Trojaner-Board - Ordner werden nur noch als verknüpungen angezeigt

Danke :)

Combofix Logfile:

Code:

ComboFix 11-09-29.06 - Franzi 29.09.2011  21:18:07.1.4 - x64

Microsoft Windows 7 Home Premium   6.1.7600.0.1252.49.1031.18.3959.2766 [GMT 3:00]

ausgeführt von:: c:\users\Franzi\Desktop\ComboFix.exe

AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}

SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files (x86)\google\common\google updater\googleupdaterservice.exe

c:\programdata\FullRemove.exe

c:\programdata\hpeAE20.dll

c:\users\Franzi\Documents\~WRL1438.tmp

c:\users\Franzi\Documents\~WRL2191.tmp

G:\Autorun.inf

.

.

(((((((((((((((((((((((   Dateien erstellt von 2011-08-28 bis 2011-09-29  ))))))))))))))))))))))))))))))

.

.

2011-09-29 18:24 . 2011-09-29 18:24        --------        d-----w-        c:\users\Default\AppData\Local\temp

2011-09-28 15:12 . 2011-09-28 15:12        --------        d-----w-        C:\_OTL

2011-09-27 14:07 . 2011-09-21 06:00        9049936        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{D483F914-CD32-4B03-B99B-D99E08776F6E}\mpengine.dll

2011-09-24 16:54 . 2011-05-24 16:14        270720        ------w-        c:\windows\system32\MpSigStub.exe

2011-09-23 16:46 . 2011-09-23 16:46        --------        d-----w-        c:\program files (x86)\ESET

2011-09-22 19:42 . 2011-09-22 19:42        --------        d-----w-        c:\program files (x86)\TeamViewer

2011-09-22 18:40 . 2011-09-22 18:40        --------        d-----w-        c:\users\Franzi\AppData\Roaming\Malwarebytes

2011-09-22 18:40 . 2011-09-22 18:40        --------        d-----w-        c:\programdata\Malwarebytes

2011-09-22 18:40 . 2011-09-22 18:40        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2011-09-22 18:40 . 2011-08-31 14:00        25416        ----a-w-        c:\windows\system32\drivers\mbam.sys

2011-09-22 18:09 . 2011-09-22 18:09        --------        d-----w-        c:\users\Franzi\AppData\Roaming\TeamViewer

2011-09-05 20:28 . 2011-09-05 20:28        --------        d-----w-        c:\windows\SysWow64\Wat

2011-09-05 20:28 . 2011-09-05 20:28        --------        d-----w-        c:\windows\system32\Wat

2011-09-05 15:04 . 2009-12-07 17:53        117504        ----a-w-        c:\windows\system32\drivers\ewusbmdm.sys

2011-09-05 15:04 . 2009-12-07 17:36        246224        ----a-w-        c:\windows\system32\drivers\ewusbnet.sys

2011-09-05 15:04 . 2009-10-12 13:23        114304        ----a-w-        c:\windows\system32\drivers\ewusbdev.sys

2011-09-05 15:04 . 2007-08-09 02:10        29696        ----a-w-        c:\windows\system32\drivers\ewdcsc.sys

2011-09-05 15:03 . 2011-09-05 15:04        --------        d-----w-        c:\program files (x86)\Mobile Partner

2011-09-04 19:40 . 2011-09-04 19:40        --------        d-----w-        c:\programdata\Sandlot Games

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-07-22 05:35 . 2011-08-10 21:40        1638912        ----a-w-        c:\windows\system32\mshtml.tlb

2011-07-22 04:56 . 2011-08-10 21:40        1638912        ----a-w-        c:\windows\SysWow64\mshtml.tlb

2011-07-16 05:26 . 2011-08-10 21:41        362496        ----a-w-        c:\windows\system32\wow64win.dll

2011-07-16 05:26 . 2011-08-10 21:41        243200        ----a-w-        c:\windows\system32\wow64.dll

2011-07-16 05:26 . 2011-08-10 21:41        13312        ----a-w-        c:\windows\system32\wow64cpu.dll

2011-07-16 05:26 . 2011-08-10 21:41        214528        ----a-w-        c:\windows\system32\winsrv.dll

2011-07-16 05:24 . 2011-08-10 21:41        16384        ----a-w-        c:\windows\system32\ntvdm64.dll

2011-07-16 05:21 . 2011-08-10 21:41        422400        ----a-w-        c:\windows\system32\KernelBase.dll

2011-07-16 05:17 . 2011-08-10 21:41        338432        ----a-w-        c:\windows\system32\conhost.exe

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-string-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        6144        ---ha-w-        c:\windows\system32\api-ms-win-security-base-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        5120        ---ha-w-        c:\windows\system32\api-ms-win-core-file-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-util-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-io-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll

2011-07-16 05:04 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-console-l1-1-0.dll

2011-07-16 04:36 . 2011-08-10 21:41        14336        ----a-w-        c:\windows\SysWow64\ntvdm64.dll

2011-07-16 04:32 . 2011-08-10 21:41        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2011-07-16 04:31 . 2011-08-10 21:41        25600        ----a-w-        c:\windows\SysWow64\setup16.exe

2011-07-16 04:30 . 2011-08-10 21:41        5120        ----a-w-        c:\windows\SysWow64\wow32.dll

2011-07-16 04:30 . 2011-08-10 21:41        272384        ----a-w-        c:\windows\SysWow64\KernelBase.dll

2011-07-16 04:19 . 2011-08-10 21:41        4608        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        5120        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll

2011-07-16 04:19 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll

2011-07-16 02:26 . 2011-08-10 21:41        7680        ----a-w-        c:\windows\SysWow64\instnm.exe

2011-07-16 02:26 . 2011-08-10 21:41        2048        ----a-w-        c:\windows\SysWow64\user.exe

2011-07-16 02:21 . 2011-08-10 21:41        6144        ---ha-w-        c:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

2011-07-16 02:21 . 2011-08-10 21:41        4608        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

2011-07-16 02:21 . 2011-08-10 21:41        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

2011-07-16 02:21 . 2011-08-10 21:41        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

2011-07-09 05:14 . 2011-08-24 13:00        2048        ----a-w-        c:\windows\system32\tzres.dll

2011-07-09 04:30 . 2011-08-24 13:00        2048        ----a-w-        c:\windows\SysWow64\tzres.dll

2011-07-09 02:44 . 2011-08-10 21:41        287744        ----a-w-        c:\windows\system32\drivers\mrxsmb10.sys

2011-07-08 08:53 . 2011-02-02 17:00        123784        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2011-07-08 08:53 . 2011-02-02 17:00        88288        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2010-05-27 02:40        120176        ----a-w-        c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-07-13 39408]

"Sony Ericsson PC Companion"="c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" [2009-12-08 774144]

"Messenger (Yahoo!)"="c:\progra~2\Yahoo!\Messenger\YahooMessenger.exe" [2010-11-04 6174008]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-04-13 284696]

"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264]

"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]

"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]

"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]

"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-06-28 265984]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-05-27 98304]

"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-06-22 968272]

"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-01-10 281768]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672]

"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]

"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-05 135664]

R3 dc3d;Microsoft-Hardware – Geräteerkennungstreiber;c:\windows\system32\DRIVERS\dc3d.sys [x]

R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-05 135664]

R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys [x]

R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]

R3 mvusbews;USB EWS Device;c:\windows\system32\Drivers\mvusbews.sys [x]

R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]

R3 s1039bus;Sony Ericsson Device 1039 driver (WDM);c:\windows\system32\DRIVERS\s1039bus.sys [x]

R3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1039mdfl.sys [x]

R3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1039mdm.sys [x]

R3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1039mgmt.sys [x]

R3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1039nd5.sys [x]

R3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1039obex.sys [x]

R3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1039unic.sys [x]

R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x]

S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [x]

S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [x]

S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [x]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]

S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-04-27 136360]

S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-06-22 321104]

S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]

S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]

S2 HPSIService;HP SI Service;c:\windows\system32\HPSIsvc.exe [x]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]

S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]

S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]

S2 OMSI download service;Sony Ericsson OMSI download service;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]

S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-30 2358656]

S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]

S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232]

S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]

S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]

S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]

S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]

S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]

.

.

Inhalt des "geplante Tasks" Ordners

.

2011-09-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-05 15:23]

.

2011-09-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-05 15:23]

.

.

--------- x86-64 -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2010-05-27 02:42        137584        ----a-w-        c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]

"PLFSetI"="c:\windows\PLFSetI.exe" [2010-06-09 206208]

"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-06-11 861216]

"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://www.gmx.net/

uLocal Page = c:\windows\system32\blank.htm

mStart Page = 

mLocal Page = 

IE: An OneNote s&enden - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105

IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html

IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Wow6432Node-HKLM-Run-YSearchProtection - c:\program files (x86)\Yahoo!\Search Protection\SearchProtection.exe

Wow6432Node-HKLM-Run-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\facemoodssrv.exe

HKLM-Run-ETDWare - c:\program files (x86)\Elantech\ETDCtrl.exe

AddRemove-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.8\uninstall.exe

AddRemove-Stellar Phoenix Windows Data Recovery-Home_is1 - d:\stellar phoenix windows data recovery\unins000.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe

c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

c:\program files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

c:\program files (x86)\Launch Manager\LMworker.exe

c:\program files (x86)\Yahoo!\Messenger\ymsgr_tray.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2011-09-29  21:31:59 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2011-09-29 18:31

.

Vor Suchlauf: 9 Verzeichnis(se), 195.940.184.064 Bytes frei

Nach Suchlauf: 15 Verzeichnis(se), 196.363.870.208 Bytes frei

.

- - End Of File - - 540D29914DEEAA2F5FAD01FDEFED49A9

--- --- ---

Lg Franzi

So nun die ganzen Dateien :
SUPERAntiSpyware

SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 10/01/2011 at 09:15 PM

Application Version : 5.0.1128

Core Rules Database Version : 7745
Trace Rules Database Version: 5557

Scan type : Complete Scan
Total Scan Time : 03:48:36

Operating System Information
Windows 7 Home Premium 64-bit (Build 6.01.7600)
UAC On - Administrator

Memory items scanned : 643
Memory threats detected : 0
Registry items scanned : 72078
Registry threats detected : 0
File items scanned : 174914
File threats detected : 415

