Trojaner-Board - Nach PolizeiVirus habe ich noch eine Frage -NEU-da anderer theard felherhaft

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Nach PolizeiVirus habe ich noch eine Frage -NEU-da anderer theard felherhaft (https://www.trojaner-board.de/123512-polizeivirus-habe-noch-frage-neu-anderer-theard-felherhaft.html)

Nach PolizeiVirus habe ich noch eine Frage -NEU-da anderer theard felherhaft

ich hatte folgendes problem..
Habe mir vor ein paar tagen den tollen polizei virus eingefangen. Nach anleitung aus dem internet (über abgesichtem modus) hab ich den auch wegbekommen mit maliware.

Dann lief der laptop wie zuvor aber hatte das problem das es plötzlich, wenn ich ihn startete..er normal startete und ladete und dann ist alles weg und ich sah nur noch mein hintergrundbild.
Ich konnte nicht rechte maustaste drücken ich konnte nur STRG_ALT_ENTF drücken und benutzer abmelden oder runterfahren. task manager startete auch nicht. Im abgesichertemmodus war alles da und alles ok. Dann hab ich auch ein 2. benutzkonto angelegt und da funktunierte auch alles normal.
ich habe Systemwiederherstellung versucht, zu einem zeitpunkt wo ich den virus ziemlich sicher noch nicht hatte, hat aber leider auch nicht funktionert.

Mir wurde dann geraten den lapi neu aufzusetzen.. was ich auch versucht habe, aber es dann nicht so ganz nach- anleitung von einem anderem forum -funktioniert hatte.

Dann habe ich es jetzt doch noch etwas anderst gemacht, aber scheint auch geklappt zu haben.

Hab meine Privaten datein (also bilder musik und so)auf eine externe gespeichert. und dann den laptop
mit Vaio Care (also hab einen Vaio mit Win7) ganz zurückgesetzt (da gibts so ein wiederherstellungs ding wo wo eben alles deinstalliert wird und dann wieder installiert wird. ) und alles ...ALLES neu gemacht. Hat ewig gedauert. Und hab das auch nur so gemacht weil eben leider durch die anleitung das alles nicht so geklappt hat, und die bilder auch abgewichen sind von dem was ich da so hatte. vor allem bei diesem Parted magic und da hab ich mich GAR nicht ausgekannt. hab mich zwar durch die ganzen files gecklickt, aber ich fand meine privaten dateien nicht. und eine datei (Xubuntu 12.04.1 LTS) hat nicht geladen bzw hat sich selber abgebrochen u.s.w. und nach gut 5 stunden hab ich dann aufgegeben.
Aber jetzt lade ich gerade alles wieder neu und bis jetzt gibts auch gar nichts.

Ich hoffe das ist jetzt gut so. Oder denkt ihr das ich es jetzt erst wider falsch gemacht habe?? weil wen dem so ist dann versuch ich es hald nochmal...

im anderem forum waren die glaub ich leider auch schon etwas genervt von mir weil ich mich hald echt so gut wie nicht auskenne und bekam dann leider auch nicht mehr wirklich hilfe.

Bitte bei den erklärungen Frauen-freundlich schreiben.:P ich hab nämlich von laptops u.s.w. wirklich nicht viel ahnung...was ihr nach dem post sicher gecheckt habt.

Danke schonmal und nochmal sorry das ich in dem vorherigen thread so einen mist gebaut habe.. hoffe so ist das jetzt richtig..

Könntest du mal knapp und präzise beschreiben worum es dir jetzt geht?

Du hast die Daten gesichert und neu aufgesetzt - und jetzt willst du wissen ob noch irgendwo ein Schädling ist? Ist das richtig? Wenn nein bitte genauer beschreiben und die ganzen Beschreibungen zu irrelevanten Vorgeschichten weglassen

Genau. Ich möchte wissen, ob mein system jetzt sauber ist.

Bitte erstmal routinemäßig einen Vollscan mit malwarebytes machen und Log posten. =>ALLE lokalen Datenträger (außer CD/DVD) überprüfen lassen!
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Die Funde mit Malwarebytes bitte alle entfernen, sodass sie in der Quarantäne von Malwarebytes aufgehoben werden! NICHTS voreilig aus der Quarantäne entfernen!

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

hier steht das Log

Malwarebytes log :

Code:

 Malwarebytes Anti-Malware (Test) 1.62.0.1300

www.malwarebytes.org
 

Datenbank Version: v2012.09.07.11
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

drea :: DREA-PC [Administrator]
 

Schutz: Aktiviert
 

07.09.2012 21:12:40

mbam-log-2012-09-07 (21-12-40).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 300418

Laufzeit: 44 Minute(n), 20 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

Eset hat nichts gefunden.

ich habe jetzt gerade nochmal eset ausgeführt und diesmal hat es eines gefunden..

Code:

C:\Users\drea\AppData\Local\Temp\m3+Www9i.exe.part a variant of Win32/InstallCore.AC application

adwCleaner - Toolbars und ungewollte Start-/Suchseiten aufspüren

Downloade Dir bitte AdwCleaner auf deinen Desktop.

Falls der adwCleaner schon mal in der runtergeladen wurde, bitte die alte adwcleaner.exe löschen und neu runterladen!!

Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Suche.
Nach Ende des Suchlaufs öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[Rx].txt. (x=fortlaufende Nummer)

Code:

 # AdwCleaner v2.001 - Datei am 09/10/2012 um 21:21:30 erstellt

# Aktualisiert am 09/09/2012 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzer : drea - DREA-PC

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\drea\Desktop\adwcleaner.exe

# Option [Suche]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v9.0.8112.16421
 

[OK] Die Registrierungsdatenbank ist sauber.
 

-\\ Mozilla Firefox v15.0.1 (de)
 

Profilname : default 

Datei : C:\Users\drea\AppData\Roaming\Mozilla\Firefox\Profiles\70atnn5q.default\prefs.js
 

[OK] Die Datei ist sauber.
 

*************************
 

AdwCleaner[R1].txt - [847 octets] - [10/09/2012 21:21:30]
 

########## EOF - C:\AdwCleaner[R1].txt - [906 octets] ##########

adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Löschen.
Bestätige jeweils mit Ok.
Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[Sx].txt. (x=fortlaufende Nummer)

Code:

# AdwCleaner v2.001 - Datei am 09/11/2012 um 20:49:04 erstellt

# Aktualisiert am 09/09/2012 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzer : drea - DREA-PC

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\drea\Desktop\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v9.0.8112.16421
 

Wiederhergestellt : [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Wiederhergestellt : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Wiederhergestellt : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Wiederhergestellt : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
 

-\\ Mozilla Firefox v15.0.1 (de)
 

Profilname : default 

Datei : C:\Users\drea\AppData\Roaming\Mozilla\Firefox\Profiles\70atnn5q.default\prefs.js
 

[OK] Die Datei ist sauber.
 

*************************
 

AdwCleaner[R1].txt - [974 octets] - [10/09/2012 21:21:30]

AdwCleaner[S1].txt - [1270 octets] - [11/09/2012 20:49:04]
 

########## EOF - C:\AdwCleaner[S1].txt - [1330 octets] ##########

Hätte da mal zwei Fragen bevor es weiter geht

1.) Geht der normale Modus von Windows (wieder) uneingeschränkt?
2.) Vermisst du irgendwas im Startmenü? Sind da leere Ordner unter alle Programme oder ist alles vorhanden?

Es geht eigentlich alles wieder soweit ich es auch benutzt habe.
Nur Windows Media Player spielt mir die lieder oder filme nicht mehr ab.
VLC aber schon.

Uns mir ist noch nicht aufgefallen das etwas fehlt.

Mach bitte ein neues OTL-Log. Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

hier steht das Log

CustomScan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop. Falls schon vorhanden, bitte die ältere vorhandene Datei durch die neu heruntergeladene Datei ersetzen, damit du auch wirklich mit einer aktuellen Version von OTL arbeitest.

Starte bitte die OTL.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Setze oben mittig den Haken bei Scanne alle Benutzer
Kopiere nun den kompletten Inhalt aus der untenstehenden Codebox in die http://billy-oneal.com/Canned%20Spee.../customFix.png Textbox von OTL - wenn OTL auf deutsch ist wird sie mit http://larusso.trojaner-board.de/Images/otlfix.jpg beschriftet

Code:

netsvcs

msconfig

safebootminimal

safebootnetwork

activex

drivers32

%ALLUSERSPROFILE%\Application Data\*.

%ALLUSERSPROFILE%\Application Data\*.exe /s

%APPDATA%\*.

%APPDATA%\*.exe /s

%SYSTEMDRIVE%\*.exe

/md5start

wininit.exe

userinit.exe

eventlog.dll

scecli.dll

netlogon.dll

cngaudit.dll

ws2ifsl.sys

sceclt.dll

ntelogon.dll

winlogon.exe

logevent.dll

user32.DLL

iaStor.sys

nvstor.sys

atapi.sys

IdeChnDr.sys

viasraid.sys

AGP440.sys

vaxscsi.sys

nvatabus.sys

viamraid.sys

nvata.sys

nvgts.sys

iastorv.sys

ViPrt.sys

eNetHook.dll

ahcix86.sys

KR10N.sys

nvstor32.sys

ahcix86s.sys

/md5stop

%systemroot%\system32\drivers\*.sys /lockedfiles

%systemroot%\System32\config\*.sav

%systemroot%\*. /mp /s

%systemroot%\system32\*.dll /lockedfiles

CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Klick auf http://billy-oneal.com/Canned%20Spee.../OTL/btnOK.png.
Kopiere nun den Inhalt aus OTL.txt hier in Deinen Thread

OTL Logfile:

Code:

OTL logfile created on: 13.09.2012 00:36:52 - Run 3

OTL by OldTimer - Version 3.2.61.3     Folder = C:\Users\drea\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy

 

3,98 Gb Total Physical Memory | 2,64 Gb Available Physical Memory | 66,41% Memory free

7,96 Gb Paging File | 6,03 Gb Available in Paging File | 75,75% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 582,44 Gb Total Space | 477,08 Gb Free Space | 81,91% Space Free | Partition Type: NTFS

 

Computer Name: DREA-PC | User Name: drea | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - C:\Users\drea\Desktop\OTL.exe (OldTimer Tools)

PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)

PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)

PRC - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)

PRC - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros)

PRC - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation)

PRC - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation)

PRC - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (ArcSoft, Inc.)

PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)

PRC - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)

PRC - C:\Programme\Sony\VAIO Care\VCService.exe (Sony Corporation)

PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)

PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)

PRC - C:\Programme\Sony\VAIO Care\listener.exe (Sony of America Corporation)

PRC - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)

PRC - c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)

PRC - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)

PRC - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)

PRC - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)

PRC - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.)

 

 
 ========== Modules (No Company Name) ==========

 

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\220b0516e45e7f9bbf6a631490c1243a\IAStorCommon.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\09557e6c5a83a1cb68c7c50a841c8064\IAStorUtil.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll ()

MOD - C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll ()

MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ()

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - (mfevtp) -- C:\Windows\SysNative\mfevtps.exe (McAfee, Inc.)

SRV:64bit: - (mfefire) -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe ()

SRV:64bit: - (McShield) -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe ()

SRV:64bit: - (SampleCollector) -- C:\Program Files\Sony\VAIO Care\VCPerfService.exe (Sony Corporation)

SRV:64bit: - (MSK80Service) -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)

SRV:64bit: - (McProxy) -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)

SRV:64bit: - (McOobeSv) -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)

SRV:64bit: - (McNASvc) -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)

SRV:64bit: - (McNaiAnn) -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)

SRV:64bit: - (mcmscsvc) -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)

SRV:64bit: - (McMPFSvc) -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)

SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)

SRV - (McODS) -- C:\Programme\mcafee\virusscan\mcods.exe (McAfee, Inc.)

SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)

SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)

SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)

SRV - (VUAgent) -- C:\Programme\Sony\VAIO Update Common\VUAgent.exe (Sony Corporation)

SRV - (0305921347413284mcinstcleanup) -- C:\Windows\Temp\0305921347413284mcinst.exe (McAfee, Inc.)

SRV - (BBSvc) -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)

SRV - (BBUpdate) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)

SRV - (DCDhcpService) -- C:\Programme\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe (Atheros Communication Inc.)

SRV - (Atheros Bt&Wlan Coex Agent) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros)

SRV - (AtherosSvc) -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Atheros Commnucations)

SRV - (IconMan_R) -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.)

