUS WebStorage\2.2.56.108\ASUSWSDashBoard.exe /S
"avgnt" - "Avira GmbH" - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
"Boingo Wi-Fi" - ? - "C:\Program Files\Boingo\Boingo Wi-Fi\Boingo.lnk"
"CapsHook" - "ASUSTek Computer Inc." - AsusSender.exe C:\Program Files\EeePC\CapsHook\CapsHook.exe
"Eee Docking" - ? - C:\Program Files\ASUS\Eee Docking\Eee Docking.exe autorun
"HotkeyMon" - "ASUSTek Computer Inc." - AsusSender.exe C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe
"HotkeyService" - "ASUSTek Computer Inc." - AsusSender.exe C:\Program Files\EeePC\HotkeyService\HotkeyService.exe
"IAAnotif" - "Intel Corporation" - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
"LiveUpdate" - "ASUSTek Computer Inc." - AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
"Malwarebytes' Anti-Malware" - "Malwarebytes Corporation" - "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
"SuperHybridEngine" - "ASUSTek Computer Inc." - AsusSender.exe C:\Program Files\EeePC\SHE\SuperHybridEngine.exe

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\windows\system32\msonpmon.dll

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"Asus Launcher Service" (AsusService) - ? - C:\Windows\System32\AsusService.exe  (File found, but it contains no detailed information)
"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\sched.exe
"Bluetooth Service" (btwdins) - "Broadcom Corporation." - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
"Cisco Systems, Inc. VPN Service" (CVPND) - "Cisco Systems, Inc." - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
"Intel(R) Matrix Storage Event Monitor" (IAANTMON) - "Intel Corporation" - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
"MBAMService" (MBAMService) - "Malwarebytes Corporation" - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
"Net Driver HPZ12" (Net Driver HPZ12) - "Hewlett-Packard" - C:\windows\system32\HPZinw12.dll
"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
"Pml Driver HPZ12" (Pml Driver HPZ12) - "Hewlett-Packard" - C:\windows\system32\HPZipm12.dll

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru
Und zu guter Letzt die aswMBR.txt:

Code:
aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-09-28 06:12:24
-----------------------------
06:12:24.203    OS Version: Windows 6.1.7601 Service Pack 1
06:12:24.203    Number of processors: 2 586 0x1C0A
06:12:24.203    ComputerName: INNIW  UserName:
06:13:13.078    Initialize success
06:21:05.669    AVAST engine defs: 11092701
06:26:59.519    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0
06:26:59.527    Disk 0 Vendor: ST925031 0003 Size: 238475MB BusType: 3
06:26:59.542    Disk 0 MBR read successfully
06:26:59.549    Disk 0 MBR scan
06:26:59.642    Disk 0 Windows 7 default MBR code
06:26:59.655    Disk 0 scanning sectors +488392065
06:26:59.757    Disk 0 scanning C:\windows\system32\drivers
06:27:16.584    Service scanning
06:27:18.351    Modules scanning
06:27:31.151    Disk 0 trace - called modules:
06:27:31.169    ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll iaStor.sys
06:27:31.170    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x84c55300]
06:27:31.171    3 CLASSPNP.SYS[86b7359e] -> nt!IofCallDriver -> [0x83ea1320]
06:27:31.180    5 ACPI.sys[864a43d4] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-0[0x83e56028]
06:27:32.103    AVAST engine scan C:\windows
06:27:36.454    AVAST engine scan C:\windows\system32
06:30:48.210    AVAST engine scan C:\windows\system32\drivers
06:31:05.774    AVAST engine scan C:\Users\Sabrina
06:37:33.001    AVAST engine scan C:\ProgramData
06:38:17.261    Scan finished successfully
06:39:21.510    Disk 0 MBR has been saved successfully to "C:\Users\Sabrina\Documents\MBR.dat"
06:39:21.532    The log file has been saved successfully to "C:\Users\Sabrina\Documents\aswMBR.txt"

cosinus 28.09.2011 09:42
Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!


Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Malinche 13.10.2011 17:31
*Thread ausgrab*

So, sorry - mir ist die Rückreise von Perú nach Deutschland mit allen verfügbaren Nebenwirkungen dazwischengekommen. Die Logs hab ich noch einmal gemacht, hier sind sie:

Anti-Malwarebytes:

Code:
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 7929

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

12.10.2011 17:05:52
mbam-log-2011-10-12 (17-05-52).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|)
Durchsuchte Objekte: 342640
Laufzeit: 1 Stunde(n), 43 Minute(n), 38 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
Super-Anti-Spyware:

Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 10/12/2011 at 07:08 PM

Application Version : 5.0.1128

Core Rules Database Version : 7785
Trace Rules Database Version: 5597

Scan type      : Complete Scan
Total Scan Time : 01:02:29

Operating System Information
Windows 7 Starter 32-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Administrator

Memory items scanned      : 801
Memory threats detected  : 0
Registry items scanned    : 37138
Registry threats detected : 0
File items scanned        : 52921
File threats detected    : 9

Adware.Tracking Cookie
        C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Cookies\sabrina@smartadserver[1].txt [ /smartadserver ]
        C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Cookies\3XITI0D1.txt [ /ad.yieldmanager.com ]
        C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Cookies\DKL9D8XG.txt [ /content.yieldmanager.com ]
        C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Cookies\Y82AB6NA.txt [ /doubleclick.net ]
        C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Cookies\3H7EVXTN.txt [ /atdmt.com ]
        C:\USERS\SABRINA\AppData\Roaming\Microsoft\Windows\Cookies\Low\sabrina@overture[1].txt [ Cookie:sabrina@overture.com/ ]
        C:\USERS\SABRINA\Cookies\3XITI0D1.txt [ Cookie:sabrina@ad.yieldmanager.com/ ]
        C:\USERS\SABRINA\Cookies\Y82AB6NA.txt [ Cookie:sabrina@doubleclick.net/ ]
        C:\USERS\SABRINA\Cookies\sabrina@smartadserver[1].txt [ Cookie:sabrina@smartadserver.com/ ]
Wobei ich mit dem Programm schon am 28. September einen Suchlauf gemacht hatte, und da sah der Log anders aus:

Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 09/28/2011 at 06:33 PM

Application Version : 5.0.1128

Core Rules Database Version : 7733
Trace Rules Database Version: 5545

Scan type      : Complete Scan
Total Scan Time : 00:54:23

Operating System Information
Windows 7 Starter 32-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Administrator

Memory items scanned      : 836
Memory threats detected  : 0
Registry items scanned    : 37125
Registry threats detected : 0
File items scanned        : 52823
File threats detected    : 306

Adware.Tracking Cookie
        C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Cookies\sabrina@smartadserver[1].txt [ /smartadserver ]
        C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Cookies\3XITI0D1.txt [ /ad.yieldmanager.com ]
        C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Cookies\DKL9D8XG.txt [ /content.yieldmanager.com ]
        C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Cookies\Y82AB6NA.txt [ /doubleclick.net ]
        C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Cookies\3H7EVXTN.txt [ /atdmt.com ]
        C:\USERS\SABRINA\AppData\Roaming\Microsoft\Windows\Cookies\Low\sabrina@overture[1].txt [ Cookie:sabrina@overture.com/ ]
        C:\USERS\SABRINA\Cookies\3XITI0D1.txt [ Cookie:sabrina@ad.yieldmanager.com/ ]
        C:\USERS\SABRINA\Cookies\Y82AB6NA.txt [ Cookie:sabrina@doubleclick.net/ ]
        C:\USERS\SABRINA\Cookies\sabrina@smartadserver[1].txt [ Cookie:sabrina@smartadserver.com/ ]
        .atdmt.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .msnportal.112.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .countomat.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .gruporpp.122.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .questionmarket.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .wissende.122.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .surveymonkey.122.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .yieldmanager.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ssl.finde-mein-rad.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .bikefinder.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        track.webtrekk.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .deutschepostag.112.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        rotator.adjuggler.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        rotator.adjuggler.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        banners.grupolarepublica.com.pe [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        track.webtrekk.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .msntrademarketing.112.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .eyewonder.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .eyewonder.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        adserver.atrapalo.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        delivery.atkmedia.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        user.lucidmedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        banners.grupolarepublica.com.pe [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .medialand.ru [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .medialand.ru [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tns-counter.ru [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .medialand.ru [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .spylog.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .openstat.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .yadro.ru [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        adserver.twitpic.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adserver.adtechus.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .questionmarket.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .gostats.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        tracking.bmbfcluster.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .sevenoneintermedia.112.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ice.112.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6wdkockazgko.stats.esomniture.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .zieltrack.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        s03.flagcounter.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .harrenmedianetwork.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tribalfusion.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .lucidmedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .paypal.112.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .stats.paypal.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        banners.grupolarepublica.com.pe [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .a.revenuemax.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .falabella.122.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .c.gigcount.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .weborama.fr [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .weborama.fr [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        studivz.adfarm1.adition.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        studivz.adfarm1.adition.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        statse.webtrendslive.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .lulu.112.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        webtrack.dhlglobalmail.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        webtrack.dhlglobalmail.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .webtrack.dhlglobalmail.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .webtrack.dhlglobalmail.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tacoda.at.atwola.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tacoda.at.atwola.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ar.atwola.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        stat.dealtime.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adxpose.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        wstat.wibiya.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .getclicky.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .static.getclicky.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        in.getclicky.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .vodafonees.122.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        zbox.zanox.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tto2.traffictrack.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        www8.addfreestats.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .overture.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        livestat.derstandard.at [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .asknetag.112.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .sixapart.112.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .guj.122.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        banners.grupolarepublica.com.pe [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        eas4.emediate.eu [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .prisacom.112.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .mediabrandsww.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .jazztelespaa.solution.weborama.fr [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .jazztelespaa.solution.weborama.fr [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .jazztelespaa.solution.weborama.fr [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .jazztelespaa.solution.weborama.fr [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .kontera.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        adserver.webads.co.il [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        flagcounter.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        pubads.g.doubleclick.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .eset.122.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .kaspersky.122.2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .clickfuse.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .content.yieldmanager.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        www.freewebcounterstats.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .tripod.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .myroitracking.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .shinystat.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        banners.glr.pe [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .verticaltechmedia.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SABRINA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F5Q7CZ65.DEFAULT\COOKIES.SQLITE ]
Eset bleibt leider immer bei 12-13 % hängen.

