|
Plagegeister aller Art und deren Bekämpfung: Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiertWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
12.09.2011, 21:43 | #16 |
| Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert Hallo Arne, hier ist das Ergebnis vom Combofix Scan. Grüße, JasminaCombofix Logfile: Code:
ATTFilter ComboFix 11-09-12.02 - Administrator 12.09.2011 22:26:11.1.8 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.4010.2187 [GMT 2:00] ausgeführt von:: c:\users\Administrator\Desktop\Combofix\ComboFix.exe AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7} SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . C:\apps c:\program files (x86)\Setup.exe c:\programdata\Roaming c:\windows\SysWow64\comct332.ocx c:\windows\SysWow64\muzapp.exe c:\windows\SysWow64\rnaph.dll . . ((((((((((((((((((((((( Dateien erstellt von 2011-08-12 bis 2011-09-12 )))))))))))))))))))))))))))))) . . 2011-09-12 20:31 . 2011-09-12 20:31 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2011-09-12 20:31 . 2011-09-12 20:31 -------- d-----w- c:\users\Nico\AppData\Local\temp 2011-09-12 20:31 . 2011-09-12 20:31 -------- d-----w- c:\users\Jasmina\AppData\Local\temp 2011-09-12 20:31 . 2011-09-12 20:31 -------- d-----w- c:\users\Jasmina 2\AppData\Local\temp 2011-09-12 20:31 . 2011-09-12 20:31 -------- d-----w- c:\users\Gast\AppData\Local\temp 2011-09-12 20:31 . 2011-09-12 20:31 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-09-11 18:27 . 2011-09-11 18:27 -------- d-----w- c:\program files (x86)\ESET 2011-09-11 09:02 . 2011-09-11 09:02 -------- d-----w- c:\program files\CCleaner 2011-09-11 08:19 . 2011-09-11 08:19 -------- d-----w- c:\program files (x86)\7-Zip 2011-09-10 15:47 . 2011-09-10 15:47 -------- d-----w- c:\users\Jasmina 2\AppData\Roaming\OpenOffice.org 2011-09-10 15:01 . 2011-09-10 15:01 -------- d-----w- c:\users\Administrator\AppData\Roaming\Malwarebytes 2011-09-10 14:37 . 2011-09-10 14:37 -------- d-----w- c:\users\Administrator\AppData\Local\Eastman Kodak Company 2011-09-10 14:33 . 2011-09-10 14:33 -------- d-----w- c:\users\Administrator\AppData\Roaming\Fingertapps 2011-09-10 12:55 . 2011-09-10 13:11 -------- d-----w- c:\users\Jasmina\AppData\Roaming\DriverFinder 2011-09-10 11:05 . 2011-09-10 11:05 -------- d-----w- c:\users\Jasmina\AppData\Roaming\Malwarebytes 2011-09-10 11:05 . 2011-07-06 17:52 41272 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys 2011-09-10 11:05 . 2011-09-10 11:05 -------- d-----w- c:\programdata\Malwarebytes 2011-09-10 11:05 . 2011-09-10 11:05 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2011-09-10 11:05 . 2011-07-06 17:52 25912 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-09-10 10:45 . 2011-09-10 10:45 -------- d-----w- c:\users\Jasmina\AppData\Roaming\QuickScan 2011-09-10 10:10 . 2011-09-10 10:10 -------- d-----w- c:\program files (x86)\redist 2011-09-10 10:10 . 2011-09-10 10:10 -------- d-----w- c:\program files (x86)\readmes 2011-09-10 10:10 . 2011-09-10 10:10 -------- d-----w- c:\program files (x86)\licenses 2011-09-10 09:39 . 2011-09-11 08:59 2563808 ----a-w- c:\program files (x86)\ccsetup310_slim.exe 2011-09-09 15:22 . 2011-09-09 15:22 -------- d-----w- c:\users\Nico\AppData\Roaming\2K Sports 2011-09-07 09:57 . 2011-09-07 09:57 -------- d-----w- c:\users\Jasmina\AppData\Roaming\Uniblue 2011-09-07 09:57 . 2011-09-07 09:57 -------- d-----w- c:\program files (x86)\Uniblue 2011-09-07 09:57 . 2011-09-07 09:57 -------- d-----w- c:\users\Jasmina\AppData\Local\PackageAware 2011-09-07 09:36 . 2011-09-07 09:36 -------- d-----w- c:\users\Jasmina 2\AppData\Local\Adobe 2011-09-06 15:02 . 2011-09-06 15:02 -------- d-----w- c:\users\Nico\AppData\Roaming\Reallusion 2011-09-06 14:52 . 2011-09-06 14:52 -------- d-----w- c:\users\Nico\AppData\Local\Facebook 2011-09-01 18:49 . 2011-09-01 18:49 -------- d-----w- c:\users\Jasmina\AppData\Roaming\dvdcss 2011-09-01 17:51 . 2011-09-01 17:51 -------- d-----w- c:\users\Jasmina\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 2011-08-30 14:11 . 2011-08-30 14:11 -------- d-----w- c:\users\Jasmina\AppData\Local\Apple 2011-08-30 14:07 . 2011-08-30 14:08 -------- d-----w- c:\users\Jasmina\AppData\Roaming\DVDVideoSoft 2011-08-28 10:11 . 2011-08-28 10:12 51975388 ----a-w- c:\program files (x86)\VSX4_Pro_TBYB.exe.part 2011-08-28 08:58 . 2011-08-28 08:58 -------- d-----w- c:\users\Jasmina\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant 2011-08-28 08:58 . 2011-08-28 08:58 -------- d-----w- c:\program files (x86)\Adobe Download Assistant 2011-08-28 08:55 . 2011-08-28 08:56 2466704 ----a-w- c:\program files (x86)\AdobeDownloadAssistant.exe 2011-08-27 11:09 . 2011-08-29 17:37 -------- d-----w- c:\programdata\regid.1986-12.com.adobe 2011-08-27 11:04 . 2011-08-28 08:58 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR 2011-08-27 10:56 . 