SRV - (VAIO Event Service) -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation)

SRV - (VSNService) -- C:\Programme\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation)

SRV - (uCamMonitor) -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (ArcSoft, Inc.)

SRV - (SOHCImp) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe (Sony Corporation)

SRV - (SOHDs) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe (Sony Corporation)

SRV - (VcmXmlIfHelper) -- C:\Programme\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe (Sony Corporation)

SRV - (VcmIAlzMgr) -- C:\Programme\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Sony Corporation)

SRV - (VcmINSMgr) -- C:\Programme\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe (Sony Corporation)

SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)

SRV - (VCService) -- C:\Programme\Sony\VAIO Care\VCService.exe (Sony Corporation)

SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)

SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)

SRV - (SpfService) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (Sony Corporation)

SRV - (VCFw) -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Sony Corporation)

SRV - (PMBDeviceInfoProvider) -- c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)

SRV - (wlcrasvc) -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)

SRV - (wlidsvc) -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)

SRV - (IAStorDataMgrSvc) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)

SRV - (McAWFwk) -- c:\Programme\mcafee\msc\McAWFwk.exe (McAfee, Inc.)

SRV - (IviRegMgr) -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)

SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)

SRV - (ACDaemon) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)

SRV - (PSI_SVC_2) -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.)

SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)

DRV:64bit: - (cfwids) -- C:\Windows\SysNative\drivers\cfwids.sys (McAfee, Inc.)

DRV:64bit: - (mfewfpk) -- C:\Windows\SysNative\drivers\mfewfpk.sys (McAfee, Inc.)

DRV:64bit: - (mferkdet) -- C:\Windows\SysNative\drivers\mferkdet.sys (McAfee, Inc.)

DRV:64bit: - (mfehidk) -- C:\Windows\SysNative\drivers\mfehidk.sys (McAfee, Inc.)

DRV:64bit: - (mfefirek) -- C:\Windows\SysNative\drivers\mfefirek.sys (McAfee, Inc.)

DRV:64bit: - (mfeavfk) -- C:\Windows\SysNative\drivers\mfeavfk.sys (McAfee, Inc.)

DRV:64bit: - (mfeapfk) -- C:\Windows\SysNative\drivers\mfeapfk.sys (McAfee, Inc.)

DRV:64bit: - (HipShieldK) -- C:\Windows\SysNative\drivers\HipShieldK.sys (McAfee, Inc.)

DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)

DRV:64bit: - (ApfiltrService) -- C:\Windows\SysNative\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)

DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)

DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)

DRV:64bit: - (BtFilter) -- C:\Windows\SysNative\drivers\btfilter.sys (Atheros)

DRV:64bit: - (BTATH_RCP) -- C:\Windows\SysNative\drivers\btath_rcp.sys (Atheros)

DRV:64bit: - (BTATH_LWFLT) -- C:\Windows\SysNative\drivers\btath_lwflt.sys (Atheros)

DRV:64bit: - (BTATH_A2DP) -- C:\Windows\SysNative\drivers\btath_a2dp.sys (Atheros)

DRV:64bit: - (BTATH_HCRP) -- C:\Windows\SysNative\drivers\btath_hcrp.sys (Atheros)

DRV:64bit: - (btath_avdt) -- C:\Windows\SysNative\drivers\btath_avdt.sys (Atheros)

DRV:64bit: - (AthBTPort) -- C:\Windows\SysNative\drivers\btath_flt.sys (Atheros)

DRV:64bit: - (BTATH_BUS) -- C:\Windows\SysNative\drivers\btath_bus.sys (Atheros)

DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)

DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )

DRV:64bit: - (RSPCIESTOR) -- C:\Windows\SysNative\drivers\RtsPStor.sys (Realtek Semiconductor Corp.)

DRV:64bit: - (CnxtHdAudService) -- C:\Windows\SysNative\drivers\CHDRT64.sys (Conexant Systems Inc.)

DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)

DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)

DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)

DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)

DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)

DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)

DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)

DRV:64bit: - (SFEP) -- C:\Windows\SysNative\drivers\SFEP.sys (Sony Corporation)

DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)

DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)

DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)

DRV:64bit: - (e1yexpress) -- C:\Windows\SysNative\drivers\e1y60x64.sys (Intel Corporation)

DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)

DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)

DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)

DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)

DRV:64bit: - (ArcSoftKsUFilter) -- C:\Windows\SysNative\drivers\ArcSoftKsUFilter.sys (ArcSoft, Inc.)

DRV:64bit: - (regi) -- C:\Windows\SysNative\drivers\regi.sys (InterVideo)

DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox

 

 

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

 

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

 

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

 

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

 

IE - HKU\S-1-5-21-3331342625-628966979-1705653413-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sony.eu/vaioportal

IE - HKU\S-1-5-21-3331342625-628966979-1705653413-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startfenster.com

IE - HKU\S-1-5-21-3331342625-628966979-1705653413-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-21-3331342625-628966979-1705653413-1000\..\SearchScopes\{20B646B3-C16C-4CDB-96B3-A9923CD5C403}: "URL" = hxxp://de.shopping.com/?linkin_id=8056363

IE - HKU\S-1-5-21-3331342625-628966979-1705653413-1000\..\SearchScopes\{5919DB7F-34C3-4886-86D2-8EF6DD4A6819}: "URL" = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices

IE - HKU\S-1-5-21-3331342625-628966979-1705653413-1000\..\SearchScopes\{69C384E5-38E3-4B83-B299-B3DE265723BE}: "URL" = hxxp://rover.ebay.com/rover/1/707-37276-16609-21/4?satitle={searchTerms}

IE - HKU\S-1-5-21-3331342625-628966979-1705653413-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3331342625-628966979-1705653413-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

 
 ========== FireFox ==========

 

FF - prefs.js..browser.startup.homepage: "hxxp://www.google.at/"

FF - user.js - File not found

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF:64bit: - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll ()

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\progra~2\mcafee\msc\npmcsn~1.dll ()

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.3: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.09.12 03:29:17 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 15.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012.09.04 04:11:35 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 15.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK [2012.09.12 03:31:05 | 000,000,000 | ---D | M]

 

[2012.09.04 04:11:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\drea\AppData\Roaming\mozilla\Extensions

[2012.09.05 00:43:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\drea\AppData\Roaming\mozilla\Firefox\Profiles\70atnn5q.default\extensions

[2012.09.04 23:55:12 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions

[2012.09.08 15:20:09 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll

[2012.08.25 04:49:52 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml

[2012.08.25 04:49:52 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

[2012.08.25 04:49:52 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml

[2012.08.25 04:49:52 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml

[2012.08.25 04:49:52 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml

[2012.08.25 04:49:52 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL File not found

O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\Programme\mcafee\msk\mskapbho.dll ()

O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)

O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

O4:64bit: - HKLM..\Run: [Apoint] C:\Programme\Apoint\Apoint.exe (Alps Electric Co., Ltd.)

O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)

O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications)

O4:64bit: - HKLM..\Run: [cAudioFilterAgent] C:\Programme\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Conexant Systems, Inc.)

O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)

O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)

O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)

O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)

O4 - HKLM..\Run: [PMBVolumeWatcher] c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)

O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found

O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16:64bit: - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DE55F963-8D36-4188-AE6E-613878FD1085}: DhcpNameServer = 10.0.0.138

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

O18:64bit: - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Programme\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)

O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~2\mcafee\msc\mcsniepl.dll (McAfee, Inc.)

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 

 

MsConfig:64bit - StartUpReg: Adobe ARM - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)

MsConfig:64bit - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)

 

SafeBootMin:64bit: AppMgmt - Service

SafeBootMin:64bit: Base - Driver Group

SafeBootMin:64bit: Boot Bus Extender - Driver Group

SafeBootMin:64bit: Boot file system - Driver Group

SafeBootMin:64bit: File system - Driver Group

SafeBootMin:64bit: Filter - Driver Group

SafeBootMin:64bit: HelpSvc - Service

SafeBootMin:64bit: mcmscsvc - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)

SafeBootMin:64bit: PCI Configuration - Driver Group

SafeBootMin:64bit: PNP Filter - Driver Group

SafeBootMin:64bit: Primary disk - Driver Group

SafeBootMin:64bit: sacsvr - Service

SafeBootMin:64bit: SCSI Class - Driver Group

SafeBootMin:64bit: System Bus Extender - Driver Group

SafeBootMin:64bit: vmms - Service

SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootMin: AppMgmt - Service

SafeBootMin: Base - Driver Group

SafeBootMin: Boot Bus Extender - Driver Group

SafeBootMin: Boot file system - Driver Group

SafeBootMin: File system - Driver Group

SafeBootMin: Filter - Driver Group

SafeBootMin: HelpSvc - Service

SafeBootMin: MCODS - C:\Programme\mcafee\virusscan\mcods.exe (McAfee, Inc.)

SafeBootMin: PCI Configuration - Driver Group

SafeBootMin: PNP Filter - Driver Group

SafeBootMin: Primary disk - Driver Group

SafeBootMin: sacsvr - Service

SafeBootMin: SCSI Class - Driver Group

SafeBootMin: System Bus Extender - Driver Group

SafeBootMin: vmms - Service

SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

 

SafeBootNet:64bit: AppMgmt - Service

SafeBootNet:64bit: Base - Driver Group

SafeBootNet:64bit: Boot Bus Extender - Driver Group

SafeBootNet:64bit: Boot file system - Driver Group

SafeBootNet:64bit: File system - Driver Group

SafeBootNet:64bit: Filter - Driver Group

SafeBootNet:64bit: HelpSvc - Service

SafeBootNet:64bit: McMPFSvc - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)

SafeBootNet:64bit: mcmscsvc - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)

SafeBootNet:64bit: Messenger - Service

SafeBootNet:64bit: mfefire - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe ()

SafeBootNet:64bit: mfefirek - C:\Windows\SysNative\drivers\mfefirek.sys (McAfee, Inc.)

SafeBootNet:64bit: mfefirek.sys - C:\Windows\SysNative\drivers\mfefirek.sys (McAfee, Inc.)

SafeBootNet:64bit: mfehidk - C:\Windows\SysNative\drivers\mfehidk.sys (McAfee, Inc.)

SafeBootNet:64bit: mfehidk.sys - C:\Windows\SysNative\drivers\mfehidk.sys (McAfee, Inc.)

SafeBootNet:64bit: mfevtp - C:\Windows\SysNative\mfevtps.exe (McAfee, Inc.)

SafeBootNet:64bit: NDIS Wrapper - Driver Group

SafeBootNet:64bit: NetBIOSGroup - Driver Group

SafeBootNet:64bit: NetDDEGroup - Driver Group

SafeBootNet:64bit: Network - Driver Group

SafeBootNet:64bit: NetworkProvider - Driver Group

SafeBootNet:64bit: PCI Configuration - Driver Group

SafeBootNet:64bit: PNP Filter - Driver Group

SafeBootNet:64bit: PNP_TDI - Driver Group

SafeBootNet:64bit: Primary disk - Driver Group

SafeBootNet:64bit: rdsessmgr - Service

SafeBootNet:64bit: sacsvr - Service

SafeBootNet:64bit: SCSI Class - Driver Group

SafeBootNet:64bit: Streams Drivers - Driver Group

SafeBootNet:64bit: System Bus Extender - Driver Group

SafeBootNet:64bit: TDI - Driver Group

SafeBootNet:64bit: vmms - Service

SafeBootNet:64bit: WudfUsbccidDriver - Driver

SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers

SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: AppMgmt - Service

SafeBootNet: Base - Driver Group

SafeBootNet: Boot Bus Extender - Driver Group

SafeBootNet: Boot file system - Driver Group

SafeBootNet: File system - Driver Group

SafeBootNet: Filter - Driver Group

SafeBootNet: HelpSvc - Service

SafeBootNet: MCODS - C:\Programme\mcafee\virusscan\mcods.exe (McAfee, Inc.)