Adware.Tracking Cookie
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@ad.yieldmanager[1].txt [ /ad.yieldmanager ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@adx.chip[1].txt [ /adx.chip ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@adx.chip[2].txt [ /adx.chip ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@content.yieldmanager[2].txt [ /content.yieldmanager ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@content.yieldmanager[3].txt [ /content.yieldmanager ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@doubleclick[1].txt [ /doubleclick ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@partypoker[2].txt [ /partypoker ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@serving-sys[2].txt [ /serving-sys ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@smartadserver[2].txt [ /smartadserver ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@smartadserver[3].txt [ /smartadserver ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@smartadserver[4].txt [ /smartadserver ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\franzi@statse.webtrendslive[2].txt [ /statse.webtrendslive ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\1PLADMJ9.txt [ /mediaplex.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\BK7Z78CQ.txt [ /doubleclick.net ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\KUB9XH1W.txt [ /tracking.mindshare.de ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\RK93IYZG.txt [ /ad2.adfarm1.adition.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\404VQPOV.txt [ /ad.yieldmanager.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\THNN4Q8L.txt [ /zanox.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\QCXEMNFS.txt [ /serving-sys.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\IQWPPQCN.txt [ /ads.jinkads.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\07J0ZG4O.txt [ /tradedoubler.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\0X4N8S90.txt [ /zanox-affiliate.de ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\SGF3GGD5.txt [ /content.yieldmanager.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\0Z2IBBAJ.txt [ /ad1.adfarm1.adition.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\X2F135WW.txt [ /www.etracker.de ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\2FE9OQI4.txt [ /atdmt.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\BV8RDZH0.txt [ /webmasterplan.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\0OX2HBM5.txt [ /tracking.quisma.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\C4SH50VZ.txt [ /imrworldwide.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\MS0T664R.txt [ /ad.zanox.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\N48NNCVI.txt [ /bs.serving-sys.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\B73IC523.txt [ /sevenoneintermedia.112.2o7.net ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\WGFWFRS0.txt [ /apmebf.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\NR62P8KH.txt [ /ads.creative-serving.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\MB3SBR8D.txt [ /adfarm1.adition.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\5Z9FJGSH.txt [ /revsci.net ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\2YWQRXPQ.txt [ /ad3.adfarm1.adition.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\ITTK2C3T.txt [ /content.yieldmanager.com ]
C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Cookies\CMZOC504.txt [ /traffictrack.de ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZZHNH0PN.txt [ Cookie:franzi@specificclick.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\CJ1UWKN8.txt [ Cookie:franzi@www.zanox-affiliate.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\34ZDA154.txt [ Cookie:franzi@im.banner.t-online.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@xiti[2].txt [ Cookie:franzi@xiti.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adserver[1].txt [ Cookie:franzi@adserver.gs/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@passende-gedichte-finden[1].txt [ Cookie:franzi@passende-gedichte-finden.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\NKWEDWCO.txt [ Cookie:franzi@zanox.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\YJPHB1QL.txt [ Cookie:franzi@eas.apm.emediate.eu/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\10R6IZZ7.txt [ Cookie:franzi@2o7.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\XRD5D3LI.txt [ Cookie:franzi@ad.adnet.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@profilbanner[1].txt [ Cookie:franzi@profilbanner.me/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\DJDB0T9A.txt [ Cookie:franzi@ad.adserver01.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adform[3].txt [ Cookie:franzi@adform.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@clicks.pangora[1].txt [ Cookie:franzi@clicks.pangora.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@audiag.112.2o7[1].txt [ Cookie:franzi@audiag.112.2o7.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@cewecolor.112.2o7[1].txt [ Cookie:franzi@cewecolor.112.2o7.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@doubleclick[4].txt [ Cookie:franzi@doubleclick.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\RDDAOQS7.txt [ Cookie:franzi@tradedoubler.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\W62YX42T.txt [ Cookie:franzi@statse.webtrendslive.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@yieldmanager[2].txt [ Cookie:franzi@yieldmanager.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\658L2XQA.txt [ Cookie:franzi@zanox-affiliate.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adsrv1.admediate[2].txt [ Cookie:franzi@adsrv1.admediate.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@komtrack[4].txt [ Cookie:franzi@komtrack.com/tr/104440 ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\0I0OKDPC.txt [ Cookie:franzi@ad1.adfarm1.adition.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\YL2QJIMV.txt [ Cookie:franzi@www.etracker.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@www.burstnet[2].txt [ Cookie:franzi@www.burstnet.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@webmasterplan[3].txt [ Cookie:franzi@webmasterplan.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@rts.pgmediaserve[1].txt [ Cookie:franzi@rts.pgmediaserve.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@ru4[1].txt [ Cookie:franzi@ru4.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\BX27QCUX.txt [ Cookie:franzi@adform.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\JLXECDIA.txt [ Cookie:franzi@fastclick.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@fr.sitestat[3].txt [ Cookie:franzi@fr.sitestat.com/eurosport/yahoode/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\WJXI82MJ.txt [ Cookie:franzi@track.adform.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@eas4.emediate[2].txt [ Cookie:franzi@eas4.emediate.eu/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\9JMF9RPO.txt [ Cookie:franzi@media6degrees.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@de.twstats[2].txt [ Cookie:franzi@de.twstats.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adcentriconline[3].txt [ Cookie:franzi@adcentriconline.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@ice.112.2o7[1].txt [ Cookie:franzi@ice.112.2o7.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\F9Y4P2D6.txt [ Cookie:franzi@google.com/accounts/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@statcounter[2].txt [ Cookie:franzi@statcounter.