2011-08-27 10:56 1228384 ----a-w- c:\program files (x86)\PremiereElements_9_LS15.exe 2011-08-27 10:23 . 2011-09-12 20:24 -------- d-----w- c:\program files (x86)\Common Files\Akamai 2011-08-27 10:23 . 2011-08-27 10:23 8353800 ----a-w- c:\program files (x86)\Adobe_Premiere_Elements_9-AkamaiDLM.exe 2011-08-25 16:58 . 2011-08-26 08:12 -------- d-----w- c:\program files (x86)\Mozilla Sunbird 2011-08-25 16:58 . 2011-08-25 16:58 6716353 ----a-w- c:\program files (x86)\Sunbird_Setup_1.0_Beta_1.exe 2011-08-24 18:15 . 2011-07-09 05:26 2048 ----a-w- c:\windows\system32\tzres.dll 2011-08-24 18:15 . 2011-07-09 04:29 2048 ----a-w- c:\windows\SysWow64\tzres.dll . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-09-10 15:40 . 2011-05-19 11:51 168166968 ----a-w- c:\program files (x86)\OOo_3.3.0_Win_x86_install-wJRE_de.exe 2011-08-30 14:06 . 2011-05-28 12:11 14563768 ----a-w- c:\program files (x86)\FreeYouTubeToMP3Converter.exe 2011-08-30 14:04 . 2011-05-28 12:13 14212584 ----a-w- c:\program files (x86)\FreeYouTubeToiPodConverter.exe 2011-08-13 06:16 . 2011-05-19 13:13 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-08-06 15:45 . 2010-06-24 16:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2011-07-22 05:22 . 2011-08-11 06:01 1638912 ----a-w- c:\windows\system32\mshtml.tlb 2011-07-22 04:54 . 2011-08-11 06:01 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb 2011-07-18 14:59 . 2011-07-18 14:59 13522064 ----a-w- c:\program files (x86)\Firefox Setup 5.0.1.exe 2011-07-16 05:41 . 2011-08-11 06:01 362496 ----a-w- c:\windows\system32\wow64win.dll 2011-07-16 05:41 . 2011-08-11 06:01 243200 ----a-w- c:\windows\system32\wow64.dll 2011-07-16 05:41 . 2011-08-11 06:01 13312 ----a-w- c:\windows\system32\wow64cpu.dll 2011-07-16 05:39 . 2011-08-11 06:01 16384 ----a-w- c:\windows\system32\ntvdm64.dll 2011-07-16 05:37 . 2011-08-11 06:01 421888 ----a-w- c:\windows\system32\KernelBase.dll 2011-07-16 05:21 . 2011-08-11 06:01 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 4096 ---ha-w- c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 4096 ---ha-w- c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 4608 ---ha-w- c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-io-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 5120 ---ha-w- c:\windows\system32\api-ms-win-core-file-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2011-07-16 05:21 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll 2011-07-16 04:29 . 2011-08-11 06:01 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll 2011-07-16 04:26 . 2011-08-11 06:01 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2011-07-16 04:25 . 2011-08-11 06:01 25600 ----a-w- c:\windows\SysWow64\setup16.exe 2011-07-16 04:24 . 2011-08-11 06:01 5120 ----a-w- c:\windows\SysWow64\wow32.dll 2011-07-16 04:24 . 2011-08-11 06:01 272384 ----a-w- c:\windows\SysWow64\KernelBase.dll 2011-07-16 04:15 . 2011-08-11 06:01 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 5120 ---ha-w- c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 4608 ---ha-w- c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll 2011-07-16 04:15 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll 2011-07-16 02:21 . 2011-08-11 06:01 7680 ----a-w- c:\windows\SysWow64\instnm.exe 2011-07-16 02:21 . 2011-08-11 06:01 2048 ----a-w- c:\windows\SysWow64\user.exe 2011-07-16 02:17 . 2011-08-11 06:01 6144 ---ha-w- c:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll 2011-07-16 02:17 . 2011-08-11 06:01 4608 ---ha-w- c:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll 2011-07-16 02:17 . 2011-08-11 06:01 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll 2011-07-16 02:17 . 2011-08-11 06:01 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll 2011-07-09 02:46 . 2011-08-11 06:01 288768 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys 2011-07-06 18:22 . 2011-07-06 18:22 98304 ----a-w- c:\windows\SysWow64\CmdLineExt.dll 2011-06-29 09:25 . 2011-05-22 13:54 88288 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2011-06-29 09:25 . 2011-05-22 13:54 123784 ----a-w- c:\windows\system32\drivers\avipbb.sys 2011-06-26 07:14 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll 2011-06-26 07:14 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll 2011-06-24 05:34 . 2011-08-11 06:01 214528 ----a-w- c:\windows\system32\winsrv.dll 2011-06-24 05:25 . 2011-08-11 06:01 338432 ----a-w- c:\windows\system32\conhost.exe 2011-06-23 05:43 . 2011-08-11 06:01 5561216 ----a-w- c:\windows\system32\ntoskrnl.exe 2011-06-23 04:33 . 2011-08-11 06:01 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe 2011-06-23 04:33 . 2011-08-11 06:01 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe 2011-06-21 19:48 . 2011-05-19 14:17 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll 2011-06-21 06:34 . 