SafeBootNet: Messenger - Service

SafeBootNet: NDIS Wrapper - Driver Group

SafeBootNet: NetBIOSGroup - Driver Group

SafeBootNet: NetDDEGroup - Driver Group

SafeBootNet: Network - Driver Group

SafeBootNet: NetworkProvider - Driver Group

SafeBootNet: PCI Configuration - Driver Group

SafeBootNet: PNP Filter - Driver Group

SafeBootNet: PNP_TDI - Driver Group

SafeBootNet: Primary disk - Driver Group

SafeBootNet: rdsessmgr - Service

SafeBootNet: sacsvr - Service

SafeBootNet: SCSI Class - Driver Group

SafeBootNet: Streams Drivers - Driver Group

SafeBootNet: System Bus Extender - Driver Group

SafeBootNet: TDI - Driver Group

SafeBootNet: vmms - Service

SafeBootNet: WudfUsbccidDriver - Driver

SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers

SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

 

ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)

ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0

ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7

ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings

ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install

ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework

ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework

ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig

ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - 

ActiveX:64bit: >{7B284195-B3C3-4FF2-AF60-24DAC8F5E766} - RunDLL32 IEDKCS32.DLL,BrandIE4 CUSTOM

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0

ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7

ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP

 

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)

 

CREATERESTOREPOINT

System Restore Service not available.

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.09.12 03:30:57 | 000,196,440 | ---- | C] (McAfee, Inc.) -- C:\Windows\SysNative\drivers\HipShieldK.sys

[2012.09.11 21:05:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee

[2012.09.11 20:50:26 | 000,000,000 | R--D | C] -- C:\Users\drea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices

[2012.09.10 23:06:42 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\dvdcss

[2012.09.10 03:11:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

[2012.09.10 03:11:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype

[2012.09.10 03:11:45 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype

[2012.09.09 21:09:52 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Local\{BA182827-5594-4C2A-9D23-32D9486B1D9F}

[2012.09.09 21:03:18 | 000,000,000 | ---D | C] -- C:\Users\drea\Desktop\birthday2012

[2012.09.09 21:02:39 | 000,000,000 | ---D | C] -- C:\Users\drea\Desktop\Cooper

[2012.09.08 15:45:38 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\vlc

[2012.09.08 15:44:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

[2012.09.08 15:43:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN

[2012.09.08 15:42:05 | 000,000,000 | ---D | C] -- C:\Users\drea\Desktop\FixWMP

[2012.09.08 05:42:23 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Local\CrashDumps

[2012.09.07 22:05:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET

[2012.09.07 21:08:20 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\Malwarebytes

[2012.09.07 21:08:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware

[2012.09.07 21:08:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2012.09.07 21:08:05 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys

[2012.09.07 21:08:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware

[2012.09.05 23:35:01 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\skypePM

[2012.09.05 23:28:55 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\Skype

[2012.09.05 05:43:32 | 000,000,000 | ---D | C] -- C:\Users\drea\Desktop\1strun

[2012.09.05 05:43:14 | 000,000,000 | ---D | C] -- C:\Users\drea\Desktop\2ndrun

[2012.09.05 05:24:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

[2012.09.05 05:24:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\7-Zip

[2012.09.05 04:50:37 | 000,600,064 | ---- | C] (OldTimer Tools) -- C:\Users\drea\Desktop\OTL.exe

[2012.09.05 02:53:29 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\Auslogics

[2012.09.05 02:35:31 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Local\Adobe

[2012.09.05 02:00:05 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Local\Macromedia

[2012.09.05 01:53:19 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed

[2012.09.05 01:39:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe

[2012.09.05 01:34:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros

[2012.09.05 01:32:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

[2012.09.05 01:31:52 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight

[2012.09.05 01:31:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight

[2012.09.05 01:29:31 | 002,753,536 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys

[2012.09.05 01:29:31 | 002,753,536 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\athrx.sys

[2012.09.05 01:29:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atheros WiFi Driver Installation

[2012.09.05 01:25:49 | 000,000,000 | -H-D | C] -- C:\SPLASH.SYS

[2012.09.05 01:18:33 | 000,000,000 | ---D | C] -- C:\Users\drea\Desktop\EXTERNE

[2012.09.05 00:25:07 | 000,000,000 | ---D | C] -- C:\Users\drea\Desktop\STUFF

[2012.09.05 00:24:22 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Local\Mozilla

[2012.09.05 00:18:35 | 000,000,000 | ---D | C] -- C:\Update

[2012.09.05 00:17:36 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat

[2012.09.05 00:17:35 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat

[2012.09.04 23:55:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service

[2012.09.04 23:55:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla

[2012.09.04 23:55:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox

[2012.09.04 04:11:59 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\Mozilla

[2012.09.04 04:11:44 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\Thunderbird

[2012.09.04 04:11:44 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Local\Thunderbird

[2012.09.04 04:11:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird

[2012.09.04 04:05:06 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\Adobe

[2012.09.04 04:04:51 | 000,000,000 | ---D | C] -- C:\Program Files\Sony

[2012.09.04 04:03:20 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\winrm

[2012.09.04 04:03:20 | 000,000,000 | ---D | C] -- C:\Windows\de-DE

[2012.09.04 04:03:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\XPSViewer

[2012.09.04 04:03:19 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\winrm

[2012.09.04 04:03:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\WCN

[2012.09.04 04:03:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\UMDF

[2012.09.04 04:03:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sysprep

[2012.09.04 04:03:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\slmgr

[2012.09.04 04:03:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Printing_Admin_Scripts

[2012.09.04 04:03:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\UMDF\de-DE

[2012.09.04 04:03:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\de-DE

[2012.09.04 04:03:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\de

[2012.09.04 04:03:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\0407

[2012.09.04 04:03:18 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\WCN

[2012.09.04 04:03:18 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\slmgr

[2012.09.04 04:03:18 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Printing_Admin_Scripts

[2012.09.04 04:03:18 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\de-DE

[2012.09.04 04:03:18 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\0407

[2012.09.04 04:03:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\de

[2012.09.04 04:02:36 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerId.sys.mui

[2012.09.04 04:02:36 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerIb.sys.mui

[2012.09.04 04:02:35 | 000,004,096 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\SysNative\drivers\de-DE\pscr.sys.mui

[2012.09.04 04:02:35 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrParwdm.sys.mui

[2012.09.04 04:00:50 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Local\BMExplorer

[2012.09.04 04:00:50 | 000,000,000 | ---D | C] -- C:\Users\drea\Documents\Bluetooth Folder

[2012.09.04 04:00:22 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\Intel Corporation

[2012.09.04 04:00:07 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\Atheros

[2012.09.04 03:59:36 | 000,000,000 | R--D | C] -- C:\Users\drea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

[2012.09.04 03:59:36 | 000,000,000 | R--D | C] -- C:\Users\drea\Searches

[2012.09.04 03:59:36 | 000,000,000 | R--D | C] -- C:\Users\drea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

[2012.09.04 03:59:26 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\Identities

[2012.09.04 03:59:24 | 000,000,000 | R--D | C] -- C:\Users\drea\Contacts

[2012.09.04 03:59:21 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Local\VirtualStore

[2012.09.04 03:58:36 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\VAIO Startup Setting Tool

[2012.09.04 03:58:36 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\Sony Corporation

[2012.09.04 03:58:36 | 000,000,000 | ---D | C] -- C:\Windows\pss

[2012.09.04 03:58:00 | 000,000,000 | --SD | C] -- C:\Users\drea\AppData\Roaming\Microsoft

[2012.09.04 03:58:00 | 000,000,000 | R--D | C] -- C:\Users\drea\Videos

[2012.09.04 03:58:00 | 000,000,000 | R--D | C] -- C:\Users\drea\Saved Games

[2012.09.04 03:58:00 | 000,000,000 | R--D | C] -- C:\Users\drea\Pictures

[2012.09.04 03:58:00 | 000,000,000 | R--D | C] -- C:\Users\drea\Music

[2012.09.04 03:58:00 | 000,000,000 | R--D | C] -- C:\Users\drea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

[2012.09.04 03:58:00 | 000,000,000 | R--D | C] -- C:\Users\drea\Links

[2012.09.04 03:58:00 | 000,000,000 | R--D | C] -- C:\Users\drea\Favorites

[2012.09.04 03:58:00 | 000,000,000 | R--D | C] -- C:\Users\drea\Downloads

[2012.09.04 03:58:00 | 000,000,000 | R--D | C] -- C:\Users\drea\Documents

[2012.09.04 03:58:00 | 000,000,000 | R--D | C] -- C:\Users\drea\Desktop

[2012.09.04 03:58:00 | 000,000,000 | R--D | C] -- C:\Users\drea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\Vorlagen

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\AppData\Local\Verlauf

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\AppData\Local\Temporary Internet Files

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\Startmenü

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\SendTo

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\Recent

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\Netzwerkumgebung

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\Lokale Einstellungen

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\Documents\Eigene Videos

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\Documents\Eigene Musik

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\Eigene Dateien

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\Documents\Eigene Bilder

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\Druckumgebung

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\Cookies

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\AppData\Local\Anwendungsdaten

[2012.09.04 03:58:00 | 000,000,000 | -HSD | C] -- C:\Users\drea\Anwendungsdaten

[2012.09.04 03:58:00 | 000,000,000 | -H-D | C] -- C:\Users\drea\AppData

[2012.09.04 03:58:00 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Local\Temp

[2012.09.04 03:58:00 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Local\Microsoft

[2012.09.04 03:58:00 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\Media Center Programs

[2012.09.04 03:58:00 | 000,000,000 | ---D | C] -- C:\Users\drea\AppData\Roaming\Macromedia

[2012.09.04 03:57:45 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen

[2012.09.04 03:57:45 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü

[2012.09.04 03:57:45 | 000,000,000 | -HSD | C] -- C:\Programme

[2012.09.04 03:57:45 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien

[2012.09.04 03:57:45 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten

[2012.09.04 03:57:45 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos

[2012.09.04 03:57:45 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik

[2012.09.04 03:57:45 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder

[2012.09.04 03:57:45 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen

[2012.09.04 03:57:45 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente

[2012.09.04 03:57:45 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten

[2012.09.04 03:53:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros

[2012.09.04 03:51:01 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care

[2012.09.04 03:49:43 | 000,000,000 | ---D | C] -- C:\VAIO Sample Contents

[2012.09.04 03:49:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony

[2012.09.04 03:48:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype

[2012.09.04 03:48:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nascom

[2012.09.04 03:48:17 | 097,167,020 | ---- | C] (Axialis Software) -- C:\Windows\SysNative\VAIO Hero Screensaver - Summer 2011.scr

[2012.09.04 03:46:40 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayStation Extras

[2012.09.04 03:46:12 | 000,000,000 | -H-D | C] -- C:\SPLASH.000

[2012.09.04 03:45:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Downloaded Installations

[2012.09.04 03:41:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0

[2012.09.04 03:41:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMB

[2012.09.04 03:39:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office

[2012.09.04 03:36:03 | 000,212,480 | ---- | C] (Eastman Kodak) -- C:\Windows\SysWow64\PCDLIB32.DLL

[2012.09.04 03:36:00 | 000,055,808 | ---- | C] (ArcSoft, Inc.) -- C:\Windows\System\ArcSoftKsUFilter.dll

[2012.09.04 03:36:00 | 000,019,968 | ---- | C] (ArcSoft, Inc.) -- C:\Windows\SysNative\drivers\ArcSoftKsUFilter.sys

[2012.09.04 03:35:33 | 000,014,112 | ---- | C] (InterVideo) -- C:\Windows\SysNative\drivers\regi.sys

[2012.09.04 03:35:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corel

[2012.09.04 03:35:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InterVideo

[2012.09.04 03:35:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Protexis

[2012.09.04 03:35:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Corel

[2012.09.04 03:35:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Corel

[2012.09.04 03:34:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Webcam Suite

