Trojaner-Board
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Startmenü leer und Verknüpfungen überwiegend verschwunden (https://www.trojaner-board.de/110200-startmenue-leer-verknuepfungen-ueberwiegend-verschwunden.html)

cosinus 23.02.2012 21:31
Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehlalarm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C:) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg


Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, Verknüpfungen auf dem Desktop oder im Startmenü unter "alle Programme" fehlen, bitte unhide ausführen:
Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop.
Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )
http://www.trojaner-board.de/images/icons/icon4.gif Windows-Vista und Windows-7-User müssen das Tool per Rechtsklick als Administrator ausführen! http://www.trojaner-board.de/images/icons/icon4.gif

Shadow315 23.02.2012 23:44
Hier der TDSS-Killer Log:

Code:
23:21:36.0120 3056        TDSS rootkit removing tool 2.7.13.0 Feb 15 2012 19:33:14
23:21:36.0205 3056        ============================================================
23:21:36.0205 3056        Current date / time: 2012/02/23 23:21:36.0205
23:21:36.0205 3056        SystemInfo:
23:21:36.0205 3056       
23:21:36.0206 3056        OS Version: 6.0.6002 ServicePack: 2.0
23:21:36.0206 3056        Product type: Workstation
23:21:36.0206 3056        ComputerName: SHADOW315-PC
23:21:36.0206 3056        UserName: Shadow315
23:21:36.0206 3056        Windows directory: C:\Windows
23:21:36.0206 3056        System windows directory: C:\Windows
23:21:36.0206 3056        Processor architecture: Intel x86
23:21:36.0206 3056        Number of processors: 2
23:21:36.0206 3056        Page size: 0x1000
23:21:36.0206 3056        Boot type: Normal boot
23:21:36.0206 3056        ============================================================
23:21:37.0430 3056        Drive \Device\Harddisk0\DR0 - Size: 0x53D67B6000 (335.35 Gb), SectorSize: 0x200, Cylinders: 0xAB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
23:21:37.0513 3056        Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
23:21:37.0514 3056        \Device\Harddisk0\DR0:
23:21:37.0515 3056        MBR used
23:21:37.0515 3056        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x276AB000
23:21:37.0534 3056        \Device\Harddisk0\DR0\Partition1: MBR, Type 0xB, StartLBA 0x276AB83F, BlocksNum 0x2807182
23:21:37.0534 3056        \Device\Harddisk1\DR1:
23:21:37.0535 3056        MBR used
23:21:37.0535 3056        \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x74705982
23:21:37.0655 3056        Initialize success
23:21:37.0655 3056        ============================================================
23:40:40.0764 3844        ============================================================
23:40:40.0764 3844        Scan started
23:40:40.0764 3844        Mode: Manual; SigCheck; TDLFS;
23:40:40.0764 3844        ============================================================
23:40:41.0123 3844        a2acc          (05dac43a484272de87eac038814a7840) C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys
23:40:41.0279 3844        a2acc - ok
23:40:41.0357 3844        A2DDA          (f7eabca8375ea2dc6f35c4bca4757515) C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys
23:40:41.0404 3844        A2DDA - ok
23:40:41.0638 3844        ACPI            (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
23:40:41.0669 3844        ACPI - ok
23:40:41.0716 3844        adp94xx        (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys
23:40:41.0747 3844        adp94xx - ok
23:40:41.0841 3844        adpahci        (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys
23:40:41.0903 3844        adpahci - ok
23:40:41.0934 3844        adpu160m        (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys
23:40:41.0965 3844        adpu160m - ok
23:40:41.0997 3844        adpu320        (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys
23:40:42.0028 3844        adpu320 - ok
23:40:42.0215 3844        AFD            (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
23:40:42.0340 3844        AFD - ok
23:40:42.0465 3844        aic78xx        (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
23:40:42.0496 3844        aic78xx - ok
23:40:42.0527 3844        aliide          (496eda16a127ac9a38bb285bef17dbb5) C:\Windows\system32\drivers\aliide.sys
23:40:42.0543 3844        aliide - ok
23:40:42.0636 3844        amdagp          (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys
23:40:42.0667 3844        amdagp - ok
23:40:42.0699 3844        amdide          (6f65f4147c54398d7280b18cebbed215) C:\Windows\system32\drivers\amdide.sys
23:40:42.0730 3844        amdide - ok
23:40:42.0745 3844        amdiox86        (ff258424f0b2ef25eb98f04ee386e6e3) C:\Windows\system32\DRIVERS\amdiox86.sys
23:40:42.0777 3844        amdiox86 - ok
23:40:42.0808 3844        AmdK7          (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys
23:40:43.0026 3844        AmdK7 - ok
23:40:43.0167 3844        AmdK8          (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\DRIVERS\amdk8.sys
23:40:43.0307 3844        AmdK8 - ok
23:40:45.0117 3844        amdkmdag        (fef6346529b840ae859de65a0f4773d2) C:\Windows\system32\DRIVERS\atikmdag.sys
23:40:45.0522 3844        amdkmdag - ok
23:40:45.0803 3844        amdkmdap        (0e245c8be29baf0084b95c4d16542a79) C:\Windows\system32\DRIVERS\atikmpag.sys
23:40:45.0865 3844        amdkmdap - ok
23:40:45.0975 3844        arc            (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys
23:40:46.0006 3844        arc - ok
23:40:46.0037 3844        arcsas          (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys
23:40:46.0053 3844        arcsas - ok
23:40:46.0162 3844        AsyncMac        (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
23:40:46.0240 3844        AsyncMac - ok
23:40:46.0489 3844        atapi          (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
23:40:46.0505 3844        atapi - ok
23:40:46.0583 3844        AtiHDAudioService (f71b6ee018eadf4cfd52f3c83847e5f6) C:\Windows\system32\drivers\AtihdLH3.sys
23:40:46.0630 3844        AtiHDAudioService - ok
23:40:47.0223 3844        atikmdag        (fef6346529b840ae859de65a0f4773d2) C:\Windows\system32\DRIVERS\atikmdag.sys
23:40:47.0441 3844        atikmdag - ok
23:40:47.0644 3844        Beep            (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
23:40:47.0675 3844        Beep - ok
23:40:47.0784 3844        blbdrive - ok
23:40:47.0847 3844        bowser          (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
23:40:47.0940 3844        bowser - ok
23:40:48.0049 3844        BrFiltLo        (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
23:40:48.0159 3844        BrFiltLo - ok
23:40:48.0190 3844        BrFiltUp        (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
23:40:48.0237 3844        BrFiltUp - ok
23:40:48.0315 3844        Brserid        (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
23:40:48.0393 3844        Brserid - ok
23:40:48.0502 3844        BrSerWdm        (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
23:40:48.0595 3844        BrSerWdm - ok
23:40:48.0751 3844        BrUsbMdm        (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
23:40:48.0783 3844        BrUsbMdm - ok
23:40:48.0829 3844        BrUsbSer        (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
23:40:48.0892 3844        BrUsbSer - ok
