Trainie4 | 26.06.2014 00:39 | Code:
# AdwCleaner v3.213 - Bericht erstellt am 26/06/2014 um 00:58:09
# Aktualisiert 23/06/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (32 bits)
# Benutzername : admin - ADMIN-PC
# Gestartet von : C:\Users\admin\Downloads\adwcleaner_3.213.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17126
-\\ Mozilla Firefox v30.0 (de)
[ Datei : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\prefs.js ]
-\\ Google Chrome v
[ Datei : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [46064 octets] - [26/06/2014 00:30:27]
AdwCleaner[R1].txt - [1167 octets] - [26/06/2014 00:56:43]
AdwCleaner[S0].txt - [45808 octets] - [26/06/2014 00:31:15]
AdwCleaner[S1].txt - [1089 octets] - [26/06/2014 00:58:09]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1149 octets] ########## Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 26.06.2014
Suchlauf-Zeit: 01:02:58
Logdatei:
Administrator: Ja
Version: 2.00.2.1012
Malware Datenbank: v2014.06.25.18
Rootkit Datenbank: v2014.06.23.02
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert
Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: admin
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 267150
Verstrichene Zeit: 15 Min, 44 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registrierungsschlüssel: 1
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [12d8fe7d700b171f9568dc6d887abc44],
Registrierungswerte: 1
Trojan.Ransom.Gen, HKU\S-1-5-21-2742928999-3257237434-1072491205-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|EwpiSvono, regsvr32.exe "C:\ProgramData\EwpiSvono\EwpiSvono.dat", Löschen bei Neustart, [5d8d9edde5960a2c8a36f3110bf98c74]
Registrierungsdaten: 0
(No malicious items detected)
Ordner: 0
(No malicious items detected)
Dateien: 5
PUP.Optional.Somoto.A, C:\Users\admin\Downloads\7ZipSetup.exe, In Quarantäne, [d8121665146755e1998581b7817feb15],
PUP.Optional.Koyote.A, C:\Users\admin\Downloads\FreeVideoConverterSetup-r135-n-bf.exe, In Quarantäne, [e70326552b506cca4eb47dc8bc45837d],
PUP.Optional.DomaIQ, C:\Users\admin\Downloads\Player_Setup.exe, In Quarantäne, [5d8dc4b78af11026572bc57d4eb2e51b],
PUP.Optional.NewTab.A, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bakijjialdiiboeaknfpmflphhmljfkd_0.localstorage, In Quarantäne, [d812eb90a1da41f5b122eb17eb191fe1],
Trojan.Ransom.Gen, C:\ProgramData\EwpiSvono\EwpiSvono.dat, In Quarantäne, [5d8d9edde5960a2c8a36f3110bf98c74],
Physische Sektoren: 0
(No malicious items detected)
(end) Code:
Code:
HitmanPro 3.7.9.219
www.hitmanpro.com
Computer name . . . . : ADMIN-PC
Windows . . . . . . . : 6.1.1.7601.X86/4
User name . . . . . . : admin-PC\admin
UAC . . . . . . . . . : Disabled
License . . . . . . . : Free
Scan date . . . . . . : 2014-06-26 01:28:48
Scan mode . . . . . . : Normal
Scan duration . . . . : 4m 28s
Disk access mode . . : Direct disk access (SRB)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : No
Threats . . . . . . . : 0
Traces . . . . . . . : 403
Objects scanned . . . : 1.461.227
Files scanned . . . . : 28.474
Remnants scanned . . : 494.078 files / 938.675 keys
Suspicious files ____________________________________________________________
C:\Users\admin\Downloads\FRST.exe
Size . . . . . . . : 1.073.152 bytes
Age . . . . . . . : 0.1 days (2014-06-25 23:18:07)
Entropy . . . . . : 8.0
SHA-256 . . . . . : 4719D377C2C6FA3E8D8944E877997E664508FFF75BE40A84A57E221B7D5F832D
Needs elevation . : Yes
Fuzzy . . . . . . : 24.0
Program has no publisher information but prompts the user for permission elevation.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Time indicates that the file appeared recently on this computer.