[2012.09.04 03:34:56 | 000,000,000 | ---D | C] -- C:\ProgramData\ArcSoft

[2012.09.04 03:34:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ArcSoft

[2012.09.04 03:34:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ArcSoft

[2012.09.04 03:34:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield

[2012.09.04 03:33:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed

[2012.09.04 03:33:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe

[2012.09.04 03:33:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR

[2012.09.04 03:33:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe

[2012.09.04 03:32:42 | 000,000,000 | ---D | C] -- C:\Windows\en

[2012.09.04 03:31:43 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live

[2012.09.04 03:31:41 | 000,000,000 | ---D | C] -- C:\Windows\uk

[2012.09.04 03:31:39 | 000,000,000 | ---D | C] -- C:\Windows\tr

[2012.09.04 03:31:36 | 000,000,000 | ---D | C] -- C:\Windows\sv

[2012.09.04 03:31:33 | 000,000,000 | ---D | C] -- C:\Windows\sk

[2012.09.04 03:31:30 | 000,000,000 | ---D | C] -- C:\Windows\ru

[2012.09.04 03:31:27 | 000,000,000 | ---D | C] -- C:\Windows\ro

[2012.09.04 03:31:24 | 000,000,000 | ---D | C] -- C:\Windows\pt-pt

[2012.09.04 03:31:21 | 000,000,000 | ---D | C] -- C:\Windows\pl

[2012.09.04 03:31:18 | 000,000,000 | ---D | C] -- C:\Windows\no

[2012.09.04 03:31:15 | 000,000,000 | ---D | C] -- C:\Windows\it

[2012.09.04 03:31:13 | 000,000,000 | ---D | C] -- C:\Windows\hu

[2012.09.04 03:31:10 | 000,000,000 | ---D | C] -- C:\Windows\el

[2012.09.04 03:31:07 | 000,000,000 | ---D | C] -- C:\Windows\de

[2012.09.04 03:31:04 | 000,000,000 | ---D | C] -- C:\Windows\fr

[2012.09.04 03:31:01 | 000,000,000 | ---D | C] -- C:\Windows\fi

[2012.09.04 03:30:58 | 000,000,000 | ---D | C] -- C:\Windows\nl

[2012.09.04 03:30:55 | 000,000,000 | ---D | C] -- C:\Windows\da

[2012.09.04 03:30:52 | 000,000,000 | ---D | C] -- C:\Windows\cs

[2012.09.04 03:30:49 | 000,000,000 | ---D | C] -- C:\Windows\bg

[2012.09.04 03:30:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition

[2012.09.04 03:27:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live

[2012.09.04 03:26:48 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH

[2012.09.04 03:26:45 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live

[2012.09.04 03:26:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Windows Live

[2012.09.04 03:24:42 | 000,000,000 | ---D | C] -- C:\temp

[2012.09.04 03:24:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft

[2012.09.04 03:24:20 | 000,000,000 | ---D | C] -- C:\Documentation

[2012.09.04 03:24:20 | 000,000,000 | ---D | C] -- C:\_FS_SWRINFO

[2012.09.04 03:23:32 | 000,000,000 | ---D | C] -- C:\Windows\Sonysys

[2012.09.04 03:22:15 | 000,010,288 | ---- | C] (McAfee, Inc.) -- C:\Windows\SysNative\drivers\mfeclnk.sys

[2012.09.04 03:22:13 | 000,177,144 | ---- | C] (McAfee, Inc.) -- C:\Windows\SysNative\mfevtps.exe

[2012.09.04 03:22:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\mcafee.com

[2012.09.04 03:22:07 | 000,000,000 | ---D | C] -- C:\Program Files\mcafee.com

[2012.09.04 03:22:07 | 000,000,000 | ---D | C] -- C:\Program Files\mcafee

[2012.09.04 03:22:07 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\mcafee

[2012.09.04 03:22:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\McAfee

[2012.09.04 03:22:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\mcafee

[2012.09.04 03:22:04 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee

[2012.09.04 03:21:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun

[2012.09.04 03:21:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java

[2012.09.04 03:21:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java

[2012.09.04 03:21:27 | 000,000,000 | ---D | C] -- C:\Program Files\Java

[2012.09.04 03:21:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Sony Shared

[2012.09.04 03:21:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Sony Shared

[2012.09.04 03:21:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony

[2012.09.04 03:19:10 | 000,000,000 | ---D | C] -- C:\Program Files\Apoint

[2012.09.04 03:18:56 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sda

[2012.09.04 03:18:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek

[2012.09.04 03:18:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\postureAgent

[2012.09.04 03:18:07 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA

[2012.09.04 03:17:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation

[2012.09.04 03:17:38 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation

[2012.09.04 03:17:23 | 000,067,176 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll

[2012.09.04 03:17:23 | 000,057,960 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll

[2012.09.04 03:17:22 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation

[2012.09.04 03:16:02 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program

[2012.09.04 03:16:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Atheros

[2012.09.04 03:15:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bluetooth Suite

[2012.09.04 03:15:09 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT

[2012.09.04 03:13:51 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel

[2012.09.04 03:13:41 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information

[2012.09.04 03:12:16 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll

[2012.09.04 03:12:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel

[2012.09.04 03:12:13 | 000,000,000 | ---D | C] -- C:\Intel

[2012.09.04 03:12:11 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution

[2012.09.04 03:10:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Corporation

[2012.09.04 03:05:30 | 000,000,000 | -HSD | C] -- C:\System Volume Information

[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.09.13 00:33:04 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\drea\Desktop\OTL.exe

[2012.09.11 20:57:39 | 000,021,200 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2012.09.11 20:57:39 | 000,021,200 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2012.09.11 20:50:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012.09.11 20:49:58 | 3206,959,104 | -HS- | M] () -- C:\hiberfil.sys

[2012.09.10 21:20:57 | 000,512,399 | ---- | M] () -- C:\Users\drea\Desktop\adwcleaner.exe

[2012.09.10 20:59:26 | 000,310,480 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2012.09.10 03:19:30 | 001,591,174 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2012.09.10 03:19:30 | 000,697,068 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2012.09.10 03:19:30 | 000,652,346 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2012.09.10 03:19:30 | 000,148,332 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2012.09.10 03:19:30 | 000,121,278 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2012.09.10 03:19:21 | 001,591,174 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2012.09.09 21:00:21 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf

[2012.09.08 19:11:45 | 000,414,620 | ---- | M] () -- C:\Users\drea\Desktop\Lageplan von Wernsbach.png

[2012.09.08 15:44:24 | 000,001,066 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk

[2012.09.08 15:43:39 | 000,001,182 | ---- | M] () -- C:\Users\drea\Desktop\Startfenster.lnk

[2012.09.08 15:43:18 | 022,757,920 | ---- | M] () -- C:\Users\drea\Desktop\vlc-2.0.3-win32.exe

[2012.09.08 15:41:45 | 000,224,667 | ---- | M] () -- C:\Users\drea\Desktop\FixWMP.zip

[2012.09.07 21:08:07 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012.09.05 23:35:04 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat

[2012.09.05 02:43:06 | 000,016,666 | ---- | M] () -- C:\test.xml

[2012.09.05 01:39:45 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk

[2012.09.05 01:26:18 | 000,000,074 | -H-- | M] () -- C:\splash.idx

[2012.09.05 00:30:06 | 000,000,000 | ---- | M] () -- C:\extensions.sqlite

[2012.09.04 23:55:16 | 000,001,130 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk

[2012.09.04 21:22:41 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf

[2012.09.04 21:22:39 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf

[2012.09.04 04:11:37 | 000,002,086 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk

[2012.09.04 04:03:10 | 000,295,922 | ---- | M] () -- C:\Windows\SysNative\perfi007.dat

[2012.09.04 04:03:10 | 000,038,104 | ---- | M] () -- C:\Windows\SysNative\perfd007.dat

[2012.09.04 04:02:36 | 000,011,776 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerId.sys.mui

[2012.09.04 04:02:36 | 000,011,776 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerIb.sys.mui

[2012.09.04 04:02:35 | 000,004,096 | ---- | M] (SCM Microsystems, Inc.) -- C:\Windows\SysNative\drivers\de-DE\pscr.sys.mui

[2012.09.04 04:02:35 | 000,002,560 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrParwdm.sys.mui

[2012.09.04 04:00:44 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_btath_hcrp_01009.Wdf

[2012.09.04 03:59:17 | 000,000,000 | RH-- | M] () -- C:\Windows\SysWow64\drivers\104D_Sony_VPCEH1M8E.mrk

[2012.09.04 03:59:17 | 000,000,000 | RH-- | M] () -- C:\Windows\SysNative\drivers\104D_Sony_VPCEH1M8E.mrk

[2012.09.04 03:56:56 | 000,159,772 | ---- | M] () -- C:\Windows\SysWow64\license.rtf

[2012.09.04 03:56:56 | 000,159,772 | ---- | M] () -- C:\Windows\SysNative\license.rtf

[2012.09.04 03:50:16 | 000,196,608 | ---- | M] () -- C:\Windows\ocsetup_install_OEMHelpCustomization.etl

[2012.09.04 03:48:18 | 097,167,020 | ---- | M] (Axialis Software) -- C:\Windows\SysNative\VAIO Hero Screensaver - Summer 2011.scr

[2012.09.04 03:36:01 | 000,000,040 | -H-- | M] () -- C:\Windows\SysNative\ivireg.ivr

[2012.09.04 03:19:11 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf

[2012.09.04 03:16:13 | 000,246,804 | ---- | M] () -- C:\Windows\SysNative\drivers\AtherosBt.bin

[2012.09.04 03:16:13 | 000,001,262 | ---- | M] () -- C:\Windows\SysNative\drivers\ramps_0x01020200_26.dfu

[2012.09.04 03:16:13 | 000,001,204 | ---- | M] () -- C:\Windows\SysNative\drivers\ramps_0x01020200_40_0x02.dfu

[2012.09.04 03:16:13 | 000,001,204 | ---- | M] () -- C:\Windows\SysNative\drivers\ramps_0x01020200_40.dfu

[2012.08.31 22:47:03 | 000,335,271 | ---- | M] () -- C:\Users\drea\Desktop\2012_Transfer_Report.pdf

[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2012.09.10 21:20:47 | 000,512,399 | ---- | C] () -- C:\Users\drea\Desktop\adwcleaner.exe

[2012.09.09 21:00:21 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf

[2012.09.08 19:06:30 | 000,414,620 | ---- | C] () -- C:\Users\drea\Desktop\Lageplan von Wernsbach.png

[2012.09.08 15:44:24 | 000,001,066 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk

[2012.09.08 15:43:39 | 000,001,182 | ---- | C] () -- C:\Users\drea\Desktop\Startfenster.lnk

[2012.09.08 15:43:07 | 022,757,920 | ---- | C] () -- C:\Users\drea\Desktop\vlc-2.0.3-win32.exe

[2012.09.08 15:41:38 | 000,224,667 | ---- | C] () -- C:\Users\drea\Desktop\FixWMP.zip

[2012.09.07 21:08:07 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012.09.05 23:35:04 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat

[2012.09.05 01:39:45 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk

[2012.09.05 01:39:45 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk

[2012.09.05 01:29:32 | 000,434,654 | ---- | C] () -- C:\Windows\SysNative\netathrx.inf

[2012.09.05 01:29:31 | 000,066,623 | ---- | C] () -- C:\Windows\SysNative\athrextx.cat

[2012.09.05 01:21:10 | 000,001,814 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music Unlimited.lnk

[2012.09.05 01:18:32 | 000,335,271 | ---- | C] () -- C:\Users\drea\Desktop\2012_Transfer_Report.pdf

[2012.09.05 01:15:44 | 000,016,666 | ---- | C] () -- C:\test.xml

[2012.09.05 00:30:06 | 000,000,000 | ---- | C] () -- C:\extensions.sqlite

[2012.09.05 00:21:22 | 000,001,155 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk

[2012.09.04 23:55:16 | 000,001,142 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

[2012.09.04 23:55:16 | 000,001,130 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk

[2012.09.04 21:22:41 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf

[2012.09.04 21:22:39 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf

[2012.09.04 04:11:37 | 000,002,098 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk

[2012.09.04 04:11:37 | 000,002,086 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk

[2012.09.04 04:03:47 | 000,295,922 | ---- | C] () -- C:\Windows\SysNative\perfi007.dat

[2012.09.04 04:03:46 | 000,697,068 | ---- | C] () -- C:\Windows\SysNative\perfh007.dat

[2012.09.04 04:03:46 | 000,148,332 | ---- | C] () -- C:\Windows\SysNative\perfc007.dat

[2012.09.04 04:03:46 | 000,038,104 | ---- | C] () -- C:\Windows\SysNative\perfd007.dat

[2012.09.04 04:00:44 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_btath_hcrp_01009.Wdf

[2012.09.04 03:59:41 | 000,001,405 | ---- | C] () -- C:\Users\drea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk

[2012.09.04 03:59:37 | 000,001,439 | ---- | C] () -- C:\Users\drea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

[2012.09.04 03:59:17 | 000,000,000 | RH-- | C] () -- C:\Windows\SysWow64\drivers\104D_Sony_VPCEH1M8E.mrk

[2012.09.04 03:59:17 | 000,000,000 | RH-- | C] () -- C:\Windows\SysNative\drivers\104D_Sony_VPCEH1M8E.mrk

[2012.09.04 03:51:19 | 3206,959,104 | -HS- | C] () -- C:\hiberfil.sys

[2012.09.04 03:51:00 | 000,002,017 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care.lnk