23:40:48.0954 3844        BTHMODEM        (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
23:40:49.0032 3844        BTHMODEM - ok
23:40:49.0344 3844        catchme - ok
23:40:49.0687 3844        cdfs            (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
23:40:49.0781 3844        cdfs - ok
23:40:49.0937 3844        cdrom          (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
23:40:50.0046 3844        cdrom - ok
23:40:50.0249 3844        circlass        (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys
23:40:50.0296 3844        circlass - ok
23:40:50.0343 3844        CLFS            (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
23:40:50.0389 3844        CLFS - ok
23:40:50.0499 3844        cmdide          (59172a0724f2ab769f31d61b0571d75b) C:\Windows\system32\drivers\cmdide.sys
23:40:50.0530 3844        cmdide - ok
23:40:50.0561 3844        Compbatt        (82b8c91d327cfecf76cb58716f7d4997) C:\Windows\system32\drivers\compbatt.sys
23:40:50.0577 3844        Compbatt - ok
23:40:50.0608 3844        crcdisk        (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys
23:40:50.0623 3844        crcdisk - ok
23:40:50.0670 3844        Crusoe          (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys
23:40:50.0733 3844        Crusoe - ok
23:40:50.0779 3844        DfsC            (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
23:40:50.0873 3844        DfsC - ok
23:40:51.0060 3844        disk            (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
23:40:51.0107 3844        disk - ok
23:40:51.0154 3844        drmkaud        (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
23:40:51.0201 3844        drmkaud - ok
23:40:51.0294 3844        dtsoftbus01    (687af6bb383885ff6a64071b189a7f3e) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
23:40:51.0388 3844        dtsoftbus01 - ok
23:40:51.0637 3844        DXGKrnl        (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
23:40:51.0715 3844        DXGKrnl - ok
23:40:51.0747 3844        E1G60          (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys
23:40:51.0840 3844        E1G60 - ok
23:40:52.0168 3844        Ecache          (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
23:40:52.0199 3844        Ecache - ok
23:40:52.0261 3844        elxstor        (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys
23:40:52.0293 3844        elxstor - ok
23:40:52.0371 3844        exfat          (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
23:40:52.0449 3844        exfat - ok
23:40:52.0901 3844        fastfat        (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
23:40:52.0948 3844        fastfat - ok
23:40:53.0291 3844        fdc            (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys
23:40:53.0369 3844        fdc - ok
23:40:53.0447 3844        FETNDIS        (b2b2c38e916184ff8523c7439ddd417f) C:\Windows\system32\DRIVERS\fetnd5.sys
23:40:53.0525 3844        FETNDIS - ok
23:40:53.0853 3844        FileInfo        (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
23:40:53.0899 3844        FileInfo - ok
23:40:54.0009 3844        Filetrace      (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
23:40:54.0055 3844        Filetrace - ok
23:40:54.0087 3844        flpydisk        (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys
23:40:54.0165 3844        flpydisk - ok
23:40:54.0648 3844        FltMgr          (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
23:40:54.0695 3844        FltMgr - ok
23:40:54.0757 3844        FreshIO        (caac750e6d27866c28494e0de9fa802a) C:\Program Files\FreshDevices\FreshDiagnose\FreshIO.sys
23:40:54.0820 3844        FreshIO ( UnsignedFile.Multi.Generic ) - warning
23:40:54.0820 3844        FreshIO - detected UnsignedFile.Multi.Generic (1)
23:40:54.0991 3844        fssfltr        (d909075fa72c090f27aa926c32cb4612) C:\Windows\system32\DRIVERS\fssfltr.sys
23:40:55.0054 3844        fssfltr - ok
23:40:55.0132 3844        Fs_Rec          (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
23:40:55.0194 3844        Fs_Rec - ok
23:40:55.0272 3844        gagp30kx        (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys
23:40:55.0303 3844        gagp30kx - ok
23:40:55.0428 3844        GEARAspiWDM    (ab8a6a87d9d7255c3884d5b9541a6e80) C:\Windows\system32\Drivers\GEARAspiWDM.sys
23:40:55.0475 3844        GEARAspiWDM - ok
23:40:55.0537 3844        HdAudAddService (3f90e001369a07243763bd5a523d8722) C:\Windows\system32\drivers\HdAudio.sys
23:40:55.0631 3844        HdAudAddService - ok
23:40:55.0693 3844        HDAudBus        (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
23:40:55.0803 3844        HDAudBus - ok
23:40:56.0021 3844        HidBth          (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
23:40:56.0115 3844        HidBth - ok
23:40:56.0255 3844        HidIr          (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
23:40:56.0333 3844        HidIr - ok
23:40:56.0661 3844        HidUsb          (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
23:40:56.0723 3844        HidUsb - ok
23:40:56.0770 3844        HpCISSs        (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys
23:40:56.0785 3844        HpCISSs - ok
23:40:57.0051 3844        HTTP            (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
23:40:57.0160 3844        HTTP - ok
23:40:57.0441 3844        i2omp          (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys
23:40:57.0487 3844        i2omp - ok
23:40:57.0690 3844        i8042prt        (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
23:40:57.0768 3844        i8042prt - ok
23:40:58.0080 3844        iaStorV        (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys
23:40:58.0143 3844        iaStorV - ok
23:40:58.0174 3844        iirsp          (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
23:40:58.0205 3844        iirsp - ok
23:40:58.0299 3844        intelide        (e5ea1c17da5065032e346591ff64f3af) C:\Windows\system32\drivers\intelide.sys
23:40:58.0314 3844        intelide - ok
23:40:58.0361 3844        intelppm        (ce44cc04262f28216dd4341e9e36a16f) C:\Windows\system32\DRIVERS\intelppm.sys
23:40:58.0423 3844        intelppm - ok
23:40:58.0704 3844        IpFilterDriver  (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
23:40:58.0798 3844        IpFilterDriver - ok
23:40:58.0907 3844        IpInIp - ok
23:40:59.0047 3844        IPMIDRV        (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys
23:40:59.0157 3844        IPMIDRV - ok
23:40:59.0297 3844        IPNAT          (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
23:40:59.0391 3844        IPNAT - ok
23:40:59.0734 3844        IRENUM          (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
23:40:59.0812 3844        IRENUM - ok
23:41:00.0155 3844        isapnp          (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys
23:41:00.0202 3844        isapnp - ok
23:41:00.0249 3844        iScsiPrt        (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
23:41:00.0264 3844        iScsiPrt - ok
23:41:00.0327 3844        iteatapi        (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
23:41:00.0358 3844        iteatapi - ok
23:41:00.0373 3844        iteraid        (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
23:41:00.0389 3844        iteraid - ok
23:41:00.0436 3844        kbdclass        (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
23:41:00.0467 3844        kbdclass - ok
23:41:00.0561 3844        kbdhid          (d2600cb17b7408b4a83f231dc9a11ac3) C:\Windows\system32\drivers\kbdhid.sys