2011-08-11 06:01 1923968 ----a-w- c:\windows\system32\drivers\tcpip.sys 2011-06-21 06:20 . 2011-08-11 06:01 1188864 ----a-w- c:\windows\system32\wininet.dll 2011-06-21 05:28 . 2011-08-11 06:01 981504 ----a-w- c:\windows\SysWow64\wininet.dll 2011-06-20 05:59 . 2011-05-21 18:35 2300696 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll 2011-06-20 05:59 . 2011-05-21 18:35 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll 2011-06-15 10:02 . 2011-08-11 06:01 212992 ----a-w- c:\windows\system32\odbctrac.dll 2011-06-15 10:02 . 2011-08-11 06:01 163840 ----a-w- c:\windows\system32\odbccp32.dll 2011-06-15 10:02 . 2011-08-11 06:01 106496 ----a-w- c:\windows\system32\odbccu32.dll 2011-06-15 10:02 . 2011-08-11 06:01 106496 ----a-w- c:\windows\system32\odbccr32.dll 2011-06-15 08:55 . 2011-08-11 06:01 86016 ----a-w- c:\windows\SysWow64\odbccu32.dll 2011-06-15 08:55 . 2011-08-11 06:01 81920 ----a-w- c:\windows\SysWow64\odbccr32.dll 2011-06-15 08:55 . 2011-08-11 06:01 319488 ----a-w- c:\windows\SysWow64\odbcjt32.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-07-29 17361032] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-06-06 35736] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920] "Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2010-08-19 487562] "Dell DataSafe Online"="c:\program files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe" [2010-08-26 1117528] "RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112] "Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [2010-11-17 514544] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-04-14 421160] "TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2011-05-19 273544] "Bing Bar"="c:\program files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe" [2010-04-27 243544] "Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-11-11 288088] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-03-28 281768] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696] "SMSTray"="c:\program files (x86)\Samsung\EmoDio\SMSTray.exe" [2009-04-16 479232] "AccuWeatherWidget"="c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" [2011-05-30 885760] "EKIJ5000StatusMonitor"="c:\windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe" [2011-03-03 2922496] "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-07-06 449584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] "Launcher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe" [2010-08-11 163040] "DSUpdateLauncher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe" [2010-07-21 18240] . c:\users\Jasmina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592] . c:\users\Jasmina 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ šberwachungstool fr die Intel© Turbo-Boost-Technik 2.0.lnk - c:\program files\Intel\TurboBoost\SignalIslandUi.exe [2010-11-29 204288] . c:\users\Nico\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592] . c:\users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-19 136176] R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632] R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-19 136176] R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x] R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x] R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2010-12-17 340240] R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\DRIVERS\nvstusb.sys [x] R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184] S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x] S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [x] S2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408] S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952] S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208] S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136] S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-03-28 136360] S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-01-24 901184] S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-01-24 991296] S2 DBService;DATA BECKER Update Service;c:\program files (x86)\Common Files\DATA BECKER Shared\DBService.exe [2010-05-28 2650112] S2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files (x86)\Kodak\AiO\Center\EKAiOHostService.exe [2011-03-09 366000] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-06 366640] S2 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x] S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2010-11-30 1997416] S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2010-08-20 689472] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-11-29 378472] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x] S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280] S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys [x] S3 AVer7231_x64;AVerMedia 7231 capture service;c:\windows\system32\DRIVERS\AVer7231_x64.sys [x] S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-01-24 1298496] S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [x] S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [x] S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [x] S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [x] S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x] S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 NETwNs64;___ Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x] S3 qicflt;upper Device Filter Driver;c:\windows\system32\DRIVERS\qicflt.