[2012.09.04 03:50:30 | 000,002,197 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Smart Network.lnk

[2012.09.04 03:50:02 | 000,196,608 | ---- | C] () -- C:\Windows\ocsetup_install_OEMHelpCustomization.etl

[2012.09.04 03:49:54 | 000,001,275 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Transfer.lnk

[2012.09.04 03:49:20 | 000,002,072 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Gate.lnk

[2012.09.04 03:48:49 | 000,002,679 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Easy Connect.lnk

[2012.09.04 03:48:44 | 000,002,269 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Data Restore Tool.lnk

[2012.09.04 03:46:42 | 000,001,189 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remote Keyboard.lnk

[2012.09.04 03:41:13 | 000,001,139 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMB.lnk

[2012.09.04 03:39:59 | 000,002,435 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk

[2012.09.04 03:37:22 | 000,001,303 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Gallery.lnk

[2012.09.04 03:35:33 | 000,000,040 | -H-- | C] () -- C:\Windows\SysNative\ivireg.ivr

[2012.09.04 03:30:45 | 000,001,305 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk

[2012.09.04 03:30:38 | 000,001,374 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk

[2012.09.04 03:29:28 | 000,001,458 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk

[2012.09.04 03:27:45 | 000,002,486 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk

[2012.09.04 03:24:21 | 000,001,995 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Manual.lnk

[2012.09.04 03:23:57 | 000,001,531 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Control Center.lnk

[2012.09.04 03:19:11 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf

[2012.09.04 03:18:40 | 000,008,192 | ---- | C] () -- C:\Windows\SysNative\drivers\IntelMEFWVer.dll

[2012.09.04 03:17:23 | 000,007,621 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb

[2012.09.04 03:08:05 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk

[2012.09.04 03:08:02 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

[2011.02.11 01:03:27 | 001,591,174 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

 
 ========== LOP Check ==========

 

[2012.09.05 03:36:05 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Auslogics

[2012.09.04 04:11:44 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Thunderbird

[2009.07.14 07:08:49 | 000,008,938 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 
 < %ALLUSERSPROFILE%\Application Data\*. >

 
 < %ALLUSERSPROFILE%\Application Data\*.exe /s >

 
 < %APPDATA%\*. >

[2012.09.05 02:35:31 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Adobe

[2012.09.04 04:00:07 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Atheros

[2012.09.05 03:36:05 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Auslogics

[2012.09.10 23:13:46 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\dvdcss

[2012.09.04 03:59:26 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Identities

[2012.09.04 04:00:22 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Intel Corporation

[2012.09.04 03:33:32 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Macromedia

[2012.09.07 21:08:20 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Malwarebytes

[2011.03.15 04:36:01 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Media Center Programs

[2012.09.05 04:15:19 | 000,000,000 | --SD | M] -- C:\Users\drea\AppData\Roaming\Microsoft

[2012.09.05 00:24:22 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Mozilla

[2012.09.10 08:58:33 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Skype

[2012.09.09 20:45:46 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\skypePM

[2012.09.04 04:00:20 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Sony Corporation

[2012.09.04 04:11:44 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\Thunderbird

[2012.09.11 00:01:16 | 000,000,000 | ---D | M] -- C:\Users\drea\AppData\Roaming\vlc

 
 < %APPDATA%\*.exe /s >

[2012.09.04 03:33:16 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\drea\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe

 
 < %SYSTEMDRIVE%\*.exe >

 
 < MD5 for: AGP440.SYS  >

[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys

[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys

[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

 
 < MD5 for: ATAPI.SYS  >

[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys

[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys

[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

 
 < MD5 for: CNGAUDIT.DLL  >

[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll

[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll

[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

 
 < MD5 for: IASTOR.SYS  >

[2011.04.21 03:15:18 | 000,437,272 | R--- | M] (Intel Corporation) MD5=F7CE9BE72EDAC499B713ECA6DAE5D26F -- C:\Windows\SysNative\drivers\iaStor.sys

[2011.04.21 03:15:18 | 000,437,272 | R--- | M] (Intel Corporation) MD5=F7CE9BE72EDAC499B713ECA6DAE5D26F -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_2b0c50dc63f09dae\iaStor.sys

[2011.04.21 03:15:18 | 000,437,272 | R--- | M] (Intel Corporation) MD5=F7CE9BE72EDAC499B713ECA6DAE5D26F -- C:\Windows\SysNative\DriverStore\FileRepository\iastor.inf_amd64_neutral_5b314ccea0aa569d\iaStor.sys

 
 < MD5 for: IASTORV.SYS  >

[2010.11.21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys

[2010.11.21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys

[2011.03.11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys

[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys

[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys

[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys

 
 < MD5 for: NETLOGON.DLL  >

[2010.11.21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll

[2010.11.21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll

[2010.11.21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll

[2010.11.21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll

 
 < MD5 for: NVSTOR.SYS  >

[2011.03.11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys

[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys

[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys

[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys

[2010.11.21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys

[2010.11.21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

 
 < MD5 for: SCECLI.DLL  >

[2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll

[2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll

[2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll

[2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

 
 < MD5 for: USER32.DLL  >

[2010.11.21 05:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll

[2010.11.21 05:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll

[2010.11.21 05:24:09 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll

[2010.11.21 05:24:09 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll

 
 < MD5 for: USERINIT.EXE  >

[2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe

[2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

[2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe

[2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

 
 < MD5 for: WININIT.EXE  >

[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe

[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe

[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe

[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

 
 < MD5 for: WINLOGON.EXE  >

[2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe

[2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe

[2012.07.03 13:46:42 | 000,217,672 | ---- | M] () MD5=8A7F34F0BBD076EC3815680A7309114F -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe

 
 < MD5 for: WS2IFSL.SYS  >

[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys

[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys

 
 < %systemroot%\system32\drivers\*.sys /lockedfiles >

 
 < %systemroot%\System32\config\*.sav >

 
 < %systemroot%\*. /mp /s >

 
 < %systemroot%\system32\*.dll /lockedfiles >

 
 <           >
 

< End of report >

--- --- ---

aso... ich sollte vielleicht sagen das windows media player sich gar nicht erst öffnen lässt.

Hattest du McAfee deinstalliert und den Rechner zwischenzeitlich noch nicht neu gestartet?

ich habe mcaffe immer noch installiert, aber gerade ein update gemacht. meinen laptop schalte ich selten aus. meistens ist er auf standby. ausser eben es fordert mich auf ein update zu machen.

Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:

:OTL

FF - user.js - File not found

O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found

O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

:Files

C:\Users\drea\AppData\Local\{*

ipconfig /flushdns /c

:Commands

[purity]

[emptytemp]

[resethosts]

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

Code:

All processes killed

========== OTL ==========

Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.

Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.

========== FILES ==========

C:\Users\drea\AppData\Local\{BA182827-5594-4C2A-9D23-32D9486B1D9F} folder moved successfully.
 < ipconfig /flushdns /c >

Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

C:\Users\drea\Desktop\cmd.bat deleted successfully.

C:\Users\drea\Desktop\cmd.txt deleted successfully.

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: All Users

 

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 56502 bytes

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

 

User: drea

->Temp folder emptied: 50781128 bytes

->Temporary Internet Files folder emptied: 3563335 bytes

->FireFox cache emptied: 1120023135 bytes

->Flash cache emptied: 72989 bytes

 

User: Public

 

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32 (64bit) .tmp files removed: 1721576 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 63656225 bytes

%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 107340 bytes

RecycleBin emptied: 0 bytes

 

Total Files Cleaned = 1.183,00 mb

 

C:\Windows\System32\drivers\etc\Hosts moved successfully.

HOSTS file reset successfully

 

OTL by OldTimer - Version 3.2.61.3 log created on 09142012_205021
 

Files\Folders moved on Reboot...

C:\Users\drea\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

File\Folder C:\Users\drea\AppData\Local\Temp\~DF135684050DEB7BF2.TMP not found!

File\Folder C:\Users\drea\AppData\Local\Temp\~DF2B50595A0954AEFF.TMP not found!

File\Folder C:\Users\drea\AppData\Local\Temp\~DF622D131E7B098B26.TMP not found!

File\Folder C:\Users\drea\AppData\Local\Temp\~DF7D835D867B3AC2EE.TMP not found!

File\Folder C:\Users\drea\AppData\Local\Temp\~DF83DD1871CB38B88A.TMP not found!

File\Folder C:\Users\drea\AppData\Local\Temp\~DF882AA083B854BBC7.TMP not found!

File\Folder C:\Users\drea\AppData\Local\Temp\~DFA6AD0AD116D9DBFD.TMP not found!

File\Folder C:\Users\drea\AppData\Local\Temp\~DFEFD34806B047F4B9.TMP not found!
 

PendingFileRenameOperations files...
 

Registry entries deleted on Reboot...

Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtg4nzy0ywy5/settings_2012-09-04.png

Die log war zu groß um ins das codebox zu geben.. hoffe das es so auch passt ?

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

Lade dir ComboFix hier herunter auf deinen Desktop.

Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

Code:

ComboFix 12-09-16.01 - drea 17.09.2012  20:50:42.1.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.43.1031.18.4078.2688 [GMT 2:00]

ausgeführt von:: c:\users\drea\Desktop\ComboFix.exe

AV: McAfee  Anti-Virus und Anti-Spyware *Disabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}

FW: McAfee  Firewall *Disabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}

SP: McAfee  Anti-Virus und Anti-Spyware *Disabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-08-17 bis 2012-09-17  ))))))))))))))))))))))))))))))

.

.

2012-09-17 18:56 . 2012-09-17 18:56        --------        d-----w-        c:\users\Default\AppData\Local\temp

2012-09-14 18:52 . 2012-08-27 23:49        9310152        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{98698291-72CF-403A-826B-D5128FA81FA0}\mpengine.dll

2012-09-14 18:50 . 2012-09-14 18:50        --------        d-----w-        C:\_OTL

2012-09-12 17:59 . 2012-08-22 18:12        950128        ----a-w-        c:\windows\system32\drivers\ndis.sys

2012-09-12 17:59 . 2012-07-04 20:26        41472        ----a-w-        c:\windows\system32\drivers\RNDISMP.sys

2012-09-12 17:59 . 2012-08-02 17:58        574464        ----a-w-        c:\windows\system32\d3d10level9.dll

2012-09-12 17:59 . 2012-08-02 16:57        490496        ----a-w-        c:\windows\SysWow64\d3d10level9.dll

2012-09-12 17:59 . 2012-08-22 18:12        1913200        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2012-09-12 17:59 . 2012-08-22 18:12        376688        ----a-w-        c:\windows\system32\drivers\netio.sys

2012-09-12 17:59 . 2012-08-22 18:12        288624        ----a-w-        c:\windows\system32\drivers\FWPKCLNT.SYS

2012-09-12 01:30 . 2012-04-20 14:40        196440        ----a-w-        c:\windows\system32\drivers\HipShieldK.sys

2012-09-10 01:19 . 2012-07-06 20:07        552960        ----a-w-        c:\windows\system32\drivers\bthport.sys

2012-09-10 01:11 . 2012-09-10 01:11        --------        d-----w-        c:\program files (x86)\Common Files\Skype

2012-09-10 01:11 . 2012-09-10 01:11        --------        d-----r-        c:\program files (x86)\Skype

2012-09-09 23:26 . 2011-03-12 12:08        1465344        ----a-w-        c:\windows\system32\XpsPrint.dll

2012-09-08 13:43 . 2012-09-08 13:43        --------        d-----w-        c:\program files (x86)\VideoLAN

2012-09-07 20:05 . 2012-09-07 20:05        --------        d-----w-        c:\program files (x86)\ESET

2012-09-07 19:08 . 2012-09-07 19:08        --------        d-----w-        c:\programdata\Malwarebytes

2012-09-07 19:08 . 2012-09-07 19:08        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2012-09-07 19:08 . 2012-07-03 11:46        24904        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-09-05 03:24 . 2012-09-05 03:24        --------        d-----w-        c:\program files (x86)\7-Zip

2012-09-04 23:53 . 2012-09-04 23:53        73416        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-09-04 23:53 . 2012-09-04 23:53        696520        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2012-09-04 23:53 . 2012-09-04 23:53        --------        d-----w-        c:\windows\system32\Macromed

2012-09-04 23:39 . 2012-09-04 23:39        --------        d-----w-        c:\program files (x86)\Common Files\Adobe