23:41:00.0623 3844        kbdhid - ok
23:41:00.0935 3844        KSecDD          (2b2f1638466e8cb091400c9019cc730e) C:\Windows\system32\Drivers\ksecdd.sys
23:41:00.0997 3844        KSecDD - ok
23:41:01.0294 3844        lltdio          (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
23:41:01.0387 3844        lltdio - ok
23:41:01.0731 3844        LSI_FC          (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys
23:41:01.0762 3844        LSI_FC - ok
23:41:01.0793 3844        LSI_SAS        (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys
23:41:01.0824 3844        LSI_SAS - ok
23:41:01.0887 3844        LSI_SCSI        (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys
23:41:01.0902 3844        LSI_SCSI - ok
23:41:01.0965 3844        luafv          (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
23:41:02.0058 3844        luafv - ok
23:41:02.0199 3844        LVRS            (b6e1ccd6572984adcae68439afd07011) C:\Windows\system32\DRIVERS\lvrs.sys
23:41:02.0261 3844        LVRS - ok
23:41:02.0604 3844        LVUVC          (6c42815dd57e397f0cd988304b5eb4b3) C:\Windows\system32\DRIVERS\lvuvc.sys
23:41:02.0807 3844        LVUVC - ok
23:41:02.0916 3844        MBAMProtector  (b7ca8cc3f978201856b6ab82f40953c3) C:\Windows\system32\drivers\mbam.sys
23:41:02.0932 3844        MBAMProtector - ok
23:41:03.0057 3844        megasas        (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys
23:41:03.0088 3844        megasas - ok
23:41:03.0213 3844        Modem          (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
23:41:03.0259 3844        Modem - ok
23:41:03.0353 3844        monitor        (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
23:41:03.0431 3844        monitor - ok
23:41:03.0462 3844        mouclass        (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
23:41:03.0493 3844        mouclass - ok
23:41:03.0509 3844        mouhid          (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
23:41:03.0571 3844        mouhid - ok
23:41:03.0837 3844        MountMgr        (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
23:41:03.0883 3844        MountMgr - ok
23:41:03.0946 3844        MpFilter        (fee0baded54222e9f1dae9541212aab1) C:\Windows\system32\DRIVERS\MpFilter.sys
23:41:04.0008 3844        MpFilter - ok
23:41:04.0055 3844        mpio            (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys
23:41:04.0086 3844        mpio - ok
23:41:04.0211 3844        MpKsle98d41d8  (a69630d039c38018689190234f866d77) c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7D11FFAB-A961-4D3A-A218-8EF13C3083B8}\MpKsle98d41d8.sys
23:41:04.0242 3844        MpKsle98d41d8 - ok
23:41:04.0336 3844        MpNWMon        (2c3489660d4a8d514c123c3f0d67df46) C:\Windows\system32\DRIVERS\MpNWMon.sys
23:41:04.0351 3844        MpNWMon - ok
23:41:04.0554 3844        mpsdrv          (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
23:41:04.0601 3844        mpsdrv - ok
23:41:04.0710 3844        Mraid35x        (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
23:41:04.0741 3844        Mraid35x - ok
23:41:04.0788 3844        MRxDAV          (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
23:41:04.0835 3844        MRxDAV - ok
23:41:05.0069 3844        mrxsmb          (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
23:41:05.0147 3844        mrxsmb - ok
23:41:05.0225 3844        mrxsmb10        (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
23:41:05.0287 3844        mrxsmb10 - ok
23:41:05.0381 3844        mrxsmb20        (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
23:41:05.0459 3844        mrxsmb20 - ok
23:41:05.0553 3844        msahci          (86068b8b54a5eb092f51657f00b2222a) C:\Windows\system32\drivers\msahci.sys
23:41:05.0584 3844        msahci - ok
23:41:05.0615 3844        msdsm          (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys
23:41:05.0662 3844        msdsm - ok
23:41:05.0911 3844        Msfs            (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
23:41:05.0974 3844        Msfs - ok
23:41:06.0021 3844        msisadrv        (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
23:41:06.0036 3844        msisadrv - ok
23:41:06.0067 3844        MSKSSRV        (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
23:41:06.0130 3844        MSKSSRV - ok
23:41:06.0223 3844        MSPCLOCK        (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
23:41:06.0270 3844        MSPCLOCK - ok
23:41:06.0317 3844        MSPQM          (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
23:41:06.0364 3844        MSPQM - ok
23:41:06.0457 3844        MsRPC          (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
23:41:06.0520 3844        MsRPC - ok
23:41:06.0769 3844        mssmbios        (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
23:41:06.0801 3844        mssmbios - ok
23:41:06.0832 3844        MSTEE          (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
23:41:06.0863 3844        MSTEE - ok
23:41:06.0941 3844        Mup            (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
23:41:06.0972 3844        Mup - ok
23:41:07.0066 3844        NativeWifiP    (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
23:41:07.0159 3844        NativeWifiP - ok
23:41:07.0612 3844        NDIS            (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
23:41:07.0659 3844        NDIS - ok
23:41:07.0705 3844        NdisTapi        (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
23:41:07.0752 3844        NdisTapi - ok
23:41:07.0861 3844        Ndisuio        (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
23:41:07.0908 3844        Ndisuio - ok
23:41:07.0955 3844        NdisWan        (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
23:41:08.0002 3844        NdisWan - ok
23:41:08.0267 3844        NDProxy        (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
23:41:08.0361 3844        NDProxy - ok
23:41:08.0485 3844        NetBIOS        (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
23:41:08.0548 3844        NetBIOS - ok
23:41:08.0595 3844        netbt          (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
23:41:08.0688 3844        netbt - ok
23:41:08.0953 3844        nfrd960        (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
23:41:08.0985 3844        nfrd960 - ok
23:41:09.0047 3844        NisDrv          (7b01c6172cfd0b10116175e09200d4b4) C:\Windows\system32\DRIVERS\NisDrvWFP.sys
23:41:09.0078 3844        NisDrv - ok
23:41:09.0141 3844        nmwcd          (c82f4cc10ad315b6d6bcb14d0a7cad66) C:\Windows\system32\drivers\ccdcmb.sys
23:41:09.0203 3844        nmwcd - ok
23:41:09.0406 3844        nmwcdc          (60ef5f5621d7832f00a3f190a0c905e2) C:\Windows\system32\drivers\ccdcmbo.sys
23:41:09.0453 3844        nmwcdc - ok
23:41:09.0843 3844        Npfs            (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
23:41:09.0921 3844        Npfs - ok
23:41:10.0077 3844        nsiproxy        (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
23:41:10.0139 3844        nsiproxy - ok
23:41:10.0669 3844        Ntfs            (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
23:41:10.0857 3844        Ntfs - ok
23:41:11.0169 3844        ntrigdigi      (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
23:41:11.0215 3844        ntrigdigi - ok
23:41:11.0262 3844        Null            (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
23:41:11.0309 3844        Null - ok