Forensic Cluster
0.0s C:\Users\admin\Downloads\FRST.exe
23.8s C:\FRST\Logs\
23.8s C:\FRST\
23.8s C:\FRST\Hives\
23.8s C:\FRST\Quarantine\
24.2s C:\FRST\Hives\ERDNT.INF
24.2s C:\FRST\Hives\ERDNT.CON
24.2s C:\FRST\Hives\BCD
24.2s C:\FRST\Hives\system
24.5s C:\FRST\Hives\software
25.4s C:\FRST\Hives\default
25.4s C:\FRST\Hives\security
25.4s C:\FRST\Hives\sam
25.5s C:\FRST\Hives\Users\
25.5s C:\FRST\Hives\Users\00000001\
25.5s C:\FRST\Hives\Users\00000001\ntuser.dat
25.6s C:\FRST\Hives\Users\00000002\
25.6s C:\FRST\Hives\Users\00000002\UsrClass.dat
25.6s C:\FRST\Hives\Users\00000002\UsrClass.dat
25.7s C:\FRST\Hives\ERDNT.EXE
25.7s C:\FRST\Hives\ERDNT.EXE
25.7s C:\FRST\Hives\ERDNTWIN.LOC
25.7s C:\FRST\Hives\ERDNTDOS.LOC
25.7s C:\FRST\Hives\ERDNTDOS.LOC
25.7s C:\FRST\Hives\ERDNTDOS.LOC
26.9s C:\Users\admin\Downloads\FRST.txt
C:\Windows\system32\GameMon.des
Size . . . . . . . : 3.975.544 bytes
Age . . . . . . . : 300.5 days (2013-08-29 12:39:04)
Entropy . . . . . : 7.9
SHA-256 . . . . . : 750001935A5C5541C47A5F5C7A57228CB663DFA35A4E50BD7D368F36A732660C
Product . . . . . : nProtect Game Monitor
Publisher . . . . : INCA Internet Co., Ltd.
Description . . . : nProtect Game Monitor Rev 1865
Version . . . . . : 2012.5.3.1
Service . . . . . : npggsvc
LanguageID . . . . : 1042
Fuzzy . . . . . . : 36.0
The file name extension of this program is not common.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Starts automatically as a service during system bootup.
The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.
Startup
HKLM\SYSTEM\CurrentControlSet\Services\npggsvc\
Potential Unwanted Programs _________________________________________________
C:\Program Files\AskPartnerNetwork\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (AskBar)
Size . . . . . . . : 166.352 bytes
Age . . . . . . . : 132.8 days (2014-02-13 07:22:47)
Entropy . . . . . : 6.4
SHA-256 . . . . . : C3081358313A982F53CAD54C214AFECAD9660A59FB4A3DDFE068724E83041AF8
Product . . . . . : APN Updater
Publisher . . . . : APN LLC.
Description . . . : APN Updater
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
Service . . . . . : APNMCP
LanguageID . . . . : 1033
Fuzzy . . . . . . : -9.0
Startup
HKLM\SYSTEM\CurrentControlSet\Services\APNMCP\
C:\Program Files\AskPartnerNetwork\Toolbar\APNSetup.exe (AskBar)
Size . . . . . . . : 489.392 bytes
Age . . . . . . . : 305.5 days (2013-08-24 12:17:33)
Entropy . . . . . : 6.4
SHA-256 . . . . . : C17717A1D8DF84341DE4C98611F5B9B059B4819BCECA15E1A1B7B882A34F3354
Product . . . . . : Stub Installer
Publisher . . . . : Ask Partner Network
Description . . . : Stub Installer
Version . . . . . : 7.2.1.1
Copyright . . . . : Copyright © 2013 Ask Partner Network. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (AskBar)
Size . . . . . . . : 12.240 bytes
Age . . . . . . . : 132.8 days (2014-02-13 07:22:25)
Entropy . . . . . : 6.2
SHA-256 . . . . . : 26DD353E636B8ABE2739CEB97A04220F1964E8951C93386D5CFAACE823874898
Product . . . . . : Passport
Publisher . . . . : APN LLC.