2012-09-04 23:34 . 2012-09-04 23:34        --------        d-----w-        c:\programdata\Qualcomm Atheros

2012-09-04 23:31 . 2012-09-04 23:31        --------        d-----w-        c:\program files\Microsoft Silverlight

2012-09-04 23:31 . 2012-09-04 23:31        --------        d-----w-        c:\program files (x86)\Microsoft Silverlight

2012-09-04 23:29 . 2011-06-20 23:03        2753536        ----a-w-        c:\windows\system32\drivers\athrx.sys

2012-09-04 23:29 . 2011-06-20 23:03        2753536        ----a-w-        c:\windows\system32\athrx.sys

2012-09-04 23:29 . 2012-09-04 23:30        --------        d-----w-        c:\program files (x86)\Atheros WiFi Driver Installation

2012-09-04 23:25 . 2012-09-04 23:25        --------        d-----w-        C:\SPLASH.SYS

2012-09-04 22:20 . 2011-04-28 03:54        80384        ----a-w-        c:\windows\system32\drivers\BTHUSB.SYS

2012-09-04 22:18 . 2012-09-05 23:56        --------        d-----w-        C:\Update

2012-09-04 22:17 . 2012-09-04 22:17        --------        d-----w-        c:\windows\SysWow64\Wat

2012-09-04 22:17 . 2012-09-04 22:17        --------        d-----w-        c:\windows\system32\Wat

2012-09-04 21:55 . 2012-09-10 18:58        --------        d-----w-        c:\program files (x86)\Mozilla Maintenance Service

2012-09-04 21:49 . 2012-09-04 21:49        --------        d-----w-        c:\windows\SysWow64\wbem\en-US

2012-09-04 21:49 . 2012-09-04 21:49        --------        d-----w-        c:\windows\system32\wbem\en-US

2012-09-04 19:25 . 2010-02-23 08:16        294912        ----a-w-        c:\windows\system32\browserchoice.exe

2012-09-04 19:10 . 2012-03-01 06:46        23408        ----a-w-        c:\windows\system32\drivers\fs_rec.sys

2012-09-04 19:10 . 2012-03-01 06:33        81408        ----a-w-        c:\windows\system32\imagehlp.dll

2012-09-04 19:10 . 2012-03-01 05:33        159232        ----a-w-        c:\windows\SysWow64\imagehlp.dll

2012-09-04 19:10 . 2012-03-01 06:38        220672        ----a-w-        c:\windows\system32\wintrust.dll

2012-09-04 19:10 . 2012-03-01 06:28        5120        ----a-w-        c:\windows\system32\wmi.dll

2012-09-04 19:10 . 2012-03-01 05:37        172544        ----a-w-        c:\windows\SysWow64\wintrust.dll

2012-09-04 19:10 . 2012-03-01 05:29        5120        ----a-w-        c:\windows\SysWow64\wmi.dll

2012-09-04 19:07 . 2012-09-13 01:00        64462936        ----a-w-        c:\windows\system32\MRT.exe

2012-09-04 19:05 . 2011-10-15 06:31        723456        ----a-w-        c:\windows\system32\EncDec.dll

2012-09-04 19:05 . 2011-10-15 05:38        534528        ----a-w-        c:\windows\SysWow64\EncDec.dll

2012-09-04 19:05 . 2011-11-05 05:32        2048        ----a-w-        c:\windows\system32\tzres.dll

2012-09-04 19:05 . 2011-11-05 04:26        2048        ----a-w-        c:\windows\SysWow64\tzres.dll

2012-09-04 19:03 . 2011-02-12 11:34        267776        ----a-w-        c:\windows\system32\FXSCOVER.exe

2012-09-04 19:03 . 2011-11-17 06:41        1731920        ----a-w-        c:\windows\system32\ntdll.dll

2012-09-04 19:03 . 2011-11-17 05:38        1292080        ----a-w-        c:\windows\SysWow64\ntdll.dll

2012-09-04 18:59 . 2012-03-31 05:42        1732096        ----a-w-        c:\program files\Windows Journal\NBDoc.DLL

2012-09-04 18:59 . 2012-03-31 05:40        1367552        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\journal.dll

2012-09-04 18:59 . 2012-03-31 04:29        936960        ----a-w-        c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll

2012-09-04 18:59 . 2012-03-31 05:40        1402880        ----a-w-        c:\program files\Windows Journal\JNWDRV.dll

2012-09-04 18:59 . 2012-03-31 05:40        1393664        ----a-w-        c:\program files\Windows Journal\JNTFiltr.dll

2012-09-04 18:59 . 2011-11-19 14:58        77312        ----a-w-        c:\windows\system32\packager.dll

2012-09-04 18:59 . 2011-11-19 14:01        67072        ----a-w-        c:\windows\SysWow64\packager.dll

2012-09-04 18:35 . 2012-02-17 06:38        1031680        ----a-w-        c:\windows\system32\rdpcore.dll

2012-09-04 18:35 . 2012-02-17 05:34        826880        ----a-w-        c:\windows\SysWow64\rdpcore.dll

2012-09-04 18:35 . 2012-02-17 04:57        23552        ----a-w-        c:\windows\system32\drivers\tdtcp.sys

2012-09-04 18:32 . 2012-06-02 22:19        2428952        ----a-w-        c:\windows\system32\wuaueng.dll

2012-09-04 18:32 . 2012-06-02 22:19        57880        ----a-w-        c:\windows\system32\wuauclt.exe

2012-09-04 18:32 . 2012-06-02 22:19        44056        ----a-w-        c:\windows\system32\wups2.dll

2012-09-04 18:32 . 2012-06-02 22:15        2622464        ----a-w-        c:\windows\system32\wucltux.dll

2012-09-04 18:31 . 2012-06-02 22:19        38424        ----a-w-        c:\windows\system32\wups.dll

2012-09-04 18:31 . 2012-06-02 22:19        701976        ----a-w-        c:\windows\system32\wuapi.dll

2012-09-04 18:31 . 2012-06-02 22:15        99840        ----a-w-        c:\windows\system32\wudriver.dll

2012-09-04 18:31 . 2012-06-02 13:19        186752        ----a-w-        c:\windows\system32\wuwebv.dll

2012-09-04 18:31 . 2012-06-02 13:15        36864        ----a-w-        c:\windows\system32\wuapp.exe

2012-09-04 02:11 . 2012-09-13 23:18        --------        d-----w-        c:\program files (x86)\Mozilla Thunderbird

2012-09-04 02:04 . 2012-09-04 22:20        --------        d-----w-        c:\program files\Sony

2012-09-04 02:04 . 2011-04-21 01:15        437272        ----a-r-        c:\windows\system32\drivers\iaStor.sys

2012-09-04 02:02 . 2012-09-04 02:02        3584        ----a-w-        c:\windows\system32\Spool\prtprocs\x64\de-DE\LXKPTPRC.DLL.mui

2012-09-04 01:58 . 2012-09-04 01:58        --------        d-----w-        c:\windows\SysWow64\VAIO Startup Setting Tool

2012-09-04 01:58 . 2012-09-10 21:05        --------        d-----w-        c:\users\drea

2012-09-04 01:53 . 2012-09-04 23:27        --------        d-----w-        c:\programdata\Atheros

2012-09-04 01:49 . 2012-09-04 01:49        --------        d-----w-        C:\VAIO Sample Contents

2012-09-04 01:48 . 2012-09-10 01:11        --------        d-----w-        c:\programdata\Skype

2012-09-04 01:48 . 2012-09-04 01:48        --------        d-----w-        c:\program files (x86)\Nascom

2012-09-04 01:48 . 2012-09-04 01:48        97167020        ----a-w-        c:\windows\system32\VAIO Hero Screensaver - Summer 2011.scr

2012-09-04 01:46 . 2009-09-04 15:29        1892184        ----a-w-        c:\windows\SysWow64\D3DX9_42.dll

2012-09-04 01:46 . 2009-09-04 15:29        2475352        ----a-w-        c:\windows\system32\D3DX9_42.dll

2012-09-04 01:46 . 2012-09-04 01:46        --------        d-----w-        C:\SPLASH.000

2012-09-04 01:45 . 2012-09-04 23:25        --------        d-----w-        c:\program files (x86)\Downloaded Installations

2012-09-04 01:41 . 2012-09-04 01:41        --------        d-----w-        c:\program files (x86)\MSXML 4.0

2012-09-04 01:41 . 2007-07-19 16:14        5073256        ----a-w-        c:\windows\system32\d3dx9_35.dll

2012-09-04 01:41 . 2006-03-31 10:41        3927248        ----a-w-        c:\windows\system32\d3dx9_30.dll

2012-09-04 01:37 . 2010-06-02 02:55        77656        ----a-w-        c:\windows\system32\XAPOFX1_5.dll

2012-09-04 01:36 . 2003-03-18 20:14        499712        ----a-r-        c:\windows\SysWow64\msvcp71.dll

2012-09-04 01:36 . 2003-02-21 02:42        348160        ----a-w-        c:\windows\SysWow64\msvcr71.dll

2012-09-04 01:36 . 1995-07-31 11:44        212480        ----a-w-        c:\windows\SysWow64\PCDLIB32.DLL

2012-09-04 01:36 . 2009-05-26 12:32        19968        ----a-w-        c:\windows\system32\drivers\ArcSoftKsUFilter.sys

2012-09-04 01:36 . 2008-09-04 15:06        55808        ----a-w-        c:\windows\system\ArcSoftKsUFilter.dll

2012-09-04 01:35 . 2005-04-27 14:36        245408        ----a-w-        c:\windows\SysWow64\unicows.dll

2012-09-04 01:35 . 2007-04-17 09:51        14112        ----a-w-        c:\windows\system32\drivers\regi.sys

2012-09-04 01:35 . 2012-09-04 01:35        --------        d-----w-        c:\program files (x86)\Common Files\InterVideo

2012-09-04 01:35 . 2012-09-04 01:35        --------        d-----w-        c:\program files (x86)\Common Files\Protexis

2012-09-04 01:35 . 2012-09-04 01:35        --------        d-----w-        c:\programdata\Corel

2012-09-04 01:35 . 2012-09-04 01:35        --------        d-----w-        c:\program files (x86)\Corel

2012-09-04 01:34 . 2012-09-16 21:50        --------        d-----w-        c:\programdata\ArcSoft

2012-09-04 01:34 . 2012-09-04 01:35        --------        d-----w-        c:\program files (x86)\ArcSoft

2012-09-04 01:34 . 2012-09-04 01:34        --------        d-----w-        c:\program files (x86)\Common Files\ArcSoft

2012-09-04 01:34 . 2012-09-04 01:34        --------        d-----w-        c:\program files (x86)\Common Files\InstallShield

2012-09-04 01:33 . 2012-09-04 01:33        --------        d-----w-        c:\windows\SysWow64\Macromed

2012-09-04 01:33 . 2012-09-04 01:33        --------        d-----w-        c:\program files (x86)\Common Files\Adobe AIR

2012-09-04 01:32 . 2012-09-04 01:32        --------        d-----w-        c:\windows\en

2012-09-04 01:30 . 2012-09-04 01:30        --------        d-----w-        c:\windows\nl

2012-09-04 01:30 . 2012-09-04 01:30        --------        d-----w-        c:\windows\da

2012-09-04 01:30 . 2012-09-04 01:30        --------        d-----w-        c:\windows\cs

2012-09-04 01:30 . 2012-09-04 01:30        --------        d-----w-        c:\windows\bg

2012-09-04 01:30 . 2012-09-04 01:30        --------        d-----w-        c:\program files (x86)\Microsoft SQL Server Compact Edition

2012-09-04 01:27 . 2012-09-04 01:32        --------        d-----w-        c:\program files (x86)\Windows Live

2012-09-04 01:26 . 2012-09-04 01:26        --------        d-----w-        c:\windows\PCHEALTH

2012-09-04 01:26 . 2012-09-04 01:26        --------        d-----w-        c:\program files\Windows Live

2012-09-04 01:26 . 2009-09-04 15:44        69464        ----a-w-        c:\windows\SysWow64\XAPOFX1_3.dll

2012-09-04 01:26 . 2009-09-04 15:44        515416        ----a-w-        c:\windows\SysWow64\XAudio2_5.dll

2012-09-04 01:26 . 2009-09-04 15:29        453456        ----a-w-        c:\windows\SysWow64\d3dx10_42.dll

2012-09-04 01:26 . 2009-09-04 15:29        523088        ----a-w-        c:\windows\system32\d3dx10_42.dll