23:41:11.0340 3844        nvraid          (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys
23:41:11.0371 3844        nvraid - ok
23:41:11.0387 3844        nvstor          (9e0ba19a28c498a6d323d065db76dffc) C:\Windows\system32\drivers\nvstor.sys
23:41:11.0418 3844        nvstor - ok
23:41:11.0449 3844        nv_agp          (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys
23:41:11.0481 3844        nv_agp - ok
23:41:11.0559 3844        NwlnkFlt - ok
23:41:11.0621 3844        NwlnkFwd - ok
23:41:11.0699 3844        ohci1394        (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
23:41:11.0777 3844        ohci1394 - ok
23:41:12.0198 3844        Parport        (8a79fdf04a73428597e2caf9d0d67850) C:\Windows\system32\DRIVERS\parport.sys
23:41:12.0292 3844        Parport - ok
23:41:12.0463 3844        partmgr        (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
23:41:12.0495 3844        partmgr - ok
23:41:12.0791 3844        Parvdm          (6c580025c81caf3ae9e3617c22cad00e) C:\Windows\system32\DRIVERS\parvdm.sys
23:41:12.0838 3844        Parvdm - ok
23:41:13.0165 3844        pci            (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
23:41:13.0212 3844        pci - ok
23:41:13.0290 3844        pciide          (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys
23:41:13.0306 3844        pciide - ok
23:41:13.0321 3844        pcmcia          (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
23:41:13.0353 3844        pcmcia - ok
23:41:13.0415 3844        PEAUTH          (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
23:41:13.0555 3844        PEAUTH - ok
23:41:13.0680 3844        PptpMiniport    (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
23:41:13.0774 3844        PptpMiniport - ok
23:41:13.0836 3844        Processor      (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys
23:41:13.0914 3844        Processor - ok
23:41:14.0023 3844        PSched          (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
23:41:14.0101 3844        PSched - ok
23:41:14.0195 3844        ql2300          (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys
23:41:14.0242 3844        ql2300 - ok
23:41:14.0273 3844        ql40xx          (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
23:41:14.0304 3844        ql40xx - ok
23:41:14.0335 3844        QWAVEdrv        (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
23:41:14.0382 3844        QWAVEdrv - ok
23:41:16.0067 3844        R300            (fef6346529b840ae859de65a0f4773d2) C:\Windows\system32\DRIVERS\atikmdag.sys
23:41:16.0285 3844        R300 - ok
23:41:16.0691 3844        RasAcd          (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
23:41:16.0753 3844        RasAcd - ok
23:41:16.0878 3844        Rasl2tp        (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
23:41:16.0987 3844        Rasl2tp - ok
23:41:17.0253 3844        RasPppoe        (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
23:41:17.0331 3844        RasPppoe - ok
23:41:17.0471 3844        RasSstp        (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
23:41:17.0565 3844        RasSstp - ok
23:41:17.0752 3844        rdbss          (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
23:41:17.0845 3844        rdbss - ok
23:41:17.0939 3844        RDPCDD          (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
23:41:17.0970 3844        RDPCDD - ok
23:41:18.0017 3844        rdpdr          (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys
23:41:18.0079 3844        rdpdr - ok
23:41:18.0142 3844        RDPENCDD        (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
23:41:18.0173 3844        RDPENCDD - ok
23:41:18.0204 3844        RDPWD          (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
23:41:18.0313 3844        RDPWD - ok
23:41:18.0423 3844        rspndr          (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
23:41:18.0501 3844        rspndr - ok
23:41:18.0594 3844        RTL8169        (2d19a7469ea19993d0c12e627f4530bc) C:\Windows\system32\DRIVERS\Rtlh86.sys
23:41:18.0610 3844        RTL8169 - ok
23:41:18.0781 3844        sbp2port        (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
23:41:18.0828 3844        sbp2port - ok
23:41:18.0937 3844        secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
23:41:19.0000 3844        secdrv - ok
23:41:19.0203 3844        Serenum        (ce9ec966638ef0b10b864ddedf62a099) C:\Windows\system32\DRIVERS\serenum.sys
23:41:19.0249 3844        Serenum - ok
23:41:19.0405 3844        Serial          (6d663022db3e7058907784ae14b69898) C:\Windows\system32\DRIVERS\serial.sys
23:41:19.0546 3844        Serial - ok
23:41:19.0889 3844        sermouse        (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
23:41:19.0920 3844        sermouse - ok
23:41:19.0983 3844        sffdisk        (103b79418da647736ee95645f305f68a) C:\Windows\system32\drivers\sffdisk.sys
23:41:20.0045 3844        sffdisk - ok
23:41:20.0092 3844        sffp_mmc        (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys
23:41:20.0139 3844        sffp_mmc - ok
23:41:20.0185 3844        sffp_sd        (9cfa05fcfcb7124e69cfc812b72f9614) C:\Windows\system32\drivers\sffp_sd.sys
23:41:20.0217 3844        sffp_sd - ok
23:41:20.0263 3844        sfloppy        (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
23:41:20.0326 3844        sfloppy - ok
23:41:20.0373 3844        SiSRaid2        (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys
23:41:20.0388 3844        SiSRaid2 - ok
23:41:20.0404 3844        SiSRaid4        (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys
23:41:20.0435 3844        SiSRaid4 - ok
23:41:20.0513 3844        Smb            (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
23:41:20.0607 3844        Smb - ok
23:41:20.0841 3844        spldr          (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
23:41:20.0872 3844        spldr - ok
23:41:20.0965 3844        srv            (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
23:41:21.0043 3844        srv - ok
23:41:21.0106 3844        srv2            (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
23:41:21.0153 3844        srv2 - ok
23:41:21.0418 3844        srvnet          (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
23:41:21.0511 3844        srvnet - ok
23:41:21.0917 3844        swenum          (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
23:41:21.0948 3844        swenum - ok
23:41:21.0995 3844        Symc8xx        (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
23:41:22.0011 3844        Symc8xx - ok
23:41:22.0026 3844        Sym_hi          (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
23:41:22.0057 3844        Sym_hi - ok
23:41:22.0057 3844        Sym_u3          (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
23:41:22.0089 3844        Sym_u3 - ok
23:41:22.0666 3844        Tcpip          (16731b631f28f63cd9f4cb60940e7ddd) C:\Windows\system32\drivers\tcpip.sys
23:41:22.0759 3844        Tcpip - ok
23:41:23.0025 3844        Tcpip6          (16731b631f28f63cd9f4cb60940e7ddd) C:\Windows\system32\DRIVERS\tcpip.sys
23:41:23.0087 3844        Tcpip6 - ok
23:41:23.0368 3844        tcpipreg        (3fc13f09af9be487c7b4fac4070a036c) C:\Windows\system32\drivers\tcpipreg.sys
23:41:23.0446 3844        tcpipreg - ok
23:41:23.0727 3844        TDPIPE          (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
23:41:23.0789 3844        TDPIPE - ok
23:41:23.0883 3844        TDTCP          (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