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] Akamai REG_MULTI_SZ Akamai . Inhalt des "geplante Tasks" Ordners . 2011-09-10 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3230886925-126132133-2629391164-1004Core.job - c:\users\Nico\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-09-06 14:52] . 2011-09-12 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3230886925-126132133-2629391164-1004UA.job - c:\users\Nico\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-09-06 14:52] . 2011-09-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-19 11:46] . 2011-09-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-19 11:46] . . --------- x86-64 ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2010-12-14 6561384] "RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-12-11 2186856] "NVHotkey"="c:\windows\system32\nvHotkey.dll" [2010-11-29 312936] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-12 167960] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-12 391704] "Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-12 418328] "FreeFallProtection"="c:\program files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe" [2010-12-17 686704] "BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-01-24 10355200] "IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-12-17 1933584] "QuickSet"="c:\program files\Dell\QuickSet\QuickSet.exe" [2011-01-25 4479648] "IntelTBRunOnce"="wscript.exe" [2009-07-14 168960] "EKIJ5000StatusMonitor"="c:\windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe" [2011-03-03 2922496] "DellStage"="c:\program files (x86)\Dell Stage\Dell Stage\stage_primary.exe" [2011-05-30 2055816] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-07-28 497648] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x1 "AppInit_DLLs"=c:\windows\System32\nvinitx.dll . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = mLocal Page = uInternet Settings,ProxyOverride = *.local IE: Free YouTube to iPod Converter - c:\users\Administrator\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetoipodconverter.htm IE: Free YouTube to MP3 Converter - c:\users\Administrator\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm TCP: DhcpNameServer = 192.168.1.1 FF - ProfilePath - c:\users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\3cers2zs.default\ FF - prefs.js: browser.search.defaulturl - FF - prefs.js: browser.search.selectedEngine - . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Wow6432Node-HKLM-Run-Conime - c:\windows\system32\conime.exe HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (Administrator) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,48,df,76,3e,52,58,79,42,bd,6e,1b,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,48,df,76,3e,52,58,79,42,bd,6e,1b,\ . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice] @Denied: (2) (Administrator) "Progid"="ThunderbirdEML" . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice] @Denied: (2) (Administrator) "Progid"="Opera.HTML" . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice] @Denied: (2) (Administrator) "Progid"="Opera.HTML" . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mht\UserChoice] @Denied: (2) (Administrator) "Progid"="Opera.HTML" . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mhtml\UserChoice] @Denied: (2) (Administrator) "Progid"="Opera.HTML" . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpdp\UserChoice] @Denied: (2) (Administrator) "Progid"="NCH.MixPad.mpdp" . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice] @Denied: (2) (Administrator) "Progid"="FirefoxHTML" . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wdseml\UserChoice] @Denied: (2) (Administrator) "Progid"="ThunderbirdEML" . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wpp\UserChoice] @Denied: (2) (Administrator) "Progid"="NCH.WavePad.wpp" . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice] @Denied: (2) (Administrator) "Progid"="Opera.HTML" . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtm\UserChoice] @Denied: (2) (Administrator) "Progid"="Opera.HTML" . [HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice] @Denied: (2) (Administrator) "Progid"="Opera.HTML" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2011-09-12 22:34:40 ComboFix-quarantined-files.txt 2011-09-12 20:34 . Vor Suchlauf: 15 Verzeichnis(se), 136.793.264.128 Bytes frei Nach Suchlauf: 15 Verzeichnis(se), 136.465.199.104 Bytes frei . - - End Of File - - E42A9B362C837E0FA4912581552AF6C8 |
