|
Log-Analyse und Auswertung: Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt"Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
03.11.2011, 15:53 | #1 |
| Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" Hallo zusammen Gestern Abend gingen spontan 1000 Fenster, die behauptet haben, dass meine Festplatte kaputt sei. War mir direkt klar, dass ich mir irgendwas eingefangen hab. Meinen Taskmanager konnte ich auch nicht mehr benutzen, da irgendwas ihn blockierte. Direkt mit Antivir Spybot SUPERAntiSpyware Malwarebytes' Anti-Malware gescannt, die haben zwar alle was gefunden und mein Taskmanager funktioniert wieder, aber mein Desktop ist immer noch schwarz und meine Startmenüeinträge sind auch verschwunden. Ich dachte mir "Reparaturmodus"... F8 beim Booten, Dell hat auf meine zweite Partition ein Windowsbackup gelegt. Ar...lecken, da keine Domäne wurde bzw angeblich mein Passwort / Benutzername falsch ist kann ich mich nicht anmelden. OTL sagt: Code:
ATTFilter OTL logfile created on: 03.11.2011 14:24:06 - Run 2 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Benedikt\Desktop Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 7.0.6002.18005) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 1,93 Gb Available Physical Memory | 64,51% Memory free 6,19 Gb Paging File | 5,10 Gb Available in Paging File | 82,44% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 138,91 Gb Total Space | 11,25 Gb Free Space | 8,10% Space Free | Partition Type: NTFS Drive D: | 10,00 Gb Total Space | 5,62 Gb Free Space | 56,25% Space Free | Partition Type: NTFS Computer Name: HERBERT | User Name: Benedikt | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.11.03 12:58:02 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Benedikt\Desktop\OTL.exe PRC - [2011.10.25 13:38:10 | 000,542,672 | ---- | M] (Threat Expert Ltd.) -- C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe PRC - [2011.10.17 18:18:23 | 004,615,552 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe PRC - [2011.08.31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2011.08.12 00:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe PRC - [2011.07.11 20:51:21 | 000,269,480 | -H-- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2011.04.30 18:19:56 | 000,136,360 | -H-- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2010.11.05 07:58:45 | 000,281,768 | -H-- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2010.09.06 17:56:38 | 000,247,096 | ---- | M] () -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe PRC - [2010.01.14 21:10:53 | 000,076,968 | -H-- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe PRC - [2009.05.21 11:14:02 | 001,025,264 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\gs_agent\dsc.exe PRC - [2009.05.21 11:13:58 | 000,206,064 | -H-- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtcmd.exe PRC - [2009.04.10 23:27:38 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe PRC - [2008.08.14 00:04:44 | 000,201,968 | -H-- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe PRC - [2008.06.30 11:28:24 | 000,040,960 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\hidfind.exe PRC - [2008.06.30 11:28:14 | 000,196,608 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\Apoint.exe PRC - [2008.06.30 11:28:12 | 000,049,152 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApntEx.exe PRC - [2008.06.30 11:28:12 | 000,046,376 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApMsgFwd.exe PRC - [2008.06.26 12:10:06 | 000,442,467 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\sttray.exe PRC - [2008.06.26 12:10:00 | 000,221,273 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_238116a1\stacsv.exe PRC - [2008.06.26 12:09:50 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_238116a1\AEstSrv.exe PRC - [2008.04.28 15:56:28 | 000,161,048 | -H-- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe PRC - [2008.01.21 03:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe PRC - [2008.01.21 03:23:24 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\WindowsMobile\wmdSync.exe PRC - [2007.10.03 14:45:02 | 000,358,936 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe PRC - [2007.10.03 14:44:58 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe PRC - [2007.09.02 12:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe PRC - [2003.08.05 09:43:04 | 000,045,056 | R--- | M] (Prolific Technology Inc.) -- C:\Windows\System32\HotFixQ0306270.exe ========== Modules (No Company Name) ========== MOD - [2011.11.03 14:23:06 | 000,063,488 | ---- | M] () -- C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll MOD - [2011.11.03 14:23:06 | 000,052,736 | ---- | M] () -- C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll MOD - [2011.11.03 12:57:31 | 000,117,760 | ---- | M] () -- C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL MOD - [2011.11.03 12:57:31 | 000,052,224 | ---- | M] () -- C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll MOD - [2010.10.28 08:29:34 | 011,804,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\62dfd8797881fd7a0d0de3f448a18c01\System.Web.ni.dll MOD - [2010.10.28 08:29:25 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\9b8e883fd5fa51f026577156a0ee9d57\System.Runtime.Remoting.ni.dll MOD - [2010.10.28 08:23:55 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\88593f5f0fc6de5d5f4a85aa2b1466f3\System.Xml.ni.dll MOD - [2010.10.28 08:23:38 | 012,430,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d9ab6e29eba6cb0d8459fcbb2c40c1a7\System.Windows.Forms.ni.dll MOD - [2010.10.28 08:23:27 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\887fa2d6b76e7302b0c664effad4f91f\System.Drawing.ni.dll MOD - [2010.10.28 08:21:46 | 007,949,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ed6ae2749d12c4729ee43ff339de4bb8\System.ni.dll MOD - [2010.10.28 08:21:28 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\98bbdd8c400493ad228b8283665cc9da\mscorlib.ni.dll MOD - [2009.03.29 21:42:14 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_de_b77a5c561934e089\System.resources.dll MOD - [2009.03.29 21:42:14 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll MOD - [2009.03.29 21:42:12 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll MOD - [2008.05.04 09:42:20 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll MOD - [2008.03.12 06:37:52 | 000,055,808 | ---- | M] () -- C:\Windows\System32\bcmwlrmt.dll MOD - [2007.09.02 12:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe MOD - [2007.09.02 12:57:36 | 000,069,632 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.dll ========== Win32 Services (SafeList) ========== SRV - [2011.10.28 11:02:02 | 001,117,624 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe -- (sdCoreService) SRV - [2011.10.27 21:49:32 | 000,402,336 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe -- (sdAuxService) SRV - [2011.10.25 13:38:10 | 000,542,672 | ---- | M] (Threat Expert Ltd.) [Auto | Running] -- C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe -- (Browser Defender Update Service) SRV - [2011.08.31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011.08.12 00:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE) SRV - [2011.07.11 20:51:21 | 000,269,480 | -H-- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011.04.30 18:19:56 | 000,136,360 | -H-- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2010.09.06 17:56:38 | 000,247,096 | ---- | M] () [Auto | Running] -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service) SRV - [2009.09.28 14:48:15 | 000,316,664 | -H-- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService) SRV - [2008.08.22 09:03:20 | 000,016,680 | -H-- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe -- (GoToAssist) SRV - [2008.08.14 00:04:44 | 000,201,968 | -H-- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter) SRV - [2008.06.26 12:10:00 | 000,221,273 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_238116a1\stacsv.exe -- (STacSV) SRV - [2008.06.26 12:09:50 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_238116a1\AEstSrv.exe -- (AESTFilters) SRV - [2008.04.28 15:56:28 | 000,161,048 | -H-- | M] (Stardock Corporation) [Auto | Running] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService) SRV - [2008.01.21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2008.01.21 03:23:24 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2008.01.21 03:23:24 | 000,167,936 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) SRV - [2008.01.09 11:30:08 | 000,121,360 | -H-- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ) SRV - [2007.10.03 14:45:02 | 000,358,936 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R) ========== Driver Services (SafeList) ========== DRV - [2011.10.28 11:02:54 | 000,185,560 | ---- | M] (PC Tools) [Kernel | System | Running] -- C:\Windows\System32\drivers\PCTSD.sys -- (PCTSD) DRV - [2011.10.22 15:11:14 | 000,331,880 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\PCTCore.sys -- (PCTCore) DRV - [2011.10.07 17:52:06 | 000,341,656 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\pctDS.sys -- (pctDS) DRV - [2011.09.28 13:14:02 | 000,056,840 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PCTBD.sys -- (PCTBD) DRV - [2011.08.31 17:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector) DRV - [2011.07.22 17:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV) DRV - [2011.07.12 22:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL) DRV - [2011.07.11 20:51:22 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2011.07.11 20:51:22 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2010.09.03 20:40:46 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd) DRV - [2009.05.21 12:59:12 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi) DRV - [2009.05.11 09:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009.02.13 11:35:01 | 000,011,608 | -H-- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008.07.30 06:51:30 | 000,277,736 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\acedrv11.sys -- (acedrv11) DRV - [2008.06.30 11:28:10 | 000,170,032 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService) DRV - [2008.06.26 12:10:08 | 000,380,928 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA) DRV - [2008.05.04 09:42:18 | 003,548,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300) DRV - [2008.05.04 09:42:18 | 003,548,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2008.05.04 09:42:18 | 003,548,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag) DRV - [2008.03.14 14:04:26 | 000,054,784 | ---- | M] (ITE Tech. Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\itecir.sys -- (itecir) DRV - [2008.03.12 06:37:46 | 000,018,424 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bcm42rly.sys -- (BCM42RLY) DRV - [2008.03.11 07:42:24 | 000,203,264 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\k57nd60x.sys -- (k57nd60x) Broadcom NetLink (TM) DRV - [2008.03.11 07:24:46 | 000,038,400 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp) DRV - [2008.03.11 07:24:44 | 000,046,592 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2008.03.11 07:24:42 | 000,043,008 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk) DRV - [2008.01.21 03:23:25 | 000,251,904 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VSTBS23.SYS -- (VSTHWBS2) DRV - [2008.01.21 03:23:25 | 000,220,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel(R) DRV - [2007.11.29 01:17:56 | 000,036,368 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt) DRV - [2007.11.29 01:17:48 | 000,035,088 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt) DRV - [2007.05.11 10:59:00 | 000,017,536 | ---- | M] (Olivetti-Engineering SA) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\desrvusb.sys -- (DESVUSB) DRV - [2003.10.06 10:29:08 | 000,007,424 | R--- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\plff.sys -- (PLFF) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\..\URLSearchHook: - No CLSID value found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKU\.DEFAULT\..\URLSearchHook: - No CLSID value found IE - HKU\.DEFAULT\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\URLSearchHook: - No CLSID value found IE - HKU\S-1-5-18\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2775041620-371297593-3811378524-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/ IE - HKU\S-1-5-21-2775041620-371297593-3811378524-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-2775041620-371297593-3811378524-1000\..\URLSearchHook: - No CLSID value found IE - HKU\S-1-5-21-2775041620-371297593-3811378524-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKU\S-1-5-21-2775041620-371297593-3811378524-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2775041620-371297593-3811378524-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0: C:\Program Files\Picasa2\npPicasa2.dll File not found FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: File not found FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2910: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: File not found FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Benedikt\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{cb84136f-9c44-433a-9048-c5cd9df1dc16}: C:\Program Files\PC Tools\PC Tools Security\BDT\Firefox\ [2011.11.02 21:45:43 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.10.06 16:18:25 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.03.21 10:33:49 | 000,000,000 | ---D | M] [2010.04.28 14:13:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Extensions [2010.04.28 14:13:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2009.06.26 12:12:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Extensions\uploadr@flickr.com [2011.10.24 16:37:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Firefox\Profiles\9gbwpvs7.default\extensions [2010.04.27 20:10:58 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Firefox\Profiles\9gbwpvs7.