23:41:23.0961 3844        TDTCP - ok
23:41:24.0195 3844        tdx            (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
23:41:24.0335 3844        tdx - ok
23:41:24.0787 3844        TermDD          (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
23:41:24.0834 3844        TermDD - ok
23:41:25.0115 3844        tssecsrv        (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
23:41:25.0177 3844        tssecsrv - ok
23:41:25.0302 3844        tunmp          (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
23:41:25.0349 3844        tunmp - ok
23:41:25.0583 3844        tunnel          (119b8184e106baedc83fce5ddf3950da) C:\Windows\system32\DRIVERS\tunnel.sys
23:41:25.0645 3844        tunnel - ok
23:41:25.0755 3844        uagp35          (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\DRIVERS\uagp35.sys
23:41:25.0801 3844        uagp35 - ok
23:41:25.0864 3844        udfs            (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
23:41:25.0942 3844        udfs - ok
23:41:26.0035 3844        uliagpkx        (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys
23:41:26.0082 3844        uliagpkx - ok
23:41:26.0098 3844        uliahci        (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys
23:41:26.0145 3844        uliahci - ok
23:41:26.0425 3844        UlSata          (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
23:41:26.0457 3844        UlSata - ok
23:41:26.0503 3844        ulsata2        (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
23:41:26.0535 3844        ulsata2 - ok
23:41:26.0566 3844        umbus          (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
23:41:26.0613 3844        umbus - ok
23:41:26.0675 3844        upperdev        (bb16932a4189e82d6c455042c11849b6) C:\Windows\system32\DRIVERS\usbser_lowerflt.sys
23:41:26.0722 3844        upperdev - ok
23:41:26.0753 3844        usbaudio        (32db9517628ff0d070682aab61e688f0) C:\Windows\system32\drivers\usbaudio.sys
23:41:26.0831 3844        usbaudio - ok
23:41:27.0174 3844        usbccgp        (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
23:41:27.0283 3844        usbccgp - ok
23:41:27.0580 3844        usbcir          (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
23:41:27.0705 3844        usbcir - ok
23:41:27.0876 3844        usbehci        (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
23:41:27.0939 3844        usbehci - ok
23:41:27.0970 3844        usbhub          (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
23:41:28.0032 3844        usbhub - ok
23:41:28.0313 3844        usbohci        (ce697fee0d479290d89bec80dfe793b7) C:\Windows\system32\DRIVERS\usbohci.sys
23:41:28.0360 3844        usbohci - ok
23:41:28.0391 3844        usbprint        (b51e52acf758be00ef3a58ea452fe360) C:\Windows\system32\drivers\usbprint.sys
23:41:28.0453 3844        usbprint - ok
23:41:28.0516 3844        usbser          (d575246188f63de0accf6eac5fb59e6a) C:\Windows\system32\DRIVERS\usbser.sys
23:41:28.0563 3844        usbser - ok
23:41:28.0594 3844        UsbserFilt      (e748d50b3b2ec7f40a2ba67fb094cf01) C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys
23:41:28.0625 3844        UsbserFilt - ok
23:41:28.0656 3844        USBSTOR        (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
23:41:28.0719 3844        USBSTOR - ok
23:41:29.0093 3844        usbuhci        (325dbbacb8a36af9988ccf40eac228cc) C:\Windows\system32\DRIVERS\usbuhci.sys
23:41:29.0155 3844        usbuhci - ok
23:41:29.0296 3844        usbvideo        (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
23:41:29.0327 3844        usbvideo - ok
23:41:29.0577 3844        vga            (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys
23:41:29.0655 3844        vga - ok
23:41:29.0748 3844        VgaSave        (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
23:41:29.0826 3844        VgaSave - ok
23:41:29.0889 3844        viaagp          (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys
23:41:29.0935 3844        viaagp - ok
23:41:30.0123 3844        ViaC7          (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys
23:41:30.0201 3844        ViaC7 - ok
23:41:30.0466 3844        viaide          (7aa7ec9a08dc2c39649c413b1a26e298) C:\Windows\system32\drivers\viaide.sys
23:41:30.0497 3844        viaide - ok
23:41:30.0528 3844        volmgr          (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
23:41:30.0559 3844        volmgr - ok
23:41:30.0653 3844        volmgrx        (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
23:41:30.0715 3844        volmgrx - ok
23:41:31.0012 3844        volsnap        (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
23:41:31.0059 3844        volsnap - ok
23:41:31.0183 3844        vsmraid        (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys
23:41:31.0230 3844        vsmraid - ok
23:41:31.0417 3844        WacomPen        (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
23:41:31.0480 3844        WacomPen - ok
23:41:31.0667 3844        Wanarp          (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
23:41:31.0745 3844        Wanarp - ok
23:41:31.0776 3844        Wanarpv6        (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
23:41:31.0823 3844        Wanarpv6 - ok
23:41:32.0119 3844        Wd              (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys
23:41:32.0151 3844        Wd - ok
23:41:32.0213 3844        Wdf01000        (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
23:41:32.0244 3844        Wdf01000 - ok
23:41:32.0416 3844        WmiAcpi        (701a9f884a294327e9141d73746ee279) C:\Windows\system32\drivers\wmiacpi.sys
23:41:32.0478 3844        WmiAcpi - ok
23:41:32.0541 3844        WpdUsb          (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
23:41:32.0619 3844        WpdUsb - ok
23:41:32.0837 3844        ws2ifsl        (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
23:41:32.0884 3844        ws2ifsl - ok
23:41:32.0946 3844        WUDFRd          (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
23:41:33.0055 3844        WUDFRd - ok
23:41:33.0087 3844        MBR (0x1B8)    (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
23:41:33.0477 3844        \Device\Harddisk0\DR0 - ok
23:41:33.0477 3844        MBR (0x1B8)    (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk1\DR1
23:41:33.0633 3844        \Device\Harddisk1\DR1 - ok
23:41:33.0664 3844        Boot (0x1200)  (3a4550dff08573ed6059fa8e4cbcbb42) \Device\Harddisk0\DR0\Partition0
23:41:33.0664 3844        \Device\Harddisk0\DR0\Partition0 - ok
23:41:33.0679 3844        Boot (0x1200)  (81ffe6bde6ef7541e96011620057ba48) \Device\Harddisk0\DR0\Partition1
23:41:33.0679 3844        \Device\Harddisk0\DR0\Partition1 - ok
23:41:33.0695 3844        Boot (0x1200)  (978558cc10777eb89e5b62c3a87b4164) \Device\Harddisk1\DR1\Partition0
23:41:33.0695 3844        \Device\Harddisk1\DR1\Partition0 - ok
23:41:33.0695 3844        ============================================================
23:41:33.0695 3844        Scan finished
23:41:33.0695 3844        ============================================================
23:41:33.0695 5124        Detected object count: 1
23:41:33.0695 5124        Actual detected object count: 1
23:41:46.0830 5124        FreshIO ( UnsignedFile.Multi.Generic ) - skipped by user
23:41:46.0830 5124        FreshIO ( UnsignedFile.Multi.Generic ) - User select action: Skip
Werde jetzt erstmal abwarten, bevor ich unhide ausführe oder sonstwas
mache. :)