2012-09-04 01:26 . 2006-11-29 11:06        4398360        ----a-w-        c:\windows\system32\d3dx9_32.dll

2012-09-04 01:26 . 2006-11-29 11:06        3426072        ----a-w-        c:\windows\SysWow64\d3dx9_32.dll

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-09-04 18:29 . 2010-06-24 09:33        19720        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2012-09-04 02:02 . 2012-09-04 02:02        2560        ----a-w-        c:\windows\SysWow64\drivers\de-DE\qwavedrv.sys.mui

2012-09-04 02:02 . 2012-09-04 02:02        5632        ----a-w-        c:\windows\SysWow64\drivers\de-DE\ndiscap.sys.mui

2012-09-04 02:02 . 2012-09-04 02:02        2560        ----a-w-        c:\windows\SysWow64\drivers\de-DE\scfilter.sys.mui

2012-09-04 02:02 . 2012-09-04 02:02        51712        ----a-w-        c:\windows\SysWow64\drivers\de-DE\tcpip.sys.mui

2012-09-04 02:02 . 2012-09-04 02:02        29696        ----a-w-        c:\windows\SysWow64\drivers\de-DE\bfe.dll.mui

2012-09-04 02:02 . 2012-09-04 02:02        16896        ----a-w-        c:\windows\SysWow64\drivers\de-DE\pacer.sys.mui

2012-06-25 14:04 . 2012-06-25 14:04        1394248        ----a-w-        c:\windows\SysWow64\msxml4.dll

2012-06-22 05:40 . 2010-10-13 20:28        69672        ----a-w-        c:\windows\system32\drivers\cfwids.sys

2012-06-22 05:38 . 2010-10-13 20:28        335784        ----a-w-        c:\windows\system32\drivers\mfewfpk.sys

2012-06-22 05:36 . 2010-10-13 20:28        106112        ----a-w-        c:\windows\system32\drivers\mferkdet.sys

2012-06-22 05:36 . 2010-10-13 20:28        752672        ----a-w-        c:\windows\system32\drivers\mfehidk.sys

2012-06-22 05:35 . 2010-10-13 20:28        513456        ----a-w-        c:\windows\system32\drivers\mfefirek.sys

2012-06-22 05:34 . 2010-10-13 20:28        300392        ----a-w-        c:\windows\system32\drivers\mfeavfk.sys

2012-06-22 05:34 . 2010-10-13 20:28        169320        ----a-w-        c:\windows\system32\drivers\mfeapfk.sys

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-09-13 283160]

"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-06-21 1527896]

"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2011-02-15 2757312]

"PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2010-11-26 648032]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]

"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages        REG_MULTI_SZ           kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

R2 0305921347413284mcinstcleanup;McAfee Application Installer Cleanup (0305921347413284);c:\windows\TEMP\030592~1.EXE [x]

R2 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]

R3 DCDhcpService;DCDhcpService;c:\program files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [2011-07-19 104096]

R3 e1yexpress;Intel(R) Gigabit Network Connections Driver;c:\windows\system32\DRIVERS\e1y60x64.sys [2009-06-10 281088]

R3 HipShieldK;McAfee Inc. HipShieldK;c:\windows\system32\drivers\HipShieldK.sys [2012-04-20 196440]

R3 McAWFwk;McAfee Activation Service;c:\progra~1\mcafee\msc\mcawfwk.exe [2010-08-09 220528]

R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2012-06-22 106112]

R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-08 114144]

R3 SOHCImp;VAIO Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2011-02-21 113824]

R3 SOHDs;VAIO Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2011-02-21 67232]

R3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [2011-01-20 286936]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

R3 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2011-01-20 887000]

R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2011-02-18 546608]

R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2011-02-18 385336]

R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2011-02-18 99104]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2012-09-04 1255736]

R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-05-11 200728]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2012-06-22 335784]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]

S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2011-03-31 146592]

S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2011-03-31 75936]

S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-13 13336]

S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-03-29 2361344]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]

S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-05-11 200728]

S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-05-11 200728]

S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2012-06-22 218320]

S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2012-06-22 177144]

S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2010-11-26 398176]

S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-17 14112]

S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe [2011-01-29 259192]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-02-18 378472]

S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2011-02-23 105024]

S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]

S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2011-02-28 852160]

S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-26 19968]

S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2011-03-31 36000]

S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2011-03-31 259232]

S3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys [2011-03-31 109216]

S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2011-03-31 29344]

S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2011-03-31 166048]

S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2011-03-31 59040]

S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2011-03-31 283296]

S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2011-03-31 287392]

S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2012-06-22 69672]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]

S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]

S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2012-06-22 513456]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2011-03-29 173160]

S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-03-29 335464]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-03-29 425064]

S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2010-04-26 12032]

S3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe [2011-02-14 44736]

S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update Common\VUAgent.exe [2012-01-13 1256040]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*Deregistered* - mfeavfk01

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2011-03-29 518784]

"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-03-31 790176]

"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-03-31 657056]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.startfenster.com

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = <local>

TCP: DhcpNameServer = 10.0.0.138

FF - ProfilePath - c:\users\drea\AppData\Roaming\Mozilla\Firefox\Profiles\70atnn5q.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.at/

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

SafeBoot-98902903.sys

HKLM-Run-Apoint - c:\program files (x86)\Apoint\Apoint.exe

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SampleCollector]

"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=5000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\% C3 Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]

@="?????????????????? v1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]

@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]

@="?????????????????? v2"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]

@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]

"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2012-09-17  20:59:16

ComboFix-quarantined-files.txt  2012-09-17 18:59

.

Vor Suchlauf: 13 Verzeichnis(se), 514.742.919.168 Bytes frei

Nach Suchlauf: 17 Verzeichnis(se), 514.454.839.296 Bytes frei

.

- - End Of File - - E26DCB6180CA38CBD9F6D7F9D491D12F

Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte

aswMBR.exe und speichere die Datei auf deinem Desktop.

Starte die aswMBR.exe - (aswMBR.exe Anleitung)
Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS-Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).

Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

GMER Logfile:

Code:

GMER 1.0.15.15641 - hxxp://www.gmer.net

Rootkit scan 2012-09-21 17:52:36

Windows 6.1.7601 Service Pack 1 

Running: q3uvlhqy.exe
 
 

---- Registry - GMER 1.0.15 ----
 

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\90004eb9de9e                      

Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\90004eb9de9e (not active ControlSet)  
 

---- EOF - GMER 1.0.15 ----

--- --- ---

Code:

Report of OSAM: Autorun Manager v5.0.11926.0

hxxp://www.online-solutions.ru/en/

Saved at 18:01:06 on 21.09.2012
 

OS: Windows 7 Home Premium Edition Service Pack 1 (Build 7601), 64-bit

Default Browser: Mozilla Corporation Firefox 15.0.1
 

Scanner Settings

[x] Rootkits detection (hidden registry)

[x] Rootkits detection (hidden files)

[x] Retrieve files information

[x] Check Microsoft signatures
 

Filters

[ ] Trusted entries

[ ] Empty entries

[x] Hidden registry entries (rootkit activity)

[x] Exclusively opened files

[x] Not found files

[x] Files without detailed information

[x] Existing files

[ ] Non-startable services

[ ] Non-startable drivers

[x] Active entries

[x] Disabled entries
 
 

[Drivers]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"MBAMProtector" (MBAMProtector) - "Malwarebytes Corporation" - C:\Windows\system32\drivers\mbam.sys

"McAfee Inc." (mfeavfk01) - ? - C:\Windows\system32\drivers\mfeavfk01.sys  (File not found)

"regi" (regi) - "InterVideo" - C:\Windows\system32\drivers\regi.sys
 

[Explorer]

-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----

{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll

-----( HKLM\Software\Classes\Protocols\Filter )-----

{3EF5086B-5478-4598-A054-786C45D75692} "McInternetProtocolRoot Class" - "McAfee, Inc." - c:\progra~2\mcafee\msc\mcsniepl.dll

-----( HKLM\Software\Classes\Protocols\Handler )-----

{E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} "Album Download IE Asynchronous Pluggable Protocol Interface" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

{828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll

{828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll

{03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----

{23170F69-40C1-278A-1000-000100020000} "7-Zip Shell Extension" - "Igor Pavlov" - C:\Program Files (x86)\7-Zip\7-zip.dll

{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe

{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe

{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll

{00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll

{00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll

{00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe

{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll

{0563DB41-F538-4B37-A92D-4659049B7766} "WLMD Message Handler" - ? -   (File not found | COM-object registry key not found)

{06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe
 

[Internet Explorer]

-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----

ITBar7Height "ITBar7Height" - ? -   (File not found | COM-object registry key not found)

<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)

-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----

{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_22" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} "Java Plug-in 1.6.0_22" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_22" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\npjpi160_22.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----

{5F7B1267-94A9-47F5-98DB-E99415F33AEC} "@C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} "ClsidExtension" - "Atheros Commnucations" - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----

{8dcb7100-df86-4384-8842-8fa844297b3f} "Bing Bar" - "Microsoft Corporation." - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----

{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

{d2ce3e00-f94a-4740-988e-03dc2f38c34f} "Bing Bar Helper" - "Microsoft Corporation." - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll

{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} "CIESpeechBHO Class" - "Atheros Commnucations" - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

{27B4851A-3207-45A2-B947-BE8AFE6163AB} "McAfee Phishing Filter" - ? - c:\progra~1\mcafee\msk\mskapbho.dll

{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live ID-Anmelde-Hilfsprogramm" - "Microsoft Corp." - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
 

[LSA Providers]

-----( HKLM\SYSTEM\CurrentControlSet\Control\Lsa )-----

"Security Packages" - "Microsoft Corp." - C:\Windows\system32\livessp.dll
 

[Logon]

-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"desktop.ini" - ? - C:\Users\drea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----

"StartupPrograms" - ? - rdpclip  (File not found)

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----

"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"IAStorIcon" - "Intel Corporation" - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

"ISBMgr.exe" - ? - "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"

"Malwarebytes' Anti-Malware" - "Malwarebytes Corporation" - "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

"mcui_exe" - "McAfee, Inc." - "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey

"PMBVolumeWatcher" - "Sony Corporation" - c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
 

[Services]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103" (WinDefend) - ? - C:\Program Files (x86)\Windows Defender\mpsvc.dll  (File not found)

"@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101" (WMPNetworkSvc) - ? - "C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe"  (File not found)

"Adobe Acrobat Update Service" (AdobeARMservice) - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

"ArcSoft Connect Daemon" (ACDaemon) - "ArcSoft Inc." - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

"ASP.NET-Zustandsdienst" (aspnet_state) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

"Atheros Bt&Wlan Coex Agent" (Atheros Bt&Wlan Coex Agent) - "Atheros" - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

"AtherosSvc" (AtherosSvc) - "Atheros Commnucations" - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

"BBUpdate" (BBUpdate) - "Microsoft Corporation" - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

"Bing Bar Update Service" (BBSvc) - "Microsoft Corporation." - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE

"CamMonitor" (uCamMonitor) - "ArcSoft, Inc." - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe

"DCDhcpService" (DCDhcpService) - "Atheros Communication Inc." - C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe

"IconMan_R" (IconMan_R) - "Realsil Microelectronics Inc." - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

"Intel(R) Management and Security Application Local Management Service" (LMS) - "Intel Corporation" - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

"Intel(R) Management and Security Application User Notification Service" (UNS) - "Intel Corporation" - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

"Intel(R) Rapid Storage Technology" (IAStorDataMgrSvc) - "Intel Corporation" - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

"IviRegMgr" (IviRegMgr) - "InterVideo" - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe

"MBAMService" (MBAMService) - "Malwarebytes Corporation" - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

"McAfee Activation Service" (McAWFwk) - "McAfee, Inc." - c:\PROGRA~1\mcafee\msc\mcawfwk.exe

"McAfee Anti-Spam Service" (MSK80Service) - "McAfee, Inc." - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

"McAfee Application Installer Cleanup (0222141348173330)" (0222141348173330mcinstcleanup) - "McAfee, Inc." - C:\Windows\TEMP\022214~1.EXE

"McAfee Firewall Core Service" (mfefire) - "McAfee, Inc." - C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

"McAfee McShield" (McShield) - "McAfee, Inc." - C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe

"McAfee Network Agent" (McNASvc) - "McAfee, Inc." - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

"McAfee Personal Firewall Service" (McMPFSvc) - "McAfee, Inc." - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