12.09.2011, 21:53 | #17 |
| Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert Echt nett, dass du dir so viel Mühe gibst. Bis morgen
__________________Jasmina |
12.09.2011, 22:01 | #18 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
__________________
__________________ |
13.09.2011, 07:47 | #19 |
| Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert Guten Morgen, hier der aswMBR file: aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software Run date: 2011-09-13 08:31:31 ----------------------------- 08:31:31.884 OS Version: Windows x64 6.1.7601 Service Pack 1 08:31:31.884 Number of processors: 8 586 0x2A07 08:31:31.884 ComputerName: DELL-PC UserName: 08:31:33.772 Initialize success 08:34:07.295 AVAST engine defs: 11091201 08:34:23.768 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 08:34:23.784 Disk 0 Vendor: ST950042 D005 Size: 476940MB BusType: 3 08:34:23.799 Disk 0 MBR read successfully 08:34:23.799 Disk 0 MBR scan 08:34:23.815 Disk 0 Windows VISTA default MBR code 08:34:23.815 Service scanning 08:34:24.813 Modules scanning 08:34:24.813 Disk 0 trace - called modules: 08:34:24.845 ntoskrnl.exe CLASSPNP.SYS disk.sys stdcfltn.sys ACPI.sys iaStor.sys hal.dll 08:34:24.860 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80065dd790] 08:34:24.876 3 CLASSPNP.SYS[fffff8800185143f] -> nt!IofCallDriver -> [0xfffffa8006501cb0] 08:34:24.876 5 stdcfltn.sys[fffff88001b92c52] -> nt!IofCallDriver -> [0xfffffa8004b36590] 08:34:24.876 7 ACPI.sys[fffff88000e0b7a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004b3d050] 08:34:28.261 AVAST engine scan C:\Windows 08:34:30.710 AVAST engine scan C:\Windows\system32 08:36:16.151 AVAST engine scan C:\Windows\system32\drivers 08:36:29.130 AVAST engine scan C:\Users\Administrator 08:37:26.663 AVAST engine scan C:\ProgramData 08:39:10.434 Scan finished successfully 08:39:36.269 Disk 0 MBR has been saved successfully to "C:\Users\Administrator\Desktop\MBR.dat" 08:39:36.269 The log file has been saved successfully to "C:\Users\Administrator\Desktop\aswMBR.txt" VIele Grüße Jasmina |
13.09.2011, 13:36 | #20 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs. Denk dran beide Tools zu updaten vor dem Scan!! Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
14.09.2011, 06:44 | #21 |
| Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert Hallo, hier nun der file von Super Anti Spyware: SUPERAntiSpyware Scan Log hxxp://www.superantispyware.com Generated 09/14/2011 at 00:25 AM Application Version : 5.0.1118 Core Rules Database Version : 7683 Trace Rules Database Version: 5495 Scan type : Complete Scan Total Scan Time : 01:32:56 Operating System Information Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601) UAC Off - Administrator Memory items scanned : 777 Memory threats detected : 0 Registry items scanned : 77044 Registry threats detected : 0 File items scanned : 234057 File threats detected : 264 Adware.Tracking Cookie C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@ad.adserver01[1].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@ad.zanox[1].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@ad2.adfarm1.adition[1].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@adfarm1.adition[2].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@adform[2].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@adx.chip[2].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@apmebf[2].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@atdmt[1].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@doubleclick[1].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@fastclick[1].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@mediaplex[1].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@microsoftwlsearchcrm.112.2o7[1].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@msnportal.112.2o7[1].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@serving-sys[1].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@track.adform[1].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@tradedoubler[1].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@tribalfusion[2].txt C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@zanox[1].txt C:\USERS\JASMINA 2\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\JASMINA_2@MEDIAPLEX[1].TXT C:\USERS\JASMINA 2\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\JASMINA_2@APMEBF[2].TXT C:\USERS\JASMINA 2\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\JASMINA_2@FASTCLICK[1].TXT .adfarm1.adition.