Description . . . : Passport
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
Startup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41564952-412D-5637-00A7-7A786E7484D7}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}\
References
HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}\
HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{41564952-412D-5637-00A7-7A786E7484D7}\
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1031.mst (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1033.mst (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1034.mst (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1036.mst (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1040.mst (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1041.mst (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1043.mst (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1045.mst (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1049.mst (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\2070.mst (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions\toolbar_AVIRA-V7@apn.ask.com.xpi (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\AskToolbarInstaller-12.10.0_AVIRA-V7.msi (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\AskToolbarInstaller-12.10.3_AVIRA-V7.msi (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\AskToolbarInstaller-12.2.2_AVIRA-V7.msi (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\AskToolbarInstaller-12.6.0_AVIRA-V7.msi (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\ToolbarCR.crx (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\Update.xml (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\{Crx_Version}\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\{Crx_Version}\Toolbar.crx (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\apnmcp.exe (AskBar)
Size . . . . . . . : 166.352 bytes
Age . . . . . . . : 305.5 days (2013-08-24 12:17:33)
Entropy . . . . . : 6.4
SHA-256 . . . . . : C3081358313A982F53CAD54C214AFECAD9660A59FB4A3DDFE068724E83041AF8
Product . . . . . : APN Updater
Publisher . . . . : APN LLC.
Description . . . : APN Updater
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\searchhook.dll (AskBar)
Size . . . . . . . : 74.704 bytes
Age . . . . . . . : 305.5 days (2013-08-24 12:17:33)
Entropy . . . . . : 6.3
SHA-256 . . . . . : E1853B5640881511544A9B6C9F2227BD639B279B281A8612746BE07040E3B013
Product . . . . . : Search Hook
Publisher . . . . : APN LLC.
Description . . . : Search Hook
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\ServiceLocator.exe (AskBar)
Size . . . . . . . : 115.664 bytes
Age . . . . . . . : 305.5 days (2013-08-24 12:17:33)
Entropy . . . . . : 6.4
SHA-256 . . . . . : 4B919C48DD074B802488864BB266E2B1D980A1E73C3FFAE36FEE79874E884FDC
Product . . . . . : Service Locator
Publisher . . . . : APN LLC.
Description . . . : Service Locator
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\SO.dll (AskBar)
Size . . . . . . . : 428.496 bytes
Age . . . . . . . : 305.5 days (2013-08-24 12:17:33)
Entropy . . . . . : 6.5
SHA-256 . . . . . : 9D34E70B5CA1DE2D4FDD8DD0AB5987A60EC620D2DFEDE7F89443FFFFDBF6A60A
Product . . . . . : Object Model
Publisher . . . . : APN LLC.
Description . . . : Object Model
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar.dll (AskBar)
Size . . . . . . . : 204.752 bytes
Age . . . . . . . : 305.5 days (2013-08-24 12:17:33)
Entropy . . . . . : 6.4
SHA-256 . . . . . : C7BC280CA198B10252BBE8EB1DB0A78AB8CB5DC7C6BAD1497690D141221CFBE0
Product . . . . . : Toolbar
Publisher . . . . : APN LLC.
Description . . . : Toolbar
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Toolbar.exe (AskBar)
Size . . . . . . . : 366.032 bytes
Age . . . . . . . : 305.5 days (2013-08-24 12:17:33)
Entropy . . . . . : 5.7
SHA-256 . . . . . : BE6CA90E00B1F2D7C8A9D86D8FC9AB92F124D1D59D0A94F3BEA8552D15DDDD9A
Product . . . . . : Toolbar Core
Publisher . . . . : APN LLC.