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@fr.sitestat[4].txt [ Cookie:franzi@fr.sitestat.com/eurosport/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\77WE98LL.txt [ Cookie:franzi@tribalfusion.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@daimlerag.122.2o7[1].txt [ Cookie:franzi@daimlerag.122.2o7.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@sevenoneintermedia.112.2o7[1].txt [ Cookie:franzi@sevenoneintermedia.112.2o7.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adbrite[2].txt [ Cookie:franzi@adbrite.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\AH8201JR.txt [ Cookie:franzi@adfarm1.adition.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@ero-advertising[1].txt [ Cookie:franzi@ero-advertising.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@ad2.adfarm1.adition[3].txt [ Cookie:franzi@ad2.adfarm1.adition.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adxpose[2].txt [ Cookie:franzi@adxpose.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\81UPVGIK.txt [ Cookie:franzi@ads.quartermedia.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\BRLOT90E.txt [ Cookie:franzi@content.yieldmanager.com/ak/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\59PPZNFB.txt [ Cookie:franzi@traffictrack.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\30KXA5DJ.txt [ Cookie:franzi@mediaplex.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@questionmarket[3].txt [ Cookie:franzi@questionmarket.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\U719QWY7.txt [ Cookie:franzi@ad.dyntracker.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\G0HC1OCO.txt [ Cookie:franzi@www.active-tracking.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@hitbox[2].txt [ Cookie:franzi@hitbox.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\COEFX671.txt [ Cookie:franzi@adtech.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\3GT3A7D4.txt [ Cookie:franzi@adx.chip.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\5RNQ8VGU.txt [ Cookie:franzi@www.googleadservices.com/pagead/conversion/1069477206/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@stats.bmw[1].txt [ Cookie:franzi@stats.bmw.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@adserver.adtechus[1].txt [ Cookie:franzi@adserver.adtechus.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@doubleclick[5].txt [ Cookie:franzi@doubleclick.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@stat.dealtime[1].txt [ Cookie:franzi@stat.dealtime.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\WWRU8952.txt [ Cookie:franzi@collective-media.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@track.webtrekk[5].txt [ Cookie:franzi@track.webtrekk.de/469359319458199/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@discount24[1].txt [ Cookie:franzi@discount24.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@accounts.youtube[1].txt [ Cookie:franzi@accounts.youtube.com/accounts ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@countomat[1].txt [ Cookie:franzi@countomat.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\E5LVOGQA.txt [ Cookie:franzi@liveperson.net/hc/85950269 ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@marcopolo.traffective-tracking[1].txt [ Cookie:franzi@marcopolo.traffective-tracking.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@liveperson[2].txt [ Cookie:franzi@liveperson.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@partypoker[2].txt [ Cookie:franzi@partypoker.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@trackhints[3].txt [ Cookie:franzi@trackhints.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@CA78C1W7.txt [ Cookie:franzi@www.googleadservices.com/pagead/conversion/1071490405/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@www.googleadservices[3].txt [ Cookie:franzi@www.googleadservices.com/pagead/conversion/1067519574/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@viewablemedia[1].txt [ Cookie:franzi@viewablemedia.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\UUZ96VRW.txt [ Cookie:franzi@paypal.112.2o7.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\1EFM7PSN.txt [ Cookie:franzi@ad.adition.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\2XGJMO1G.txt [ Cookie:franzi@tracking.quisma.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@ehg-worldpay.hitbox[1].txt [ Cookie:franzi@ehg-worldpay.hitbox.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\3ROFFNEJ.txt [ Cookie:franzi@ich.adscale.de/adserver-ich/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\UERA44TY.txt [ Cookie:franzi@imrworldwide.com/cgi-bin ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@dealtime[1].txt [ Cookie:franzi@dealtime.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@partners.webmasterplan[2].txt [ Cookie:franzi@partners.webmasterplan.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@dc.tremormedia[1].txt [ Cookie:franzi@dc.tremormedia.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@gostats[1].txt [ Cookie:franzi@gostats.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\QOEH4MEU.txt [ Cookie:franzi@unitymedia.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@clickfuse[1].txt [ Cookie:franzi@clickfuse.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\FSQRK2IP.txt [ Cookie:franzi@apmebf.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\SMODZO3O.txt [ Cookie:franzi@invitemedia.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\SZQ9R5SL.txt [ Cookie:franzi@insightexpressai.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\QMRSK7Q3.txt [ Cookie:franzi@media-player-classic.softonic.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\9PMDFCQB.txt [ Cookie:franzi@ad3.adfarm1.adition.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@de.partypoker[1].txt [ Cookie:franzi@de.partypoker.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@www.googleadservices[7].txt [ Cookie:franzi@www.googleadservices.com/pagead/conversion/1067039060/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@www.googleadservices[10].txt [ Cookie:franzi@www.googleadservices.com/pagead/conversion/1068470753/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\JAO62FRT.txt [ Cookie:franzi@banner.lv.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\franzi@track.effiliation[2].txt [ Cookie:franzi@track.effiliation.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\6165FA5C.txt [ Cookie:franzi@www.google.de/accounts ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\3NC180DY.txt [ Cookie:franzi@doubleclick.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\QVHSX2Q1.txt [ Cookie:franzi@track.effiliation.com/servlet/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\M2W693PW.txt [ Cookie:franzi@ads20.wwe-media.de/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\HAVCMSCR.txt [ Cookie:franzi@stats.paypal.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\A1H17UR1.txt [ Cookie:franzi@atdmt.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\BX9Q05NE.txt [ Cookie:franzi@ec-track.com/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\WA8WGHR9.txt [ Cookie:franzi@www.google.com/accounts ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\WNQASGJ3.txt [ Cookie:franzi@adviva.net/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\X76GANX0.txt [ Cookie:franzi@www.googleadservices.com/pagead/conversion/1062277222/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\6E6JXSZD.txt [ Cookie:franzi@de.sitestat.com/sueddeutsche/sueddeutsche/ ]