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] fl01.ct2.comclick.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] tracking.gameforge.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] www.trafficjmp.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] www.trafficjmp.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] fl01.ct2.comclick.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] fl01.ct2.comclick.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .specificclick.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .content.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .adviva.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .apmebf.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .zanox.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] track.adform.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .bs.serving-sys.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .atdmt.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .atdmt.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .imrworldwide.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .imrworldwide.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .questionmarket.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .questionmarket.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .adserver.gs [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] track.adform.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .adform.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] ad3.adfarm1.adition.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] ad1.adfarm1.adition.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] ad2.adfarm1.adition.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] ww251.smartadserver.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .traffictrack.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .unitymedia.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .unitymedia.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] www.active-tracking.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] www.active-tracking.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] www.active-tracking.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] ad.zanox.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ] C:\USERS\NICO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\NICO@APMEBF[2].TXT C:\USERS\NICO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\NICO@DOUBLECLICK[1].TXT C:\USERS\NICO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\NICO@FASTCLICK[1].TXT C:\USERS\NICO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\NICO@MEDIAPLEX[1].TXT .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] statse.webtrendslive.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .fastclick.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .imrworldwide.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .imrworldwide.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] adserv.brandaffinity.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] adserv.brandaffinity.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .atdmt.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .tripod.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] fl01.ct2.comclick.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .c.gigcount.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .content.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] www.active-tracking.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ads2.net2day.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ads3.net2day.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .ad.adnet.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ads3.net2day.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ads2.net2day.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .specificclick.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] fl01.ct2.comclick.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] fl01.ct2.comclick.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .a.revenuemax.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .fastclick.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] isparkmedia.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] on.isparkmedia.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .fastclick.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adviva.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .olympiaverlag.122.2o7.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .apmebf.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .server.cpmstar.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .server.cpmstar.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .server.cpmstar.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] studivz.