Description . . . : Toolbar Core
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar_x64.dll (AskBar)
Size . . . . . . . : 249.808 bytes
Age . . . . . . . : 244.5 days (2013-10-24 12:32:22)
Entropy . . . . . : 6.1
SHA-256 . . . . . : B971FFE3A9662BEACF7B4DC2B397A8C674C75F22115AE85DD850FBB73A35BCB1
Product . . . . . : Toolbar
Publisher . . . . : APN LLC.
Description . . . : Toolbar
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\ToolbarPS.dll (AskBar)
Size . . . . . . . : 45.520 bytes
Age . . . . . . . : 305.5 days (2013-08-24 12:17:33)
Entropy . . . . . : 6.1
SHA-256 . . . . . : 137538E3C6CD7044B24B9A2428DD5E0B3949CAD6808E1CDC4E6A24AECE8265B2
Product . . . . . : Toolbar PS
Publisher . . . . : APN LLC.
Description . . . : Toolbar PS
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\UpdateManager.exe (AskBar)
Size . . . . . . . : 114.128 bytes
Age . . . . . . . : 305.5 days (2013-08-24 12:17:33)
Entropy . . . . . : 6.4
SHA-256 . . . . . : DCB7FE544B967787BB1515F9CD344688B9234D188BC50DAE5C966BBD9D5E8836
Product . . . . . : Update Manager
Publisher . . . . : APN LLC.
Description . . . : Update Manager
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\ask-search.xml (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (AskBar)
Size . . . . . . . : 1.758.160 bytes
Age . . . . . . . : 305.5 days (2013-08-24 12:17:33)
Entropy . . . . . : 6.4
SHA-256 . . . . . : 5C557182618218B2A66408BA89438E154B3236D0F0EED2D64C3CD65C68129700
Product . . . . . : Ask TBNotifier
Publisher . . . . : APN
Description . . . : Ask Toolbar Notifier
Version . . . . . : 31.6.3.286
Copyright . . . . : (c) Ask. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\{PartnerID}\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\{PartnerID}\config.xml (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport.dll (AskBar)
Size . . . . . . . : 12.240 bytes
Age . . . . . . . : 305.5 days (2013-08-24 12:17:33)
Entropy . . . . . : 6.2
SHA-256 . . . . . : 26DD353E636B8ABE2739CEB97A04220F1964E8951C93386D5CFAACE823874898
Product . . . . . : Passport
Publisher . . . . : APN LLC.
Description . . . : Passport
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport_x64.dll (AskBar)
Size . . . . . . . : 13.776 bytes
Age . . . . . . . : 244.5 days (2013-10-24 12:32:22)
Entropy . . . . . : 6.0
SHA-256 . . . . . : 5C86C854487467F74A8A86C9F268EF8898AAA1B48D43026CECD49740CD3D4CCD
Product . . . . . : Passport
Publisher . . . . : APN LLC.
Description . . . : Passport
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\VNT\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\VNT\content.zip (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\VNT\vntldr.exe (AskBar)
Size . . . . . . . : 195.536 bytes
Age . . . . . . . : 187.1 days (2013-12-20 23:09:45)
Entropy . . . . . : 6.2
SHA-256 . . . . . : FA80FC08B390340C6056748D58ACDDD0A949F3D9218A9282B67F7CA9EADC36D5
Product . . . . . : Virtual New Tab
Publisher . . . . : APN LLC.
Description . . . : Virtual New Tab Loader
Version . . . . . : 1.2.0.3294
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -15.0
C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\VNT\vntsrv.dll (AskBar)
Size . . . . . . . : 92.672 bytes
Age . . . . . . . : 187.1 days (2013-12-20 23:09:45)
Entropy . . . . . : 6.2
SHA-256 . . . . . : 1A545675F7C8937A31CB3F7512E253660E3ADA637160E549F21595F7A0893B97
Product . . . . . : Virtual New Tab
Publisher . . . . : APN LLC.
Description . . . : Virtual New Tab Server
Version . . . . . : 1.2.0.3294
Copyright . . . . : (c) APN LLC. All rights reserved.