cosinus 24.02.2012 11:06
Ok. Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).

Shadow315 24.02.2012 16:34
GMER funktioniert wie in der Erklärung erwähnt bei mir auch nicht.
Daher hier die anderen Logs.

OSAM-Log:
Code:
Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 14:17:29 on 24.02.2012

OS: Windows Vista Home Premium Edition Service Pack 2 (Build 6002), 32-bit
Default Browser: Mozilla Corporation Firefox 10.0.2

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"DivXControlPanelApplet.cpl" - "DivX, Inc." - C:\Windows\system32\DivXControlPanelApplet.cpl
"FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\Windows\system32\FlashPlayerCPLApp.cpl
"PhysX.cpl" - "NVIDIA Corporation" - C:\Windows\system32\PhysX.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"Nero BurnRights" - "Nero AG" - C:\Program Files\Nero\Nero 9\Nero BurnRights\NeroBurnRights_cpl.cpl
"Pando" - "Pando Networks" - C:\Program Files\Pando Networks\Media Booster\PMB.cpl
"QuickTime" - "Apple Inc." - C:\Program Files\QuickTime\QTSystem\QuickTime.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"A2 Direct Disk Access Support Driver" (A2DDA) - "Emsi Software GmbH" - C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys
"a2acc" (a2acc) - "Emsi Software GmbH" - C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys
"catchme" (catchme) - ? - C:\ComboFix\catchme.sys  (File not found)
"FreshIO" (FreshIO) - ? - C:\Program Files\FreshDevices\FreshDiagnose\FreshIO.sys  (File found, but it contains no detailed information)
"FssFltr" (fssfltr) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\fssfltr.sys
"IP in IP Tunnel Driver" (IpInIp) - ? - C:\Windows\System32\DRIVERS\ipinip.sys  (File not found)
"IPX Traffic Filter Driver" (NwlnkFlt) - ? - C:\Windows\System32\DRIVERS\nwlnkflt.sys  (File not found)
"IPX Traffic Forwarder Driver" (NwlnkFwd) - ? - C:\Windows\System32\DRIVERS\nwlnkfwd.sys  (File not found)
"MBAMProtector" (MBAMProtector) - "Malwarebytes Corporation" - C:\Windows\system32\drivers\mbam.sys
"MpKsl98e08d68" (MpKsl98e08d68) - "Microsoft Corporation" - c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7D11FFAB-A961-4D3A-A218-8EF13C3083B8}\MpKsl98e08d68.sys
"ugroiuog" (ugroiuog) - ? - C:\Users\SHADOW~1\AppData\Local\Temp\ugroiuog.sys  (Hidden registry entry, rootkit activity | File not found)