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .nike.112.2o7.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adserver.adtechus.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .tribalfusion.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] adserver2.clipkit.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .clickfuse.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .clickfuse.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .clickfuse.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .clickfuse.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ad3.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ad4.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .eyewonder.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .eyewonder.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .fastclick.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ad2.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ad1.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] fl01.ct2.comclick.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] adx.chip.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] adx.chip.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] adx.chip.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] adx.chip.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] adx.chip.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] adx.chip.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .atdmt.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ww251.smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] ad.zanox.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ] |
14.09.2011, 06:50 | #22 |
| Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert ... und der malwarebeytes log file: Malwarebytes' Anti-Malware 1.51.2.1300 Malwarebytes : Free anti-malware, anti-virus and spyware removal download Datenbank Version: 7710 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 14.09.2011 01:23:34 mbam-log-2011-09-14 (01-23-34).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Durchsuchte Objekte: 437169 Laufzeit: 36 Minute(n), 43 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) |
14.09.2011, 08:29 | #23 |
| Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert hallo arne der eset scan folgt noch. viele grüße jasmina |
14.09.2011, 09:56 | #24 |
| Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert so, jetzt der log file vom eset scan. viele grüße jasmina ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6528 # api_version=3.0.2 # EOSSerial=69081a717b6703468f3d7f83e414fbb1 # end=stopped # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-09-11 06:42:28 # local_time=2011-09-11 08:42:28 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=512 16777215 100 0 0 0 0 0 # compatibility_mode=1797 16775165 100 94 178930 52302693 115963 0 # compatibility_mode=5893 16776574 100 94 6693113 67395722 0 0 # compatibility_mode=8192 67108863 100 0 225 225 0 0 # scanned=7921 # found=0 # cleaned=0 # scan_time=676 ESETSmartInstaller@High as downloader log: all ok esets_scanner_update returned -1 esets_gle=53251 # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6528 # api_version=3.0.2 # EOSSerial=69081a717b6703468f3d7f83e414fbb1 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-09-11 08:16:39 # local_time=2011-09-11 10:16:39 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=512 16777215 100 0 0 0 0 0 # compatibility_mode=1797 16775165 100 94 179678 52303441 116711 0 # compatibility_mode=5893 16776574 100 94 6693861 67396470 0 0 # compatibility_mode=8192 67108863 100 0 973 973 0 0 # scanned=203845 # found=1 # cleaned=0 # scan_time=5578 C:\Program Files (x86)\Uniblue\RegistryBooster\rb_ubm.exe Win32/RegistryBooster application (unable to clean) 00000000000000000000000000000000 I ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6528 # api_version=3.0.2 # EOSSerial=69081a717b6703468f3d7f83e414fbb1 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-09-14 05:28:43 # local_time=2011-09-14 07:28:43 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=512 16777215 100 0 0 0 0 0 # compatibility_mode=1797 16775165 100 94 386028 52509791 140713 0 # compatibility_mode=5893 16776574 100 94 6900211 67602820 0 0 # compatibility_mode=8192 67108863 100 0 207323 207323 0 0 # scanned=189864 # found=1 # cleaned=0 # scan_time=5153 C:\Program Files (x86)\Uniblue\RegistryBooster\rb_ubm.exe Win32/RegistryBooster application (unable to clean) 00000000000000000000000000000000 I ESETSmartInstaller@High as downloader log: all ok esets_scanner_update returned -1 esets_gle=53251 # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6528 # api_version=3.0.2 # EOSSerial=69081a717b6703468f3d7f83e414fbb1 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-09-14 05:33:55 # local_time=2011-09-14 07:33:55 