LanguageID . . . . : 1033
Fuzzy . . . . . . : -8.0
C:\Program Files\AskPartnerNetwork\Toolbar\searchhook.dll (AskBar)
Size . . . . . . . : 74.704 bytes
Age . . . . . . . : 132.8 days (2014-02-13 07:22:25)
Entropy . . . . . : 6.3
SHA-256 . . . . . : E1853B5640881511544A9B6C9F2227BD639B279B281A8612746BE07040E3B013
Product . . . . . : Search Hook
Publisher . . . . : APN LLC.
Description . . . : Search Hook
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -19.0
C:\Program Files\AskPartnerNetwork\Toolbar\ServiceLocator.exe (AskBar)
Size . . . . . . . : 115.664 bytes
Age . . . . . . . : 132.8 days (2014-02-13 07:22:25)
Entropy . . . . . : 6.4
SHA-256 . . . . . : 4B919C48DD074B802488864BB266E2B1D980A1E73C3FFAE36FEE79874E884FDC
Product . . . . . : Service Locator
Publisher . . . . : APN LLC.
Description . . . : Service Locator
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -19.0
C:\Program Files\AskPartnerNetwork\Toolbar\SO.dll (AskBar)
Size . . . . . . . : 428.496 bytes
Age . . . . . . . : 132.8 days (2014-02-13 07:22:47)
Entropy . . . . . : 6.5
SHA-256 . . . . . : 9D34E70B5CA1DE2D4FDD8DD0AB5987A60EC620D2DFEDE7F89443FFFFDBF6A60A
Product . . . . . : Object Model
Publisher . . . . : APN LLC.
Description . . . : Object Model
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -19.0
C:\Program Files\AskPartnerNetwork\Toolbar\toolbar.dll (AskBar)
Size . . . . . . . : 204.752 bytes
Age . . . . . . . : 132.8 days (2014-02-13 07:22:47)
Entropy . . . . . : 6.4
SHA-256 . . . . . : C7BC280CA198B10252BBE8EB1DB0A78AB8CB5DC7C6BAD1497690D141221CFBE0
Product . . . . . : Toolbar
Publisher . . . . : APN LLC.
Description . . . : Toolbar
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -19.0
C:\Program Files\AskPartnerNetwork\Toolbar\Toolbar.exe (AskBar)
Size . . . . . . . : 366.032 bytes
Age . . . . . . . : 132.8 days (2014-02-13 07:22:25)
Entropy . . . . . : 5.7
SHA-256 . . . . . : BE6CA90E00B1F2D7C8A9D86D8FC9AB92F124D1D59D0A94F3BEA8552D15DDDD9A
Product . . . . . : Toolbar Core
Publisher . . . . : APN LLC.
Description . . . : Toolbar Core
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -19.0
C:\Program Files\AskPartnerNetwork\Toolbar\ToolbarPS.dll (AskBar)
Size . . . . . . . : 45.520 bytes
Age . . . . . . . : 132.8 days (2014-02-13 07:22:25)
Entropy . . . . . : 6.1
SHA-256 . . . . . : 137538E3C6CD7044B24B9A2428DD5E0B3949CAD6808E1CDC4E6A24AECE8265B2
Product . . . . . : Toolbar PS
Publisher . . . . : APN LLC.
Description . . . : Toolbar PS
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
RSA Key Size . . . : 2048
LanguageID . . . . : 1033
Authenticode . . . : Valid
Fuzzy . . . . . . : -19.0
C:\Program Files\AskPartnerNetwork\Toolbar\UpdateManager.exe (AskBar)
Size . . . . . . . : 114.128 bytes
Age . . . . . . . : 132.8 days (2014-02-13 07:22:47)
Entropy . . . . . : 6.4
SHA-256 . . . . . : DCB7FE544B967787BB1515F9CD344688B9234D188BC50DAE5C966BBD9D5E8836
Product . . . . . : Update Manager
Publisher . . . . : APN LLC.