[Explorer]
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
{0561EC90-CE54-4f0c-9C55-E226110A740C} "{0561EC90-CE54-4f0c-9C55-E226110A740C}" - ? -  (File not found | COM-object registry key not found)
-----( HKLM\Software\Classes\Protocols\Handler )-----
{E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} "Album Download IE Asynchronous Pluggable Protocol Interface" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
{828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\Program Files\Windows Live\Messenger\msgrapp.dll
{828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Messenger\msgrapp.dll
{03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Program Files\Windows Live\Mail\mailcomm.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? -  (File not found | COM-object registry key not found)
{AB77609F-2178-4E6F-9C4B-44AC179D937A} "a-squared Anti-Malware Shell Extension" - "Emsi Software GmbH" - C:\Program Files\Emsisoft Anti-Malware\a2contmenu.dll
{1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? -  (File not found | COM-object registry key not found)
{34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? -  (File not found | COM-object registry key not found)
{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? -  (File not found | COM-object registry key not found)
{09A47860-11B0-4DA5-AFA5-26D86198A780} "EPP" - "Microsoft Corporation" - c:\PROGRA~1\MI239C~1\shellext.dll
{2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? -  (File not found | COM-object registry key not found)
{00020d75-0000-0000-c000-000000000046} "lnkfile" - ? -  (File not found | COM-object registry key not found)
{97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2} "NeroCoverEdLiveIcons Class" - "Nero AG" - C:\Program Files\Nero\Nero 9\Nero CoverDesigner\CoverEdExtension.dll
{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class" - "RealNetworks, Inc." - C:\Program Files\Real\RealPlayer\rpshell.dll
{C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? -  (File not found | COM-object registry key not found)
{E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? -  (File not found | COM-object registry key not found)
{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - ? -  (File not found | COM-object registry key not found)
{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -  (File not found | COM-object registry key not found)
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - ? - C:\Program Files\WinRAR\rarext.dll  (File found, but it contains no detailed information)
{06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
ITBar7Height "ITBar7Height" - ? -  (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -  (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_25" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} "Java Plug-in 1.6.0_25" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} "@C:\Program Files\Windows Live\Companion\companionlang.dll,-600" - "Microsoft Corporation" - C:\Program Files\Windows Live\Companion\companioncore.dll
{5F7B1267-94A9-47F5-98DB-E99415F33AEC} "@C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004" - "Microsoft Corporation" - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll
{3049C3E9-B461-4BC5-8870-4C09146192CA} "RealPlayer Download and Record Plugin for Internet Explorer" - "RealPlayer" - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live ID Sign-in Helper" - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
{9FDDE16B-836F-4806-AB1F-1455CBEFF289} "Windows Live Messenger Companion Helper" - "Microsoft Corporation" - C:\Program Files\Windows Live\Companion\companioncore.dll

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\Users\Shadow315\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"DAEMON Tools Lite" - ? - "J:\DAEMON Tools Lite\DTLite.exe" -autorun  (File not found)
"msnmsgr" - "Microsoft Corporation" - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Malwarebytes' Anti-Malware" - "Malwarebytes Corporation" - "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"MSC" - "Microsoft Corporation" - "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243" (NisSrv) - "Microsoft Corporation" - c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
"@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100" (WPFFontCache_v0400) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
"AMD FUEL Service" (AMD FUEL Service) - "Advanced Micro Devices, Inc." - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
"Bing Bar Update Service" (BBSvc) - "Microsoft Corporation." - C:\Program Files\Microsoft\BingBar\BBSvc.EXE
"Emsisoft Anti-Malware 6.0 - Service" (a2AntiMalware) - "Emsi Software GmbH" - C:\Program Files\Emsisoft Anti-Malware\a2service.exe
"Google Update Service (gupdate)" (gupdate) - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe
"Google Update-Dienst (gupdatem)" (gupdatem) - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe
"MBAMService" (MBAMService) - "Malwarebytes Corporation" - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
"Microsoft Antimalware Service" (MsMpSvc) - "Microsoft Corporation" - c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
"SeaPort" (SeaPort) - "Microsoft Corporation" - C:\Program Files\Microsoft\BingBar\SeaPort.EXE
"Steam Client Service" (Steam Client Service) - "Valve Corporation" - C:\Program Files\Common Files\Steam\SteamService.exe
"Windows Live Family Safety Service" (fsssvc) - "Microsoft Corporation" - C:\Program Files\Windows Live\Family Safety\fsssvc.exe
"Windows Live ID Sign-in Assistant" (wlidsvc) - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru
Und der aswMBR-Log:
Code:
aswMBR version 0.9.9.1649 Copyright(c) 2011 AVAST Software
Run date: 2012-02-24 14:18:45
-----------------------------
14:18:45.256    OS Version: Windows 6.0.6002 Service Pack 2
14:18:45.256    Number of processors: 2 586 0x4303
14:18:45.257    ComputerName: SHADOW315-PC  UserName: Shadow315
14:18:46.672    Initialize success
14:19:26.374    AVAST engine defs: 12022400
14:19:37.872    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T1L0-6
14:19:37.874    Disk 0 Vendor: ST3360320AS 3.AAM Size: 343399MB BusType: 3
14:19:37.886    Disk 0 MBR read successfully
14:19:37.888    Disk 0 MBR scan
14:19:37.956    Disk 0 Windows VISTA default MBR code
14:19:37.969    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS      322902 MB offset 2048
14:19:37.982    Disk 0 Partition - 00    0F Extended LBA            20494 MB offset 661305344
14:19:38.004    Disk 0 Partition 2 00    0B        FAT32 MSDOS5.0    20494 MB offset 661305407
14:19:38.124    Disk 0 scanning sectors +703277505
14:19:38.204    Disk 0 scanning C:\Windows\system32\drivers
14:19:52.532    Service scanning
14:20:07.161    Service MpKsl98e08d68 c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7D11FFAB-A961-4D3A-A218-8EF13C3083B8}\MpKsl98e08d68.sys **LOCKED** 32
14:20:07.259    Service MpNWMon C:\Windows\system32\DRIVERS\MpNWMon.sys **LOCKED** 32
14:20:23.170    Modules scanning
14:20:29.842    Disk 0 trace - called modules:
14:20:29.866    ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys
14:20:29.871    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x84e37330]
14:20:29.875    3 CLASSPNP.SYS[87fae8b3] -> nt!IofCallDriver -> [0x84c09c10]
14:20:29.880    5 acpi.sys[806096bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T1L0-6[0x84c2d5a8]
14:20:31.368    AVAST engine scan C:\Windows
14:20:37.425    AVAST engine scan C:\Windows\system32
14:24:50.877    AVAST engine scan C:\Windows\system32\drivers
14:25:10.783    AVAST engine scan C:\Users\Shadow315
14:37:33.637    AVAST engine scan C:\ProgramData
14:45:15.357    Scan finished successfully
16:31:40.411    Disk 0 MBR has been saved successfully to "C:\Users\Shadow315\Desktop\MBR.dat"
16:31:40.493    The log file has been saved successfully to "C:\Users\Shadow315\Desktop\aswMBR.txt"

cosinus 24.02.2012 18:41
Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Shadow315 24.02.2012 23:37
Hier erstmal der Log von SAS:

Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 02/24/2012 at 11:29 PM

Application Version : 5.0.1144

Core Rules Database Version : 8275
Trace Rules Database Version: 6087

Scan type      : Complete Scan
Total Scan Time : 02:30:33

Operating System Information
Windows Vista Home Premium 32-bit, Service Pack 2 (Build 6.00.6002)
UAC On - Administrator

Memory items scanned      : 651
Memory threats detected  : 0
Registry items scanned    : 33316
Registry threats detected : 1
File items scanned        : 181423
File threats detected    : 313