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=512 16777215 100 0 0 0 0 0 # compatibility_mode=1797 16775165 100 94 391414 52515177 146099 0 # compatibility_mode=5893 16776574 100 94 6905597 67608206 0 0 # compatibility_mode=8192 67108863 100 0 212709 212709 0 0 # scanned=5960 # found=0 # cleaned=0 # scan_time=79 ESETSmartInstaller@High as downloader log: all ok ESETSmartInstaller@High as downloader log: all ok esets_scanner_update returned -1 esets_gle=53251 # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6528 # api_version=3.0.2 # EOSSerial=69081a717b6703468f3d7f83e414fbb1 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-09-14 07:10:39 # local_time=2011-09-14 09:10:39 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=512 16777215 100 0 0 0 0 0 # compatibility_mode=1797 16775165 100 94 392704 52516467 147389 0 # compatibility_mode=5893 16776574 100 94 6906887 67609496 0 0 # compatibility_mode=8192 67108863 100 0 213999 213999 0 0 # scanned=189863 # found=1 # cleaned=0 # scan_time=4592 C:\Program Files (x86)\Uniblue\RegistryBooster\rb_ubm.exe Win32/RegistryBooster application (unable to clean) 00000000000000000000000000000000 I ESETSmartInstaller@High as downloader log: all ok esets_scanner_update returned -1 esets_gle=53251 # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6528 # api_version=3.0.2 # EOSSerial=69081a717b6703468f3d7f83e414fbb1 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-09-14 08:49:34 # local_time=2011-09-14 10:49:34 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=512 16777215 100 0 0 0 0 0 # compatibility_mode=1797 16775165 100 94 398573 52522336 153258 0 # compatibility_mode=5893 16776574 100 94 6912756 67615365 0 0 # compatibility_mode=8192 67108863 100 0 219868 219868 0 0 # scanned=189865 # found=1 # cleaned=0 # scan_time=4658 C:\Program Files (x86)\Uniblue\RegistryBooster\rb_ubm.exe Win32/RegistryBooster application (unable to clean) 00000000000000000000000000000000 I |
14.09.2011, 12:30 | #25 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert Sieht ok aus, da wurden nur Cookies gefunden. Noch Probleme oder weitere Funde in der Zwischenzeit?
__________________ Logfiles bitte immer in CODE-Tags posten |
14.09.2011, 18:36 | #26 |
| Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert Das Hauptproblem, als die Meldung zu Y:autorun.inf ist nicht mehr aufgetaucht, auch sonst keine neuen Meldungen. Zu Denken gibt mir, dass ich im Benutzerkonto "Nico" einige Programme (Open Office) nicht öffnen kann, obwohl ich sie freigegeben habe. Kann das unter Umständen eine Nachwirkung von WIndows Live Family Safety (Jugendschutz) sein? Überhaupt, ist das Programm empfehlenswert oder habe ich damit auch daneben gegriffen? Viele Grüße Jasmina |
14.09.2011, 21:04 | #27 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiertZitat:
Eine Freigabe ist ein Netzwerke-Share, damit andere Rechner auf diese "Freigabe" (und das ist ein Ordner!) zugreifen können! Auf einem und demselben Rechner muss man keine Freigaben erstellen, damit andere Benutzer diese Programme nutzen können!
__________________ Logfiles bitte immer in CODE-Tags posten |
15.09.2011, 06:00 | #28 |
| Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert okaaaay .... gut zu wissen .... jedenfalls kann nicht mehr auf alle programme (open office, real player) und dateien zugegriffen werden. Fehlermeldungen, die auftauchten, dass bestimmte exe-Dateien nicht geöffnet werden können, kommen nicht mehr, aber die programme lassen sich eben nicht öffnen. Aber das ist vielleicht gar kein Viren Problem? Vielleicht sollte ich das Konto einfach löschen und neu einrichten? Bei den anderen Benutzerkonten laufen die Programme nämlich. Danke, auch dafür, dass du meine Unwissenheit erträgst. Viele Grüße Jasmina Geändert von Rheingold (15.09.2011 um 06:29 Uhr) |
15.09.2011, 09:49 | #29 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert Einfach mal die Programme neu installieren...
__________________ Logfiles bitte immer in CODE-Tags posten |
16.09.2011, 15:58 | #30 |
| Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert Hallo Arne, Neuinstallation habe ich probiert, ändert aber nichts. Dann habe ich das Konto von Standard in Administrator geändert und noch mal Open Office installiert. Das hat aber auch nicht geholfen. Vielleicht sollte ich es einfach löschen und dann neu einrichten? Denn das scheint ja das letzte Problem zu sein. Oder spricht was dagegen. Danke und viele Grüße Jasmina |
Themen zu Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert |
.inf, 64bit, andere, antivir, aus sicherheitsgründen, autorun.inf, avira, blockiert, doppel, doppelt, ebook, erhalte, erhalten, folge, folgende, gesperrt, meldung, nicht mehr, ordner, programme, schließe, sicherheitsgründe, sicherheitsgründen, warnmeldung, windows, zugriff |