Description . . . : Update Manager
Version . . . . . : 21.5.0.2560
Copyright . . . . : (c) APN LLC. All rights reserved.
LanguageID . . . . : 1033
Fuzzy . . . . . . : -12.0
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\ask-search.xml (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\AVIRA-V7\ (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\AVIRA-V7\config.xml (AskBar)
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (AskBar)
Size . . . . . . . : 1.758.160 bytes
Age . . . . . . . : 132.8 days (2014-02-13 07:22:26)
Entropy . . . . . : 6.4
SHA-256 . . . . . : 5C557182618218B2A66408BA89438E154B3236D0F0EED2D64C3CD65C68129700
Product . . . . . : Ask TBNotifier
Publisher . . . . : APN
Description . . . : Ask Toolbar Notifier
Version . . . . . : 31.6.3.286
Copyright . . . . : (c) Ask. All rights reserved.
LanguageID . . . . : 1033
Fuzzy . . . . . . : -12.0
C:\ProgramData\APN\ (AskBar)
C:\ProgramData\AskPartnerNetwork\ (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\32.10\ (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\32.10\Toolbar.crx (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Config\ (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Config\Config.31.1.0.0-3.xml (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Config\Config.31.4.1.0-3.xml (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Config\Config.31.4.1.0-4.xml (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Config\Config.31.6.0.0-4.xml (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Config\Config.31.6.3.0-4.xml (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Response\ (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Response\Response.31.6.3.0-62.xml (AskBar)
C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Response\Response.31.6.3.0-63.xml (AskBar)
HKLM\SOFTWARE\AskPartnerNetwork\ (AskBar)
HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}\ (AskBar)
HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}\ (AskBar)
HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}\ (AskBar)
HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}\ (AskBar)
HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF\ (AskBar)
HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}\ (AskBar)
HKLM\SOFTWARE\Classes\Interface\{BD125908-5F10-409F-9C01-F2207CA18887}\ (AskBar)
HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}\ (AskBar)
HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}\ (AskBar)
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}\ (AskBar)
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\06B42F08F6F40FA4F83EA94EF9F03F63\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\06FCEE940712E4B4C8A7362CD8D249A1\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\085CE460BADC1D14EA94D8A62E517577\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B2690283E07C9B4085B3B794202E7F7\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12D3738E79C70C74E9D808E162BD6691\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\189F6D048E923EA48B11D15B30CDAC81\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F0968491626AD249A2A6CBAC4DE352D\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22A78C977EC431247B2ECECC374DFE13\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2CAC1D959B4188B4F8E8C251A25DA9DB\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\33990057697C62f47BB9FFD59CB4AEEB\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\41BF64DDE5C2457478691CB0675759BA\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\42F5B13BF4BAD8D409578286A354E360\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4374E71C5355C4B4AACC93BBBF40E99F\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4410C9B6FF0094C418865CD2B243B258\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45B0A4620F799834C82DE0BD4E90E40B\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4859A93046C917F408248F3C16F75E77\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A3D29BA507550f4F87F6F33D42B24D6\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4E28C30B25E21BF4C9418857AEB2AF7C\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50390A9E27AD04A4698BF297EF564973\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D5D3B13CCBA08C479F107E50BD81C8A\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65655A3C1C3738748BE6470495D534FC\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\661134B612233374391C95E8AC373BA3\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\734F787B99D52824EAB6CA1A89F801F7\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\73A172B6C18A3594A9FA363311A187A3\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7A0CF0C6A9F9B8642A392A1896DCCCF2\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE43E6BAE0DC0B43883C669D8DCE8B1\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7D7860B78D7B6F64887AFCB83061837A\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7EC46CC5C43127A45A99762BF7A9C9E5\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFDE7BEC9977ac46B41B0A2BF7D88CD\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8011A895DAAC4CC45AF1397E3CE9CA16\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\81EE804DA9066C64A859E01A38075C59\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\879DDA62492E58A40898AD146BBB572E\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88761D7BAC02ccc428CD5EF352BB933C\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CB53AD495D2C5443B95C9EE29E47902\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8F85A4D374D5bf245B8722C062C2D00E\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9516FC331A505934FA76C22DCFFEC47E\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98B242210207F2D48AF879D69C381D08\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A08449608E3Ca1f4ABF236256A256754\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A431C8F3F57D7844B89242F5F7A5F62C\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A66E2D84F93A9E94FBA6AB3524D85958\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AA27FE018F87f5e4F97F31C09E7C5370\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC049320EE27170499EC0B6124142ED7\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B448F401EF39C8346BF7BE9B8D1C7060\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5211271DD585A740AA28576B137D09D\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B58469E2C54833741B90BAD9CE5A1159\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6DA77032731EEE40B463A325128D613\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCC2BCA248E19F74F9AEDE4D1EFEFBC9\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C6A54B56C58C82a4688AFB93F42EA17B\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C70C6F53DEE245249956FC291D801A71\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C7C0052DD04CBC84C81C0AC586485E50\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C879DCC3D00BE8E4282F02F1735E78DF\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9FBD8E8A2691564FA012512BCC3748C\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB3AEBFFA9E907145906294AB669B1F2\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE142BFA81B72674892EB318BD603CB0\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE90A73A5D5A01a43A2EDCCF04BA9487\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D03E28F842DF79F4DA05A3B6B86B095C\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D05B2B3F5629f9d41A7E57FB534168CA\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D158B0E5D051EA046B8E08BF6B004842\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D45A81F48EF19334EABB33FF8871C4F5\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D538E650623CB2C43AD5FBF587227D55\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8D06C15BF8AFCD449EFF90B935AEF7C\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB1AE396B3BBfe940922C55C6EEF740A\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDF3C3F412F4F954F9F2723C62C65C25\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDF89DEE0C7E9A5448382117C4436818\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E55AA93871A0fde4490A708053AC6501\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E954A03F45EC92B419A55A0D4815C0A3\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E97C12D46BF588241856422D760336B4\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EA1332016439DD54C840C7D45CFB2705\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EFBB6B0872B0DBB4D912A0F52986399D\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646\ (AskBar)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{58124A0B-DC32-4180-9BFF-E0E21AE34026} (Iminent)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (Iminent)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (Iminent)