C:\USERS\FRANZI\AppData\Roaming\Microsoft\Windows\Cookies\Low\XAGH4726.txt [ Cookie:franzi@traveladvertising.com/ ]
C:\USERS\FRANZI\Cookies\1PLADMJ9.txt [ Cookie:franzi@mediaplex.com/ ]
C:\USERS\FRANZI\Cookies\BK7Z78CQ.txt [ Cookie:franzi@doubleclick.net/ ]
C:\USERS\FRANZI\Cookies\THNN4Q8L.txt [ Cookie:franzi@zanox.com/ ]
C:\USERS\FRANZI\Cookies\07J0ZG4O.txt [ Cookie:franzi@tradedoubler.com/ ]
C:\USERS\FRANZI\Cookies\0X4N8S90.txt [ Cookie:franzi@zanox-affiliate.de/ ]
C:\USERS\FRANZI\Cookies\0Z2IBBAJ.txt [ Cookie:franzi@ad1.adfarm1.adition.com/ ]
C:\USERS\FRANZI\Cookies\X2F135WW.txt [ Cookie:franzi@www.etracker.de/ ]
C:\USERS\FRANZI\Cookies\2FE9OQI4.txt [ Cookie:franzi@atdmt.com/ ]
C:\USERS\FRANZI\Cookies\0OX2HBM5.txt [ Cookie:franzi@tracking.quisma.com/ ]
C:\USERS\FRANZI\Cookies\C4SH50VZ.txt [ Cookie:franzi@imrworldwide.com/cgi-bin ]
C:\USERS\FRANZI\Cookies\B73IC523.txt [ Cookie:franzi@sevenoneintermedia.112.2o7.net/ ]
C:\USERS\FRANZI\Cookies\WGFWFRS0.txt [ Cookie:franzi@apmebf.com/ ]
C:\USERS\FRANZI\Cookies\MB3SBR8D.txt [ Cookie:franzi@adfarm1.adition.com/ ]
C:\USERS\FRANZI\Cookies\2YWQRXPQ.txt [ Cookie:franzi@ad3.adfarm1.adition.com/ ]
C:\USERS\FRANZI\Cookies\ITTK2C3T.txt [ Cookie:franzi@content.yieldmanager.com/ak/ ]
C:\USERS\FRANZI\Cookies\CMZOC504.txt [ Cookie:franzi@traffictrack.de/ ]
.doubleclick.net [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.webmasterplan.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.effiliation.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.effiliation.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.effiliation.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.effiliation.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.effiliation.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.apmebf.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mediaplex.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tradedoubler.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mediaplex.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad3.adfarm1.adition.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.adform.net [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
track.adform.net [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adform.net [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tradedoubler.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tradedoubler.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tradedoubler.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adfarm1.adition.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad2.adfarm1.adition.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zanox.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\USERS\FRANZI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
s0.2mdn.net [ C:\USERS\FRANZI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\ZYGT6FGZ ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZANOX[4].TXT [ /ZANOX ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD2.ADFARM1.ADITION[1].TXT [ /AD2.ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@SERVER.LON.LIVEPERSON[1].TXT [ /SERVER.LON.LIVEPERSON ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.WEBTREKK[2].TXT [ /TRACK.WEBTREKK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRAFFICTRACK[3].TXT [ /TRAFFICTRACK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADBRITE[1].TXT [ /ADBRITE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.JINKADS[1].TXT [ /ADS.JINKADS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@DELIVERY.ATKMEDIA[2].TXT [ /DELIVERY.ATKMEDIA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.WEBTREKK[3].TXT [ /TRACK.WEBTREKK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.ADFORM[3].TXT [ /TRACK.ADFORM ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRIBALFUSION[2].TXT [ /TRIBALFUSION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.MINDSHARE[3].TXT [ /TRACKING.MINDSHARE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@GMEUROPE.112.2O7[1].TXT [ /GMEUROPE.112.2O7 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@OVERTURE[1].TXT [ /OVERTURE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZANOX[3].TXT [ /ZANOX ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZBOX.ZANOX[1].TXT [ /ZBOX.ZANOX ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@FL01.CT2.COMCLICK[2].TXT [ /FL01.CT2.COMCLICK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ELITEPARTNER[1].TXT [ /ELITEPARTNER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.QUISMA[3].TXT [ /TRACKING.QUISMA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIA.ANTENNE-BAYERN[3].TXT [ /MEDIA.ANTENNE-BAYERN ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@A.REVENUEMAX[1].TXT [ /A.REVENUEMAX ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@RTS.PGMEDIASERVE[2].TXT [ /RTS.PGMEDIASERVE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.YIELDMANAGER[3].TXT [ /AD.YIELDMANAGER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@SECMEDIA[2].TXT [ /SECMEDIA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.SPORTWERK[1].TXT [ /ADS.SPORTWERK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADX.CHIP[2].TXT [ /ADX.CHIP ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER.EP-SOLUTIONS[1].TXT [ /ADSERVER.EP-SOLUTIONS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.YIELDMANAGER[2].TXT [ /AD.YIELDMANAGER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@HEARSTUGO.112.2O7[1].TXT [ /HEARSTUGO.112.2O7 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@A.REVENUEMAX[2].TXT [ /A.REVENUEMAX ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.WEBTREKK[1].TXT [ /TRACK.WEBTREKK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD2.ADFARM1.ADITION[2].TXT [ /AD2.ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD4.ADFARM1.ADITION[1].TXT [ /AD4.ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.KLICKTEL[2].TXT [ /TRACKING.KLICKTEL ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.EFFILIATION[1].TXT [ /TRACK.EFFILIATION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@YADRO[2].TXT [ /YADRO ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZANOX[2].TXT [ /ZANOX ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.MINDSHARE[2].TXT [ /TRACKING.MINDSHARE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ADC-SERV[2].TXT [ /AD.ADC-SERV ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.ETRACKER[2].TXT [ /WWW.ETRACKER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.YIELDMANAGER[5].TXT [ /AD.YIELDMANAGER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@USER.LUCIDMEDIA[1].TXT [ /USER.LUCIDMEDIA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@VINVEST.122.2O7[1].TXT [ /VINVEST.122.2O7 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.BRANDWIRE[2].TXT [ /ADS.BRANDWIRE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@EUROS4CLICK[1].TXT [ /EUROS4CLICK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ADSERVER01[2].TXT [ /AD.ADSERVER01 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFORM[1].TXT [ /ADFORM ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AMSTATS.AWAYMESSAGE[1].TXT [ /AMSTATS.AWAYMESSAGE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@DOUBLECLICK[1].TXT [ /DOUBLECLICK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER.PLUS[1].TXT [ /ADSERVER.PLUS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ACCOUNT.BETFAIR[2].TXT [ /ACCOUNT.BETFAIR ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIA.ANTENNE-BAYERN[2].TXT [ /MEDIA.ANTENNE-BAYERN ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ZANOX[4].TXT [ /AD.ZANOX ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.GOOGLEADSERVICES[5].TXT [ /WWW.GOOGLEADSERVICES ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.EFFILIATION[3].TXT [ /TRACK.EFFILIATION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@RU4[2].TXT [ /RU4 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@UNITYMEDIA[2].TXT [ /UNITYMEDIA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@CREATIVDISCOUNT[2].TXT [ /CREATIVDISCOUNT ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ZANOX[1].TXT [ /AD.ZANOX ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.PUBMATIC[1].TXT [ /ADS.PUBMATIC ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WEBORAMA[1].TXT [ /WEBORAMA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@REVSCI[1].TXT [ /REVSCI ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.LANDWIRT[2].TXT [ /ADS.LANDWIRT ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFARM1.ADITION[2].TXT [ /ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.CREATIVE-SERVING[2].TXT [ /ADS.CREATIVE-SERVING ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@IMRWORLDWIDE[3].TXT [ /IMRWORLDWIDE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.DOTHADS[1].TXT [ /ADS.DOTHADS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@POOBIESEUROPEBV.SOLUTION.WEBORAMA[2].TXT [ /POOBIESEUROPEBV.SOLUTION.WEBORAMA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD2.ADFARM1.ADITION[4].TXT [ /AD2.ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD4.ADFARM1.ADITION[3].TXT [ /AD4.ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@GUJ.122.2O7[1].TXT [ /GUJ.122.2O7 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@LUCIDMEDIA[1].TXT [ /LUCIDMEDIA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.USENEXT[2].TXT [ /WWW.USENEXT ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@CONTENT.YIELDMANAGER[1].TXT [ /CONTENT.YIELDMANAGER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD1.CHEFKOCH[1].TXT [ /AD1.CHEFKOCH ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ADNET[2].TXT [ /AD.ADNET ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.NCTRACKING[1].TXT [ /WWW.NCTRACKING ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@IMRWORLDWIDE[2].TXT [ /IMRWORLDWIDE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@DOUBLECLICK[3].TXT [ /DOUBLECLICK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFARM1.ADITION[3].TXT [ /ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.GOOGLEADSERVICES[11].TXT [ /WWW.GOOGLEADSERVICES ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD1.ADFARM.ADTELLIGENCE[2].TXT [ /AD1.ADFARM.ADTELLIGENCE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@VODAFONEGROUP.122.2O7[1].TXT [ /VODAFONEGROUP.122.2O7 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.BURSTNET[1].TXT [ /WWW.BURSTNET ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZANOX-AFFILIATE[2].TXT [ /ZANOX-AFFILIATE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@SNAPFISH.112.2O7[1].TXT [ /SNAPFISH.112.2O7 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIA6DEGREES[2].TXT [ /MEDIA6DEGREES ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.USENEXT[1].TXT [ /WWW.USENEXT ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@APMEBF[4].TXT [ /APMEBF ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRADEDOUBLER[4].TXT [ /TRADEDOUBLER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AZJMP[2].TXT [ /AZJMP ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.GAMEFORGE[1].TXT [ /TRACKING.GAMEFORGE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFORM[2].TXT [ /ADFORM ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIAPLEX[1].TXT [ /MEDIAPLEX ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD3.ADFARM1.ADITION[3].TXT [ /AD3.ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADINTERAX[2].TXT [ /ADINTERAX ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.HANNOVERSCHE[2].TXT [ /TRACKING.HANNOVERSCHE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.ZANOX-AFFILIATE[2].TXT [ /WWW.ZANOX-AFFILIATE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.GOOGLEADSERVICES[6].TXT [ /WWW.GOOGLEADSERVICES ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@STATS.O2MORE[2].TXT [ /STATS.O2MORE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRADEDOUBLER[1].TXT [ /TRADEDOUBLER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.YIELDMANAGER[1].TXT [ /AD.YIELDMANAGER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@VDWP.SOLUTION.WEBORAMA[2].TXT [ /VDWP.SOLUTION.WEBORAMA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@CONTENT.YIELDMANAGER[4].TXT [ /CONTENT.YIELDMANAGER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER2.CLIPKIT[1].TXT [ /ADSERVER2.CLIPKIT ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIABRANDSWW[2].TXT [ /MEDIABRANDSWW ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@BS.SERVING-SYS[2].TXT [ /BS.SERVING-SYS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@STUDIVZ.ADFARM1.ADITION[1].TXT [ /STUDIVZ.ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@STATSE.WEBTRENDSLIVE[2].TXT [ /STATSE.WEBTRENDSLIVE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@QUESTIONMARKET[2].TXT [ /QUESTIONMARKET ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@APMEBF[2].TXT [ /APMEBF ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.360YIELD[2].TXT [ /AD.360YIELD ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@BIZRATE[1].TXT [ /BIZRATE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.PUBMATIC[2].TXT [ /ADS.PUBMATIC ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@LIVEPERSON[1].TXT [ /LIVEPERSON ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD-BECK.HOSTING2BUSINESS[1].TXT [ /AD-BECK.HOSTING2BUSINESS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@KOMTRACK[3].TXT [ /KOMTRACK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFARM1.ADITION[5].TXT [ /ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@2O7[1].TXT [ /2O7 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADTECH[2].TXT [ /ADTECH ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD1.ADFARM1.ADITION[1].TXT [ /AD1.ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.QUARTERMEDIA[2].TXT [ /ADS.QUARTERMEDIA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.ADFORM[4].TXT [ /TRACK.ADFORM ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZEDO[2].TXT [ /ZEDO ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.TRAFFICTRACK[1].TXT [ /WWW.TRAFFICTRACK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WEBMASTERPLAN[2].TXT [ /WEBMASTERPLAN ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIABRANDSWW[3].TXT [ /MEDIABRANDSWW ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.DOODLE[2].TXT [ /ADS.DOODLE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.3GNET[1].TXT [ /TRACKING.3GNET ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@COLLECTIVE-MEDIA[2].TXT [ /COLLECTIVE-MEDIA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@CONTENT.YIELDMANAGER[5].TXT [ /CONTENT.YIELDMANAGER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.AD4GAME[2].TXT [ /ADS.AD4GAME ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@APMEBF[1].TXT [ /APMEBF ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.JINKADS[3].TXT [ /ADS.JINKADS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@FASTCLICK[1].TXT [ /FASTCLICK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZEDO[3].TXT [ /ZEDO ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD3.ADFARM1.ADITION[1].TXT [ /AD3.ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER.CLIPSCALE[1].TXT [ /ADSERVER.CLIPSCALE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@SPECIFICCLICK[2].TXT [ /SPECIFICCLICK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@IM.BANNER.T-ONLINE[2].TXT [ /IM.BANNER.T-ONLINE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.ADK2[3].TXT [ /ADS.ADK2 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ADITION[2].TXT [ /AD.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.GOOGLEADSERVICES[2].TXT [ /WWW.GOOGLEADSERVICES ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@LIVEPERSON[3].TXT [ /LIVEPERSON ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@LFSTMEDIA[2].TXT [ /LFSTMEDIA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFARM1.ADITION[7].TXT [ /ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFARM1.ADITION[4].TXT [ /ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@KOMTRACK[5].TXT [ /KOMTRACK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@KOMTRACK[2].TXT [ /KOMTRACK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.MEDIAMARKT[1].TXT [ /WWW.MEDIAMARKT ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@STATS.O2MORE[1].TXT [ /STATS.O2MORE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.AD-SRV[1].TXT [ /AD.AD-SRV ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD.ZANOX[2].TXT [ /AD.ZANOX ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD2.NMM[1].TXT [ /AD2.NMM ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD3.ADFARM1.ADITION[4].TXT [ /AD3.ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AD4.ADFARM1.ADITION[2].TXT [ /AD4.ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADCENTRICONLINE[1].TXT [ /ADCENTRICONLINE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADECN[2].TXT [ /ADECN ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADFARM1.ADITION[1].TXT [ /ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.MEDIENHAUS[1].TXT [ /ADS.MEDIENHAUS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.ADK2[2].TXT [ /ADS.ADK2 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.BRANDWIRE[1].TXT [ /ADS.BRANDWIRE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.CREAFI[1].TXT [ /ADS.CREAFI ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.CRITIC[2].TXT [ /ADS.CRITIC ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.DIGINIGHTS[1].TXT [ /ADS.DIGINIGHTS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADS.IMMOBILIENSCOUT24[1].TXT [ /ADS.IMMOBILIENSCOUT24 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER.ADREACTOR[1].TXT [ /ADSERVER.ADREACTOR ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER.TRAFFICTRACK[2].TXT [ /ADSERVER.TRAFFICTRACK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSERVER2.CLIPKIT[3].TXT [ /ADSERVER2.CLIPKIT ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSRV.ADMEDIATE[2].TXT [ /ADSRV.ADMEDIATE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADSRV1.ADMEDIATE[1].TXT [ /ADSRV1.ADMEDIATE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADVIVA[1].TXT [ /ADVIVA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ADXPOSE[1].TXT [ /ADXPOSE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@APMEBF[5].TXT [ /APMEBF ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ATDMT[1].TXT [ /ATDMT ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ATDMT[2].TXT [ /ATDMT ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@AUTOSCOUT24.112.2O7[1].TXT [ /AUTOSCOUT24.112.2O7 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@BLAU.122.2O7[2].TXT [ /BLAU.122.2O7 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@BS.SERVING-SYS[1].TXT [ /BS.SERVING-SYS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@CONTENT.YIELDMANAGER[2].TXT [ /CONTENT.YIELDMANAGER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@COUNT.ASNETWORKS[1].TXT [ /COUNT.ASNETWORKS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@DATA.COREMETRICS[1].TXT [ /DATA.COREMETRICS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@DOUBLECLICK[2].TXT [ /DOUBLECLICK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@EAS.APM.EMEDIATE[1].TXT [ /EAS.APM.EMEDIATE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@EAS.APM.EMEDIATE[3].TXT [ /EAS.APM.EMEDIATE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@EAS4.EMEDIATE[1].TXT [ /EAS4.EMEDIATE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@EYEWONDER[2].TXT [ /EYEWONDER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@FASTCLICK[2].TXT [ /FASTCLICK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@HIMEDIA.INDIVIDUAD[1].TXT [ /HIMEDIA.INDIVIDUAD ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@INVITEMEDIA[1].TXT [ /INVITEMEDIA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@KABELBW.112.2O7[1].TXT [ /KABELBW.112.2O7 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@KOMTRACK[1].TXT [ /KOMTRACK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@KULTURFINDER-BW[2].TXT [ /KULTURFINDER-BW ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@LEGOLAS-MEDIA[1].TXT [ /LEGOLAS-MEDIA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@LIBRI.112.2O7[1].TXT [ /LIBRI.112.2O7 ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@MEDIAPLEX[2].TXT [ /MEDIAPLEX ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@PARTYPOKER[1].TXT [ /PARTYPOKER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@PROFILBANNER[2].TXT [ /PROFILBANNER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ROTATOR.ADJUGGLER[2].TXT [ /ROTATOR.ADJUGGLER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@SERVING-SYS[1].TXT [ /SERVING-SYS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@STATCOUNTER[1].TXT [ /STATCOUNTER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@STUDIVZ.ADFARM1.ADITION[2].TXT [ /STUDIVZ.ADFARM1.ADITION ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.ADFORM[1].TXT [ /TRACK.ADFORM ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACK.WEBTREKK[4].TXT [ /TRACK.WEBTREKK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.9FLATS[2].TXT [ /TRACKING.9FLATS ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.KLICKTEL[1].TXT [ /TRACKING.KLICKTEL ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.MINDSHARE[1].TXT [ /TRACKING.MINDSHARE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.QUISMA[2].TXT [ /TRACKING.QUISMA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRACKING.QUISMA[4].TXT [ /TRACKING.QUISMA ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRADEDOUBLER[2].TXT [ /TRADEDOUBLER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@TRAFFICTRACK[1].TXT [ /TRAFFICTRACK ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@USENEXT[1].TXT [ /USENEXT ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.1FREECOUNTER[1].TXT [ /WWW.1FREECOUNTER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.ACTIVE-TRACKING[1].TXT [ /WWW.ACTIVE-TRACKING ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.ETRACKER[1].TXT [ /WWW.ETRACKER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.GOOGLEADSERVICES[4].TXT [ /WWW.GOOGLEADSERVICES ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@WWW.GOOGLEADSERVICES[9].TXT [ /WWW.GOOGLEADSERVICES ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@XITI[1].TXT [ /XITI ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@YIELDMANAGER[1].TXT [ /YIELDMANAGER ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZANOX-AFFILIATE[1].TXT [ /ZANOX-AFFILIATE ]
C:\USERS\FRANZI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FRANZI@ZANOX[1].TXT [ /ZANOX ]