"McAfee Proxy Service" (McProxy) - "McAfee, Inc." - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

"McAfee Scanner" (McODS) - "McAfee, Inc." - C:\Program Files\mcafee\VirusScan\mcods.exe

"McAfee Services" (mcmscsvc) - "McAfee, Inc." - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

"McAfee Validation Trust Protection Service" (mfevtp) - "McAfee, Inc." - C:\Windows\system32\mfevtps.exe

"McAfee VirusScan Announcer" (McNaiAnn) - "McAfee, Inc." - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

"Microsoft .NET Framework NGEN v4.0.30319_X64" (clr_optimization_v4.0.30319_64) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

"Mozilla Maintenance Service" (MozillaMaintenance) - "Mozilla Foundation" - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

"NVIDIA Driver Helper Service" (NVSvc) - "NVIDIA Corporation" - C:\Windows\system32\nvvsvc.exe

"NVIDIA Stereoscopic 3D Driver Service" (Stereo Service) - "NVIDIA Corporation" - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

"PMBDeviceInfoProvider" (PMBDeviceInfoProvider) - "Sony Corporation" - c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

"Protexis Licensing V2" (PSI_SVC_2) - "Protexis Inc." - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

"Skype Updater" (SkypeUpdate) - "Skype Technologies" - C:\Program Files (x86)\Skype\Updater\Updater.exe

"VAIO Care Performance Service" (SampleCollector) - "Sony Corporation" - C:\Program Files\Sony\VAIO Care\VCPerfService.exe

"VAIO Content Folder Watcher" (VCFw) - "Sony Corporation" - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe

"VAIO Content Importer" (SOHCImp) - "Sony Corporation" - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe

"VAIO Content Metadata Intelligent Analyzing Manager" (VcmIAlzMgr) - "Sony Corporation" - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

"VAIO Content Metadata Intelligent Network Service Manager" (VcmINSMgr) - "Sony Corporation" - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe

"VAIO Content Metadata XML Interface" (VcmXmlIfHelper) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe

"VAIO Device Searcher" (SOHDs) - "Sony Corporation" - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe

"VAIO Entertainment Common Service" (SpfService) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe

"VAIO Event Service" (VAIO Event Service) - "Sony Corporation" - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe

"VCService" (VCService) - "Sony Corporation" - C:\Program Files\Sony\VAIO Care\VCService.exe

"VSNService" (VSNService) - "Sony Corporation" - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe

"VUAgent" (VUAgent) - "Sony Corporation" - C:\Program Files\Sony\VAIO Update Common\VUAgent.exe

"Windows Live ID Sign-in Assistant" (wlidsvc) - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
 

[Winsock Providers]

-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----

"WindowsLive Local NSP" - "Microsoft Corp." - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

"WindowsLive NSP" - "Microsoft Corp." - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
 

===[ Logfile end ]=========================================[ Logfile end ]===
 

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru

sorry vergessen

Code:

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software

Run date: 2012-09-22 18:39:41

-----------------------------

18:39:41.208    OS Version: Windows x64 6.1.7601 Service Pack 1

18:39:41.208    Number of processors: 4 586 0x2A07

18:39:41.208    ComputerName: DREA-PC  UserName: drea

18:39:42.175    Initialize success

18:39:53.579    AVAST engine defs: 12092100

18:39:55.373    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1

18:39:55.373    Disk 0 Vendor: SAMSUNG_ 2AJ1 Size: 610480MB BusType: 3

18:39:55.389    Disk 0 MBR read successfully

18:39:55.389    Disk 0 MBR scan

18:39:55.404    Disk 0 Windows 7 default MBR code

18:39:55.420    Disk 0 Partition 1 00     27 Hidden NTFS WinRE NTFS        13958 MB offset 2048

18:39:55.451    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 28588032

18:39:55.467    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS       596420 MB offset 28792832

18:39:55.513    Disk 0 scanning C:\Windows\system32\drivers

18:40:03.157    Service scanning

18:40:24.452    Modules scanning

18:40:24.467    Disk 0 trace - called modules:

18:40:24.530    ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll 

18:40:24.545    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004d65060]

18:40:24.545    3 CLASSPNP.SYS[fffff88001ae643f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004ab9050]

18:40:25.325    AVAST engine scan C:\Windows

18:40:27.852    AVAST engine scan C:\Windows\system32

18:42:41.669    AVAST engine scan C:\Windows\system32\drivers

18:42:50.593    AVAST engine scan C:\Users\drea

18:47:23.687    AVAST engine scan C:\ProgramData

18:48:21.173    Scan finished successfully

18:49:53.712    Disk 0 MBR has been saved successfully to "C:\Users\drea\Desktop\MBR.dat"

18:49:53.712    The log file has been saved successfully to "C:\Users\drea\Desktop\aswMBR.txt"

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Code:

SUPERAntiSpyware Scan Log

hxxp://www.superantispyware.com
 

Generated 09/22/2012 at 11:50 PM
 

Application Version : 5.5.1016
 

Core Rules Database Version : 9275

Trace Rules Database Version: 7087
 

Scan type       : Complete Scan

Total Scan Time : 00:39:01
 

Operating System Information

Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)

UAC On - Administrator
 

Memory items scanned      : 882

Memory threats detected   : 0

Registry items scanned    : 66241

Registry threats detected : 0

File items scanned        : 42331

File threats detected     : 421
 

Adware.Tracking Cookie

        C:\USERS\DREA\AppData\Roaming\Microsoft\Windows\Cookies\Low\drea@c.atdmt[2].txt [ Cookie:drea@c.atdmt.com/ ]

        C:\USERS\DREA\AppData\Roaming\Microsoft\Windows\Cookies\Low\drea@statse.webtrendslive[1].txt [ Cookie:drea@statse.webtrendslive.com/ ]

        ia.media-imdb.com [ C:\USERS\DREA\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4MWQG3RP ]

        ictv-besthorror-ec.indieclicktv.com [ C:\USERS\DREA\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4MWQG3RP ]

        C:\USERS\DREA\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DREA@DOUBLECLICK[1].TXT [ /DOUBLECLICK ]

        .statse.webtrendslive.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .apmebf.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .mediaplex.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        counter.hitslink.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        track.adform.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        server.adformdsp.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adformdsp.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adform.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zanox.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .imrworldwide.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .imrworldwide.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .lfstmedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .lfstmedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zanox-affiliate.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .amazon-adsystem.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .amazon-adsystem.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .legolas-media.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .advertising.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .ru4.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .stats.paypal.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        adserver.gb4.motorpresse.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.etracker.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tradetracker.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ads.247activemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .burstnet.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        7.rotator.wigetmedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        7.rotator.wigetmedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .liveperson.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adxpose.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .mmotraffic.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .mmotraffic.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .clicksor.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .clicksor.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .clicksor.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .myroitracking.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .clicksor.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .clicksor.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adserver.adtechus.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adinterax.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .c1.atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .c1.atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .im.banner.t-online.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        de.sitestat.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .kontera.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        counter.dieit.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adinterax.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .888media.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .specificclick.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .advertising.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ads1.888media.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ads1.888media.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ads1.888media.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .clickfuse.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .clickfuse.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .clickfuse.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .technoratimedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .technoratimedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .technoratimedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .technoratimedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.findmyhome.at [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.findmyhome.at [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.findmyhome.at [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .findmyhome.at [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .findmyhome.at [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .findmyhome.at [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.findmyhome.at [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.findmyhome.at [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .game-advertising-online.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .server.cpmstar.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .server.cpmstar.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .server.cpmstar.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .server.cpmstar.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .server.cpmstar.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.velmedia.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.velmedia.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.velmedia.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.velmedia.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.velmedia.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.velmedia.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.velmedia.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .pro-market.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .pro-market.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .pro-market.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .pro-market.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .pro-market.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .xiti.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .im.banner.t-online.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zanox-affiliate.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        mediaservices-d.openxenterprise.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        tracking.hostgator.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        rts.pgmediaserve.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        rts.pgmediaserve.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        rts.pgmediaserve.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .bwincom.122.2o7.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .doubleclick.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .questionmarket.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .questionmarket.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        partners.webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .conrad.122.2o7.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .casalemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        tracking.oe24.at [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        tracking.oe24.at [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        tracking.oe24.at [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        buntebilder.trendymedia.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        in.getclicky.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tracker.vinsight.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .histats.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .histats.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        aa.adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adform.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        tracking.quisma.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        tracking.quisma.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        tracking.quisma.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        tracking.quisma.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        tracking.quisma.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.etracker.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.crackajack.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .crackajack.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.crackajack.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .crackajack.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .crackajack.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        adserver.sevenload.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.crackajack.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.crackajack.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .crackajack.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .crackajack.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        eas4.emediate.eu [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        eas4.emediate.eu [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        eas5.emediate.eu [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        eas5.emediate.eu [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .mediaplex.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        tomtailor.dyntracker.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .ad.adnet.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad1.adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adviva.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .apmebf.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .fastclick.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .ad.adnet.biz [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .ru4.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .lucidmedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserve2.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserve2.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserve2.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserve2.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserve2.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserve2.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserve2.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserve2.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserve2.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .at.atwola.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tacoda.at.atwola.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tacoda.at.atwola.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tacoda.at.atwola.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tacoda.at.atwola.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .at.atwola.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tacoda.at.atwola.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tacoda.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .ar.atwola.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .legolas-media.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .atwola.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .advertising.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .quartermedia.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .quartermedia.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .indieclick.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        optimize.indieclick.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .rotator.wigetmedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        mtrtracker.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .yieldmanager.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .yieldmanager.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .realmedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .realmedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .legolas-media.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .legolas-media.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .overture.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .overture.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        network.realmedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .chicagosuntimes.122.2o7.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        counters.gigya.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .care2.112.2o7.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tribalfusion.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .casalemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .casalemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .casalemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .casalemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .casalemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        traffic.brand-wall.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad3.adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        de.sitestat.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        track.adform.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adform.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        track.adform.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.moviepilot.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .moviepilot.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .moviepilot.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .moviepilot.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .2o7.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .survey.g.doubleclick.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        survey.g.doubleclick.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        adserver1.mokono.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .statcounter.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        statse.webtrendslive.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adverticum.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        eas.apm.emediate.eu [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        eas.apm.emediate.eu [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .im.banner.t-online.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .stepstone.112.2o7.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        eas.apm.emediate.eu [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .im.banner.t-online.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .im.banner.t-online.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .accounts.google.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .accounts.google.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .accounts.google.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        accounts.google.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        accounts.google.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        7.rotator.wigetmedia.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ww251.smartadserver.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.etracker.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        www.etracker.de [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad4.adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .advertising.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .advertising.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .advertising.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zanox.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.zanox.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .mediaplex.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserving.coffeetree.info [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserving.coffeetree.info [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserving.coffeetree.info [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserving.coffeetree.info [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserving.coffeetree.info [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserving.coffeetree.info [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserving.coffeetree.info [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserving.coffeetree.info [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .geoadserving.coffeetree.info [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad2.adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .doubleclick.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .edsa.122.2o7.net [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .c.atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .c.atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .c.atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .c.atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .h.atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .h.atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .h.atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

        .h.atdmt.com [ C:\USERS\DREA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\70ATNN5Q.DEFAULT\COOKIES.SQLITE ]

Code:

Malwarebytes Anti-Malware 1.65.0.1400

www.malwarebytes.org
 

Datenbank Version: v2012.09.22.07
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

drea :: DREA-PC [Administrator]
 

23.09.2012 00:04:39

mbam-log-2012-09-23 (00-04-39).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 311694

Laufzeit: 32 Minute(n), 30 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

Sieht ok aus, da wurden nur Cookies gefunden.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

windows media player spielt mir nichts ab. bzw. er lässt sich nicht mal öffnen ?

aber vielen dank für die ganze hilfe bis her. :)

Den WMP vllt mal deinstallieren und nochmal neu installieren? :confused:
Ansonsten einfach was besseres verwenden zB VideoLAN - Official page for VLC media player, the Open Source video framework!

Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. Mit Hilfe von OTL kannst du auch viele Tools entfernen:

Starte bitte OTL und klicke auf Bereinigung.
Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen.

Malwarebytes zu behalten ist zu empfehlen. Kannst ja 1x im Monat damit einen Vollscan machen, aber immer vorher ans Update denken.

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.

Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update

PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks => Adobe Flash Player Distribution | Adobe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.

Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.

Sehr cool! :) Vielen dank!!!! :daumenhoc