HKLM\SYSTEM\ControlSet001\services\APNMCP\ (AskBar)
HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Wpm\ (FTDownloader)
HKLM\SYSTEM\ControlSet002\services\APNMCP\ (AskBar)
HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Wpm\ (FTDownloader)
HKLM\SYSTEM\CurrentControlSet\services\APNMCP\ (AskBar)
HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Wpm\ (FTDownloader)
HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\ (FLV Player)
HKU\.DEFAULT\Software\AskPartnerNetwork\ (AskBar)
HKU\S-1-5-18\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\ (FLV Player)
HKU\S-1-5-18\Software\AskPartnerNetwork\ (AskBar)
HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\Software\AskPartnerNetwork\ (AskBar)
HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\Software\Microsoft\Internet Explorer\SearchScopes\{E7DFEC4F-1E56-43FC-879E-21F642BE1D8A}\ (Conduit)
Cookies _____________________________________________________________________
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.360yield.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.ad-srv.net
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.adnet.biz
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.adnet.de
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.auditude.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.dyntracker.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.dyntracker.de
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.movad.net
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.propellerads.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.yieldmanager.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.zanox.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.ad4game.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.adk2.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.adnet.de
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.adplxmd.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.brandwire.tv
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.creative-serving.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.escinteractive.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.p161.net
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.pubmatic.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.stickyadstv.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.undertone.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.visionads.de
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.yahoo.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtech.de
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtechus.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertising.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:apmebf.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:at.atwola.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:atdmt.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:bs.serving-sys.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:burstnet.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:c.atdmt.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:casalemedia.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:eas.apm.emediate.eu
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ero-advertising.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:exoclick.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:fastclick.net
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:h.atdmt.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:invitemedia.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:media6degrees.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:mediaplex.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:revsci.net
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ru4.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:serving-sys.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:smartadserver.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:statcounter.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:statse.webtrendslive.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.adcocktail.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.adform.net
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:tradedoubler.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:tribalfusion.com
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.etracker.de
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:xiti.com
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\044XISL6.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\0KIVSHPM.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\0TM9BAQY.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\142S3JIV.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\2OEV5NBZ.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\3E77CD1P.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\3SHSZ7D8.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\41ILTE8G.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\4OQCJMMW.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\4OSZP0H9.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\6MS75D7O.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\6YGVBD3K.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\95SGKL2Y.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\97312X5H.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\A32ISDRB.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\A6FE57HA.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@revsci[1].txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\AU7B3YML.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\BS3PEAIW.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\E879FF72.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\FLUZBXDH.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\FZPTDADZ.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\HZ6C55YP.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\I9091CQV.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\KFXBPB90.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\KVPYRDZ5.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\NP6HKQ46.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\NXZL2PSA.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\PC01NG8B.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\PFUPDZ4T.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\PFZAUIVG.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\PGLT0K74.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\QH7OPS1K.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\RNZT1AXG.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\RPWXXAGI.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\RS6HIV5V.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\SDS190NE.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\SX7GFR00.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\TCM03PCQ.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\URLUQYLB.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\W1SLUIR3.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\WISO3VFL.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\WV5RN6JD.txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\Y53353UD.txt