Adware.Tracking Cookie
        C:\Users\Shadow315\AppData\Roaming\Microsoft\Windows\Cookies\21WSVO6L.txt [ /serving-sys.com ]
        C:\Users\Shadow315\AppData\Roaming\Microsoft\Windows\Cookies\WNIML749.txt [ /atdmt.com ]
        C:\Users\Shadow315\AppData\Roaming\Microsoft\Windows\Cookies\IZ2HJJE0.txt [ /bs.serving-sys.com ]
        C:\Users\Shadow315\AppData\Roaming\Microsoft\Windows\Cookies\044OMGIS.txt [ /media6degrees.com ]
        C:\Users\Shadow315\AppData\Roaming\Microsoft\Windows\Cookies\1CFB9PMS.txt [ /apmebf.com ]
        C:\Users\Shadow315\AppData\Roaming\Microsoft\Windows\Cookies\57HRI45Q.txt [ /doubleclick.net ]
        C:\Users\Shadow315\AppData\Roaming\Microsoft\Windows\Cookies\UY2463F3.txt [ /invitemedia.com ]
        C:\Users\Shadow315\AppData\Roaming\Microsoft\Windows\Cookies\TGV7UI71.txt [ /mediaplex.com ]
        C:\USERS\SHADOW315\AppData\Roaming\Microsoft\Windows\Cookies\Low\BD7QQNX8.txt [ Cookie:shadow315@doubleclick.net/ ]
        C:\USERS\SHADOW315\Cookies\21WSVO6L.txt [ Cookie:shadow315@serving-sys.com/ ]
        C:\USERS\SHADOW315\Cookies\WNIML749.txt [ Cookie:shadow315@atdmt.com/ ]
        C:\USERS\SHADOW315\Cookies\1CFB9PMS.txt [ Cookie:shadow315@apmebf.com/ ]
        C:\USERS\SHADOW315\Cookies\57HRI45Q.txt [ Cookie:shadow315@doubleclick.net/ ]
        C:\USERS\SHADOW315\Cookies\UY2463F3.txt [ Cookie:shadow315@invitemedia.com/ ]
        C:\USERS\SHADOW315\Cookies\TGV7UI71.txt [ Cookie:shadow315@mediaplex.com/ ]
        delivery.ibanner.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\MBY8BZH3 ]
        .smartadserver.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adxvalue.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .microsoftsto.112.2o7.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .eaeacom.112.2o7.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        adt.traffictrack.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        accounts.youtube.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adserver.adtechus.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        www.youporn.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        www.youporn.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        rts.pgmediaserve.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        rts.pgmediaserve.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        rts.pgmediaserve.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .de.partypoker.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .counter.sexsuche.tv [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        counter2.sexmoney.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        www.unitymedia.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        www.unitymedia.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        tracking.dc-storm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        www.unitymedia.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .www.unitymedia.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        tracking.dc-storm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .account.swtor.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        studivz.adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        studivz.adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        mediachannelx.npage.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        mediachannelx.npage.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        mediachannelx.npage.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        count.asnetworks.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .ad-emea.doubleclick.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .ad-emea.doubleclick.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .ad-emea.doubleclick.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .dyntracker.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        tracking.mlsat02.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .a.revenuemax.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        www.active-tracking.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        www.active-tracking.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        www.active-tracking.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ads.crakmedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .exoclick.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .syndication.traffichaus.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .syndication.traffichaus.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .syndication.traffichaus.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        stat.ed.cupidplc.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ads.trafficjunky.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .sexad.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .microsoftwllivemkt.112.2o7.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .toplist.cz [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tribalfusion.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        wstat.wibiya.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .luroxmedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .luroxmedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .luroxmedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .luroxmedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .dmtracker.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        www.blogcounter.de [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ww251.smartadserver.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tripod.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .tripod.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\SHADOW315\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WA7HN65N.DEFAULT\COOKIES.SQLITE ]
        cdn2.baronsmedia.com [ C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\FXDZA2X3 ]
        content.yieldmanager.edgesuite.net [ C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\FXDZA2X3 ]
        delivery.ibanner.de [ C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\FXDZA2X3 ]
        media1.break.com [ C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\FXDZA2X3 ]
        objects.tremormedia.com [ C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\FXDZA2X3 ]

Trojan.Agent/Gen-Malintent
        C:\PROGRAM FILES\WINRAR\DEFAULT.SFX

System.BrokenFileAssociation
        HKCR\.com
Habe direkt im Anschluss alle entdeckten infizierten Dateien bereinigt
bzw löschen lassen.

Den Vollscan von Malwarebytes lasse ich über Nacht laufen und
poste den Log dann morgen früh.

Shadow315 25.02.2012 08:13
Hier der Vollscanlog von Malwarebytes:

Code:
Malwarebytes Anti-Malware (Test) 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.02.24.04

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Shadow315 :: SHADOW315-PC [Administrator]

Schutz: Deaktiviert

25.02.2012 00:26:34
mbam-log-2012-02-25 (00-26-34).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 345321
Laufzeit: 1 Stunde(n), 38 Minute(n), 34 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

cosinus 26.02.2012 14:46
Sieht ok aus, da wurden nur Cookies gefunden. Die können weg. Und ein Fehlalarm war dabei.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ist das System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Shadow315 26.02.2012 14:47
Das System läuft, allerdings sind einige Sachen auch nach unhide nicht
wieder aufgetaucht. Die normalen Naviationssymbole, die man über -Start-
erreicht, sind hingegen alle wieder genau da, wie ursprünglich.

Vielen, vielen Dank nochmal an dieser Stelle.

cosinus 26.02.2012 15:58
Dann beschrieb nochmal ganz genau was fehlt.

Ansonsten wären wir erstmal durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. CF kann über Start, Ausführen mit combofix /uninstall entfernt werden. Melde dich falls es da Fehlermeldungen zu gibt.
Malwarebytes zu behalten ist kein Fehler. Kannst ja 1x im Monat damit scannen, aber immer vorher ans Update denken.

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:

Adobe - Andere Version des Adobe Flash Player installieren

Notfalls kann man auch von Chip.de runterladen => http://filepony.de/?q=Flash+Player

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.

Shadow315 26.02.2012 16:03
Zum Beispiel fehlen mir ein paar installierte Spiele wie Starcraft II
aber auch kleinere Programme - wobei mir hier lediglich -Paint- aufgefallen
ist, sind irgendwie weg. Aber ganz ehrlich, das ist kein Beinbruch,
erst Recht nicht, nach all dem, was jetzt hinter mir liegt. :party:


Alle Zeitangaben in WEZ +1. Es ist jetzt 00:20 Uhr.
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2024, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130