Malware:

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 7840

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

01.10.2011 23:22:26
mbam-log-2011-10-01 (23-22-18).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|G:\|)
Durchsuchte Objekte: 365785
Laufzeit: 2 Stunde(n), 46 Minute(n), 22 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Users\Franzi\start menu\Programs\Startup\wuT2.exe (Trojan.Dropper) -> No action taken.

und ESET:

ESETSmartInstaller@High as CAB hook log:
OnlineScanner64.ocx - registred OK
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=8.00.7600.16385 (win7_rtm.090713-1255)
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=02016d6e571cab4a9ff0113f04d5ea21
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-23 06:37:02
# local_time=2011-09-23 09:37:02 (+0300, Ostafrikanische Normalzeit)
# country="Germany"
# lang=1033
# osver=6.1.7600 NT
# compatibility_mode=1797 16775165 100 94 971378 53330100 1035420 0
# compatibility_mode=5121 16777213 100 75 26535818 30313211 0 0
# compatibility_mode=5893 16776574 66 85 34388956 68426729 0 0
# compatibility_mode=8192 67108863 100 0 464 464 0 0
# scanned=219635
# found=21
# cleaned=0
# scan_time=6143
C:\Users\Franzi\AppData\Local\Temp\hnimjkkubi Win32/Agent.TBW trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Franzi\Desktop\Tansania September 11\18-19 September.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\$RECYCLE.BIN.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\17.09.11.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\18-19 September.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\Action.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\Asterix.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\Bedtime Stories.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\Comedy.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\Die Madagascar Pinguine in vorweihnatlicher Mission.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\Dr. House.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\Horror.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\How I met your mother.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\New Moon.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\ohr.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\Simpsons.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\Sissi.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\System Volume Information.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\The Dark Knight (2008).lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\Vorstadtkrokodile.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I
G:\Zoey 101.lnk Win32/Dorkbot.D worm (unable to clean) 00000000000000000000000000000000 I

Danke :)
LG Franzi