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:247realmedia.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:2o7.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad-emea.doubleclick.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.360yield.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.ad-srv.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.adc-serv.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.adnet.biz
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.adnet.de
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.adserver01.de
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.afy11.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.auditude.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.doubleclick.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.dyntracker.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.dyntracker.de
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.movad.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.reklamport.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.wingads.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.yieldmanager.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.yieldpartners.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.zanox.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.ad4game.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.adjet.de
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.adk2.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.adnet.de
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.adplxmd.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.adsrig.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.creative-serving.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.dmolmn.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.escinteractive.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.glispa.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.gltrkk.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.lzjl.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.mediade.sk
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.p161.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.pointroll.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.pubmatic.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.smartstream.tv
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.stickyadstv.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.tunein.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.yahoo.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adserver.adtech.de
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adserver.hatcolorsoft.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adserver.wz-media.de
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adserving.unibet.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adservnow.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adtech.de
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adtechus.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:advertising.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:aok.122.2o7.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:at.atwola.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:atdmt.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:audible.112.2o7.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:bs.serving-sys.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:burstnet.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:casalemedia.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:chitika.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:collective-media.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:content.yieldmanager.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:de.sitestat.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:doubleclick.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:eas.apm.emediate.eu
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:emjcd.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:engine.pgmediaserve.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ero-advertising.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:exoclick.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:fastclick.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:googleadservices.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ikea.122.2o7.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:img-cdn.mediaplex.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:img.mediaplex.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:in.getclicky.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:interclick.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:livejasmin.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:media6degrees.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:mediaplex.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:mm.chitika.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:msnportal.112.2o7.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:myroitracking.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:partypoker.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:pornme.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:premiumtv.122.2o7.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:questionmarket.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:revsci.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ru4.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:secure.img-cdn.mediaplex.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:server.cpmstar.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:serving-sys.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:sexad.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:smartadserver.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:specificclick.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:stat.dealtime.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:statcounter.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:statse.webtrendslive.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:stepstone.112.2o7.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:track.adform.net
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:track.effiliation.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:track.mdsmatch.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:track.tnm.de
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:track.webtrekk.de
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:tradedoubler.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:tribalfusion.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:uk.at.atwola.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:weborama.fr
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ww251.smartadserver.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:www.etracker.de
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:www.googleadservices.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:xiti.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:yadro.ru
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:zedo.com
sooo...hoffe hab alles richtig gemacht :D |