cosinus 14.10.2011 01:22
Sieht ok aus, da wurden nur Cookies gefunden.
Noch Probleme oder weitere Funde in der Zwischenzeit?

Malinche 14.10.2011 10:12
Das Netbook läuft problemlos und brav. Nur die Dateien auf dem USB-Stick sind nach wie vor Verknüpfungen. Was kann ich da noch machen?

cosinus 16.10.2011 12:21
Lass dir zuerst mal alle Dateien anzeigen => http://www.trojaner-board.de/59624-a...-sichtbar.html
Danach sollte auch alle Ordner wieder angezeigt werden - halbtransparent, da sie noch die Atrribute "versteckt" und "system" tragen

Starte anschließend die Eingabeaufforderung über Start, Alle Programme, Zubehör

Musst in der Eingabeauforderung jeweils für jeden versteckten Ordner diesen Befehl ausführen:

Code:
attrib -s -h "x:\ordner" /s /d
x: => Muss angepasst werden, den passenden Buchstaben verwenden
"ordner" muss dann der jew. richtige Ordnername sein

Vgl. diesen Strang => http://www.trojaner-board.de/102950-...traeger-2.html

Malinche 16.10.2011 15:49
Oh, wie großartig! Es hat (natürlich) funktioniert und die Ordner sind wieder da und anklickbar. Vielen, vielen Dank!

Ich habe nur noch eine Frage: Was mache ich mit den ominösen Verknüpfungen (die parallel noch immer da sind) und dem Ordner "Recycler"? Kann ich das einfach löschen? Oder sichere ich besser die Dateien vom Stick, die ich brauche, und formatiere komplett?

cosinus 16.10.2011 16:42
Die Verküpfungen sind Müll, weg damit.

Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. CF kann über Start, Ausführen mit combofix /uninstall entfernt werden. Melde dich falls es da Fehlermeldungen zu gibt.
Malwarebytes zu behalten ist kein Fehler. Kannst ja 1x im Monat damit scannen, aber immer vorher ans Update denken.

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers, hier der direkte Downloadlink:

Mozilla und andere Browser => http://filepony.de/?q=Flash+Player
Internet Explorer => http://fpdownload.adobe.com/get/flas..._player_ax.exe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.

Malinche 16.10.2011 17:03
Zitat:
Dann wären wir durch!
Juhu! :taenzer: (<-- Ich wollte die einfach mal benutzen. Sind die fröhlichsten Smileys, die ich da gesehen habe.)

Tausend Dank für deine Hilfe & Mühe. Ich bin echt erleichtert. Dann werd ich die Verknüpfungen mal runterhauen und mir die Updates ansehen. Malwarebytes behalte ich auch auf jeden Fall.

Also noch mal, vielen, vielen Dank! :dankeschoen:


Alle Zeitangaben in WEZ +1. Es ist jetzt 16:21 Uhr.
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131