Hallo,
Hier sind Logfiles von OTL und Malewarebytes.
Malewarebytes:
Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org
Datenbank Version: v2013.03.11.09
Windows 7 Service Pack 1 x64 NTFS (Abgesichertenmodus)
Internet Explorer 9.0.8112.16421
Marcel :: MARCEL-PC [Administrator]
12.03.2013 00:59:24
mbam-log-2013-03-12 (00-59-24).txt
Art des Suchlaufs: Vollständiger Suchlauf (C:\|E:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 388862
Laufzeit: 46 Minute(n), 36 Sekunde(n)
Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce|1C060364308C076400001C05E7640D28 (Trojan.FakeAlert) -> Daten: C:\ProgramData\1C060364308C076400001C05E7640D28\1C060364308C076400001C05E7640D28.exe -> Erfolgreich gelöscht und in Quarantäne gestellt.
Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)
Infizierte Dateien: 7
C:\ProgramData\1C060364308C076400001C05E7640D28\1C060364308C076400001C05E7640D28.exe (Trojan.FakeAlert) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marcel\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\69c22e81-57bf5cbd (Trojan.FakeAlert) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marcel\AppData\Local\Temp\msimg32.dll (Rootkit.0Access) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marcel\AppData\Roaming\skype.dat (Malware.Packer.SGX3) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marcel\Desktop\Disk Antivirus Professional.lnk (Trojan.FakeAV) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marcel\oxb2ybntqpajt.exe (Rootkit.0Access) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marcel\x97er4ivxnph4.exe (Malware.Packer.DLR6) -> Erfolgreich gelöscht und in Quarantäne gestellt.
(Ende)
Logfiles von HitmanPro:
Code:
HitmanPro 3.7.2.190
www.hitmanpro.com
Computer name . . . . : MARCEL-PC
Windows . . . . . . . : 6.1.1.7601.X64/4
User name . . . . . . : Marcel-PC\Marcel
UAC . . . . . . . . . : Enabled
License . . . . . . . : Trial (30 days left)
Scan date . . . . . . : 2013-03-12 02:00:08
Scan mode . . . . . . : Normal
Scan duration . . . . : 7m 38s
Disk access mode . . : Direct disk access (SRB)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : No
Threats . . . . . . . : 3
Traces . . . . . . . : 159
Objects scanned . . . : 1.716.093
Files scanned . . . . : 22.249
Remnants scanned . . : 637.116 files / 1.056.728 keys
Malware remnants ____________________________________________________________
C:\$Recycle.Bin\S-1-5-21-1731678036-3021384131-2947455109-1002\$893e106e49c01016c9361d1a8240bd5f\@ (ZeroAccess) -> Deleted
C:\$Recycle.Bin\S-1-5-21-1731678036-3021384131-2947455109-1002\$893e106e49c01016c9361d1a8240bd5f\L\ (ZeroAccess) -> Deleted
C:\$Recycle.Bin\S-1-5-21-1731678036-3021384131-2947455109-1002\$893e106e49c01016c9361d1a8240bd5f\U\ (ZeroAccess) -> Deleted
Cookies _____________________________________________________________________
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\03KD1K1Z.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\15385PEF.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\15RAKDHN.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\1U5IHE6J.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\2MC9W8BK.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\307WQD5E.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\3ACMS7JW.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\3M51BOVZ.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\4PNNKSJT.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\4WCGR00M.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\57QB0P3I.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\60HX5PNI.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\63K8KDIO.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\66L5WNP0.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\67FX1G8F.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\6CL3JVVK.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\7NWHHEDW.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\7OX5YO0A.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\9WXNBA1A.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\9YQ03C3R.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\AVY0DR06.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\D2QLCZEJ.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\G782KZH0.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\HENOVDIE.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\HZLZEIUB.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\IC528I8Q.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\MNCIQ74Y.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\OCA85400.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\RK93JG65.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\SDY5T1JA.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\UIDGGN7A.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\VUYB2O8X.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\W4K4YIVP.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\XZRETG8U.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\YBETTBJQ.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\YQ2A4BVJ.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\YS3Y8FE5.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\YUX5R8EX.txt
C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Cookies\Z8EQ1NKF.txt
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:247realmedia.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:2o7.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.123-template.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.360yield.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.ad-srv.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.adc-serv.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.adnet.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.adserver01.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.dyntracker.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.get4cdn.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.leadbolt.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.movad.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.suedkurier.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.yieldmanager.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ad.zanox.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adbrite.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adinterax.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.ad4max.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.auto-motor-und-sport.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.best-boats24.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.brandwire.tv
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.crakmedia.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.creative-serving.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.lzjl.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.oomz.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.p161.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.pubmatic.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.s-i-r.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.trafficjunky.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.travelaudience.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.undertone.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.unister-gmbh.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ads.vsn.si
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adserv.chirurgie-portal.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adserv.quality-channel.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adserver.adtechus.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adserver.directcorp.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adserver.doccheck.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adserver.fck.onvert.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adserver.gb5.motorpresse.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adserver.zenoviaexchange.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adtech.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adtechus.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adultfriendfinder.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:advert.ljrlawfirm.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:advertising.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:adviva.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:aka-cdn-ns.adtech.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:apmebf.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:at.atwola.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:atdmt.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:autoscout24.112.2o7.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:bs.serving-sys.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:burstnet.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:c.atdmt.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:casalemedia.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:collective-media.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:cunda.122.2o7.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:de.partypoker.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:de.sitestat.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:deutschepostag.112.2o7.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:doubleclick.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:dsupermarked.112.2o7.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:eas.apm.emediate.eu
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:eas4.emediate.eu
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:emjcd.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:engine.phn.doublepimp.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:fastclick.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:fr.sitestat.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:guj.122.2o7.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:h.atdmt.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:interclick.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:invitemedia.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:kontera.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:medhelpinternational.112.2o7.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:media6degrees.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:mediaplex.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:msnportal.112.2o7.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:partypoker.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:premiumtv.122.2o7.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:profamilia.sextra.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:questionmarket.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:revsci.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:rts.pgmediaserve.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ru4.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:serving-sys.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:sex-unfall.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:sexad.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:smartadserver.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:specificclick.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:stat.dealtime.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:statcounter.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:statse.webtrendslive.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:track.adform.net
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:track.effiliation.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:track.hubrus.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:tradedoubler.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:tribalfusion.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:weborama.fr
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:weboramapublishertrackinguk2.solution.weborama.fr
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ww1.sexwoerterbuch.info
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:ww251.smartadserver.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:www.etracker.de
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:www.freecamsexposed.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:www4.smartadserver.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:xiti.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:yadro.ru
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:youporn.com
C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\jj8m0yow.default\cookies.sqlite:zedo.com
Die Logfiles von OTL sind im Anhang.
Ich hoffe, dass du mir weiterhelfen kannst.
Vielen Dank und viele Grüße,
Marcel.