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011.02.16 19:52:59 | 000,000,000 | ---D | M] (PDF Download) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Firefox\Profiles\9gbwpvs7.default\extensions\{37E4D8EA-8BDA-4831-8EA1-89053939A250} [2009.06.02 19:04:48 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Firefox\Profiles\9gbwpvs7.default\extensions\moveplayer@movenetworks.com [2011.10.26 18:43:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010.10.04 09:05:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010.10.05 19:44:58 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010.11.27 21:25:51 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011.02.20 21:36:11 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011.06.17 12:56:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2011.10.26 18:43:38 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2011.10.06 16:18:24 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011.10.03 04:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2010.12.09 11:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll [2011.10.06 16:18:21 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2011.10.06 16:18:21 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2011.10.06 16:18:21 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2011.10.06 16:18:21 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2011.10.06 16:18:21 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2011.10.06 16:18:21 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2010.09.22 17:43:12 | 000,000,057 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found. O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll (SimplyGen) O2 - BHO: (PC Tools Browser Defender BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.) O2 - BHO: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O3 - HKLM\..\Toolbar: (PC Tools Browser Defender) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) O3 - HKLM\..\Toolbar: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O3 - HKU\S-1-5-21-2775041620-371297593-3811378524-1000\..\Toolbar\WebBrowser: (PC Tools Browser Defender) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O3 - HKU\S-1-5-21-2775041620-371297593-3811378524-1000\..\Toolbar\WebBrowser: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O4 - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [dellsupportcenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.) O4 - HKLM..\Run: [ECenter] C:\DELL\E-Center\EULALauncher.exe ( ) O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation) O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [PLFFAP] C:\Windows\System32\HotFixQ0306270.exe (Prolific Technology Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation) O4 - HKU\.DEFAULT..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) O4 - HKU\S-1-5-18..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) O4 - HKU\S-1-5-21-2775041620-371297593-3811378524-1000..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe () O4 - HKU\S-1-5-21-2775041620-371297593-3811378524-1000..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-21-2775041620-371297593-3811378524-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-2775041620-371297593-3811378524-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKU\S-1-5-21-2775041620-371297593-3811378524-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0 O7 - HKU\S-1-5-21-2775041620-371297593-3811378524-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O9 - Extra Button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programs\PartyGaming.Net\PartyPokerNet\RunPF.exe () O9 - Extra 'Tools' menuitem : PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programs\PartyGaming.Net\PartyPokerNet\RunPF.exe () O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000037 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2D5B2A83-26CD-4993-A422-1070C2D311AA}: DhcpNameServer = 195.50.140.118 195.50.140.248 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F12C023B-96A9-4254-A2BC-45E07E338589}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com) O20 - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll) - C:\Program Files\Citrix\GoToAssist\514\g2awinlogon.dll (Citrix Online, a division of Citrix Systems, Inc.) O24 - Desktop WallPaper: C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O24 - Desktop BackupWallPaper: C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com) O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.11.03 12:58:05 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Benedikt\Desktop\OTL.exe [2011.11.03 12:57:23 | 000,000,000 | ---D | C] -- C:\Users\Benedikt\AppData\Roaming\SUPERAntiSpyware.com [2011.11.03 12:56:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware [2011.11.03 12:56:12 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com [2011.11.03 12:56:12 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware [2011.11.03 12:55:33 | 012,837,560 | ---- | C] (SUPERAntiSpyware.com) -- C:\Users\Benedikt\Desktop\SUPERAntiSpyware501134.exe [2011.11.02 22:23:10 | 009,852,544 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Benedikt\Desktop\mbam-setup-1.51.2.1300.exe [2011.11.02 22:05:19 | 000,000,000 | ---D | C] -- C:\Users\Benedikt\AppData\Local\Threat Expert [2011.11.02 21:55:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy [2011.11.02 21:55:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2011.11.02 21:55:46 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy [2011.11.02 21:45:43 | 000,149,456 | ---- | C] (PC Tools) -- C:\Windows\SGDetectionTool.dll [2011.11.02 21:45:43 | 000,056,840 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTBD.sys [2011.11.02 21:45:42 | 002,291,664 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDCore.dll [2011.11.02 21:45:42 | 001,681,360 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDRes.dll [2011.11.02 21:45:04 | 000,252,840 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctgntdi.sys [2011.11.02 21:45:04 | 000,105,792 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctwfpfilter.sys [2011.11.02 21:45:00 | 000,017,848 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctBTFix.sys [2011.11.02 21:45:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Tools Security [2011.11.02 21:44:57 | 000,070,536 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctplsg.sys [2011.11.02 21:44:50 | 000,000,000 | ---D | C] -- C:\Program Files\PC Tools [2011.11.02 21:41:40 | 000,660,992 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctEFA.sys [2011.11.02 21:41:40 | 000,341,656 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctDS.sys [2011.11.02 21:41:35 | 000,331,880 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTCore.sys [2011.11.02 21:41:35 | 000,162,584 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTAppEvent.sys [2011.11.02 21:41:33 | 000,185,560 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTSD.sys [2011.11.02 21:41:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools [2011.11.02 21:41:13 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools [2011.10.31 13:00:44 | 000,000,000 | -H-D | C] -- C:\Users\Benedikt\AppData\Local\O&O [2011.10.30 12:24:58 | 000,000,000 | -H-D | C] -- C:\Users\Benedikt\AppData\Local\Downloaded Installations [2011.10.30 12:14:03 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2011.10.30 12:14:02 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2011.10.26 18:43:35 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe [2011.10.26 18:43:35 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe [2011.10.26 18:43:35 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe ========== Files - Modified Within 30 Days ========== [2011.11.03 14:27:09 | 000,670,946 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2011.11.03 14:27:09 | 000,631,636 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011.11.03 14:27:09 | 000,144,082 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2011.11.03 14:27:09 | 000,118,262 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011.11.03 14:27:07 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job [2011.11.03 14:25:19 | 000,000,424 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{50F6F6D8-62B8-44EE-8129-9F539D72EE3C}.job [2011.11.03 14:21:55 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.11.03 14:20:53 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011.11.03 14:20:53 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011.11.03 14:20:36 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.11.03 13:34:12 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.11.03 12:58:02 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Benedikt\Desktop\OTL.exe [2011.11.03 12:57:56 | 000,000,120 | ---- | M] () -- C:\Users\Benedikt\Desktop\UdlzgwzW.htm.part.htm [2011.11.03 12:56:17 | 000,001,762 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk [2011.11.03 12:55:56 | 012,837,560 | ---- | M] (SUPERAntiSpyware.com) -- C:\Users\Benedikt\Desktop\SUPERAntiSpyware501134.exe [2011.11.03 07:32:47 | 000,000,868 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011.11.02 22:23:16 | 009,852,544 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Benedikt\Desktop\mbam-setup-1.51.2.1300.exe [2011.11.02 21:45:00 | 000,001,911 | ---- | M] () -- C:\Users\Public\Desktop\PC Tools Spyware Doctor.lnk [2011.11.01 09:59:25 | 000,061,952 | -H-- | M] () -- C:\Users\Benedikt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.10.30 19:59:21 | 000,000,042 | ---- | M] () -- C:\Windows\oodjobd.INI [2011.10.29 07:50:34 | 000,000,000 | ---- | M] () -- C:\Windows\System32\null [2011.10.28 11:03:18 | 000,070,536 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\pctplsg.sys [2011.10.28 11:02:54 | 000,185,560 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\PCTSD.sys [2011.10.28 11:01:36 | 000,017,848 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\pctBTFix.sys [2011.10.28 10:41:04 | 000,105,792 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\pctwfpfilter.sys [2011.10.28 10:40:58 | 000,252,840 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\pctgntdi.sys [2011.10.25 13:38:20 | 000,149,456 | ---- | M] (PC Tools) -- C:\Windows\SGDetectionTool.dll [2011.10.25 13:38:18 | 002,291,664 | ---- | M] (Threat Expert Ltd.) -- C:\Windows\PCTBDCore.dll [2011.10.25 13:38:18 | 001,681,360 | ---- | M] (Threat Expert Ltd.) -- C:\Windows\PCTBDRes.dll [2011.10.25 13:38:08 | 000,767,952 | ---- | M] () -- C:\Windows\BDTSupport.dll [2011.10.22 15:11:14 | 000,331,880 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\PCTCore.sys [2011.10.22 15:11:08 | 000,162,584 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\PCTAppEvent.sys [2011.10.07 17:52:12 | 000,660,992 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\pctEFA.sys [2011.10.07 17:52:06 | 000,341,656 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\pctDS.sys ========== Files Created - No Company Name ========== [2011.11.03 12:57:53 | 000,000,120 | ---- | C] () -- C:\Users\Benedikt\Desktop\UdlzgwzW.htm.part.htm [2011.11.03 12:56:17 | 000,001,762 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk [2011.11.03 07:32:47 | 000,000,868 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011.11.02 21:45:43 | 000,767,952 | ---- | C] () -- C:\Windows\BDTSupport.dll [2011.11.02 21:45:43 | 000,000,882 | ---- | C] () -- C:\Windows\RegSDImport.xml [2011.11.02 21:45:43 | 000,000,879 | ---- | C] () -- C:\Windows\RegISSImport.xml [2011.11.02 21:45:43 | 000,000,131 | ---- | C] () -- C:\Windows\IDB.zip [2011.11.02 21:45:42 | 000,003,488 | ---- | C] () -- C:\Windows\UDB.zip [2011.11.02 21:45:00 | 000,001,911 | ---- | C] () -- C:\Users\Public\Desktop\PC Tools Spyware Doctor.lnk [2011.10.30 19:59:21 | 000,000,042 | ---- | C] () -- C:\Windows\oodjobd.INI [2011.05.18 15:07:05 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2011.03.16 11:38:37 | 000,000,074 | ---- | C] () -- C:\Windows\FinalAlert2.ini [2011.01.02 18:37:22 | 000,000,132 | ---- | C] () -- C:\Users\Benedikt\AppData\Roaming\Adobe PNG Format CS5 Prefs [2011.01.01 16:18:49 | 000,000,132 | ---- | C] () -- C:\Users\Benedikt\AppData\Roaming\Adobe GIF Format CS5 Prefs [2010.11.26 03:15:14 | 000,023,040 | ---- | C] () -- C:\Windows\System32\atitmpxx.dll [2010.10.30 18:42:03 | 000,001,456 | -H-- | C] () -- C:\Users\Benedikt\AppData\Local\Adobe Für Web speichern 12.0 Prefs [2010.08.10 13:59:27 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe [2010.08.10 13:59:27 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2010.08.10 13:59:27 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2010.08.10 13:59:27 | 000,077,312 | ---- | C] () -- C:\Windows\MBR.exe [2010.08.10 13:59:27 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2010.08.07 21:22:11 | 000,016,968 | ---- | C] () -- C:\Windows\System32\drivers\hitmanpro35.sys [2010.07.04 11:54:11 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat [2010.05.15 16:36:51 | 000,000,122 | ---- | C] () -- C:\Windows\wa.INI [2010.05.13 19:31:28 | 000,000,113 | ---- | C] () -- C:\Windows\(null)toolkit.ini [2009.10.29 17:56:18 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2009.10.29 17:55:21 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2009.10.29 14:00:01 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2009.08.27 12:02:55 | 000,000,144 | ---- | C] () -- C:\Windows\Sierra.ini [2009.08.13 19:37:07 | 000,000,020 | ---- | C] () -- C:\Windows\mafosav.INI [2009.06.21 20:12:59 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll [2009.05.22 16:45:33 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll [2009.05.22 16:45:22 | 000,007,119 | ---- | C] () -- C:\Windows\mgxoschk.ini [2009.03.24 10:17:44 | 000,032,256 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll [2009.02.19 18:25:54 | 000,022,328 | ---- | C] () -- C:\Users\Benedikt\AppData\Roaming\PnkBstrK.sys [2009.01.18 13:00:13 | 000,149,504 | ---- | C] () -- C:\Windows\UNWISE.EXE [2008.12.10 15:04:41 | 000,225,256 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat [2008.11.24 16:51:30 | 000,000,118 | ---- | C] () -- C:\Windows\System32\MRT.INI [2008.11.21 22:44:16 | 000,012,288 | ---- | C] () -- C:\Windows\System32\DivXWMPExtType.dll [2008.10.03 15:33:59 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini [2008.09.16 01:14:24 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll [2008.09.12 10:38:02 | 000,010,752 | ---- | C] () -- C:\Windows\System32\BASSMOD.dll [2008.09.09 15:37:53 | 000,061,952 | -H-- | C] () -- C:\Users\Benedikt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008.08.31 20:27:50 | 000,001,461 | ---- | C] () -- C:\Windows\mozver.dat [2008.08.31 15:28:57 | 000,000,304 | ---- | C] () -- C:\Users\Benedikt\AppData\Roaming\wklnhst.dat [2008.08.31 15:04:57 | 000,000,018 | ---- | C] () -- C:\Windows\wininit.ini [2008.08.31 14:44:51 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2008.08.31 14:37:02 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2008.08.31 10:41:04 | 000,001,356 | -H-- | C] () -- C:\Users\Benedikt\AppData\Local\d3d9caps.dat [2008.08.22 18:32:09 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat [2008.08.22 18:32:09 | 000,168,883 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat [2008.08.22 18:32:09 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll [2008.08.22 18:32:09 | 000,090,112 | ---- | C] () -- C:\Windows\System32\atibrtmon.exe [2008.08.22 10:38:23 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2008.08.22 08:56:25 | 000,055,808 | ---- | C] () -- C:\Windows\System32\bcmwlrmt.dll [2008.08.22 08:56:25 | 000,024,064 | ---- | C] () -- C:\Windows\System32\WLTRYSVC.EXE [2008.01.21 08:15:58 | 000,670,946 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2008.01.21 08:15:58 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2008.01.21 08:15:58 | 000,144,082 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2008.01.21 08:15:58 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2007.06.06 07:32:00 | 000,002,699 | ---- | C] () -- C:\Windows\System32\d1wiaUiStr.bin [2006.11.02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006.11.02 13:47:37 | 004,173,840 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006.11.02 11:33:01 | 000,631,636 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006.11.02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006.11.02 11:33:01 | 000,118,262 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006.11.02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006.11.02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006.11.02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006.11.02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006.11.02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2000.02.09 23:00:00 | 000,047,104 | ---- | C] () -- C:\Windows\System32\wrkgadm.exe [2000.02.09 23:00:00 | 000,012,288 | ---- | C] () -- C:\Windows\System32\HLINKPRX.DLL [1996.04.03 20:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys ========== Alternate Data Streams ========== @Alternate Data Stream - 170 bytes -> C:\ProgramData\Temp:DFC5A2B2 @Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:430C6D84 < End of report > |
03.11.2011, 15:57 | #2 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt"Zitat:
__________________ |
03.11.2011, 16:04 | #3 |
| Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" SuperAntiSpyware:
__________________Code:
ATTFilter SUPERAntiSpyware Scan Log hxxp://www.superantispyware.com Generated 11/03/2011 at 01:54 PM Application Version : 5.0.1134 Core Rules Database Version : 7890 Trace Rules Database Version: 5702 Scan type : Complete Scan Total Scan Time : 00:54:59 Operating System Information Windows Vista Home Premium 32-bit, Service Pack 2 (Build 6.00.6002) UAC Off - Administrator Memory items scanned : 704 Memory threats detected : 0 Registry items scanned : 37642 Registry threats detected : 0 File items scanned : 54250 File threats detected : 955 Adware.Tracking Cookie C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@ad.yieldmanager[2].txt [ /ad.yieldmanager ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@ad1.adfarm.adtelligence[2].txt [ /ad1.adfarm.adtelligence ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@ad1.adfarm1.adition[2].txt [ /ad1.adfarm1.adition ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@ad2.adfarm1.adition[2].txt [ /ad2.adfarm1.adition ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@adfarm1.adition[2].txt [ /adfarm1.adition ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@ads.creative-serving[2].txt [ /ads.creative-serving ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@ads.pubmatic[1].txt [ /ads.pubmatic ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@adtech[1].txt [ /adtech ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@adx.chip[2].txt [ /adx.chip ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@apmebf[1].txt [ /apmebf ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@atdmt.combing[1].txt [ /atdmt.combing ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@atdmt[1].txt [ /atdmt ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@atwola[2].txt [ /atwola ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@bs.serving-sys[2].txt [ /bs.serving-sys ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@content.yieldmanager[2].txt [ /content.yieldmanager ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@content.yieldmanager[3].txt [ /content.yieldmanager ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@doubleclick[2].txt [ /doubleclick ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@eyewonder[2].txt [ /eyewonder ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@fastclick[1].txt [ /fastclick ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@imrworldwide[2].txt [ /imrworldwide ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@invitemedia[2].txt [ /invitemedia ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@mediaplex[1].txt [ /mediaplex ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@microsoftwllivemkt.112.2o7[1].txt [ /microsoftwllivemkt.112.2o7 ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@questionmarket[2].txt [ /questionmarket ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@revsci[1].txt [ /revsci ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@serving-sys[2].txt [ /serving-sys ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@sevenoneintermedia.112.2o7[1].txt [ /sevenoneintermedia.112.2o7 ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@smartadserver[1].txt [ /smartadserver ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@tracking.quisma[2].txt [ /tracking.quisma ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@tradedoubler[1].txt [ /tradedoubler ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@www.active-tracking[1].txt [ /www.active-tracking ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@xiti[1].txt [ /xiti ] C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@yadro[2].txt [ /yadro ] C:\USERS\BENEDIKT\Cookies\benedikt@content.yieldmanager[3].txt [ Cookie:benedikt@content.yieldmanager.com/ak/ ] C:\USERS\BENEDIKT\Cookies\benedikt@atdmt.combing[1].txt [ Cookie:benedikt@atdmt.combing.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@xiti[1].txt [ Cookie:benedikt@xiti.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@adtech[1].txt [ Cookie:benedikt@adtech.de/ ] C:\USERS\BENEDIKT\Cookies\benedikt@eyewonder[2].txt [ Cookie:benedikt@eyewonder.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@content.yieldmanager[2].txt [ Cookie:benedikt@content.yieldmanager.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@mediaplex[1].txt [ Cookie:benedikt@mediaplex.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@adx.chip[2].txt [ Cookie:benedikt@adx.chip.de/ ] C:\USERS\BENEDIKT\Cookies\benedikt@bs.serving-sys[2].txt [ Cookie:benedikt@bs.serving-sys.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@www.active-tracking[1].txt [ Cookie:benedikt@www.active-tracking.de/ ] C:\USERS\BENEDIKT\Cookies\benedikt@tradedoubler[1].txt [ Cookie:benedikt@tradedoubler.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@ad2.adfarm1.adition[2].txt [ Cookie:benedikt@ad2.adfarm1.adition.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@adfarm1.adition[2].txt [ Cookie:benedikt@adfarm1.adition.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@yadro[2].txt [ Cookie:benedikt@yadro.ru/ ] C:\USERS\BENEDIKT\Cookies\benedikt@microsoftwllivemkt.112.2o7[1].txt [ Cookie:benedikt@microsoftwllivemkt.112.2o7.net/ ] C:\USERS\BENEDIKT\Cookies\benedikt@serving-sys[2].txt [ Cookie:benedikt@serving-sys.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@revsci[1].txt [ Cookie:benedikt@revsci.net/ ] C:\USERS\BENEDIKT\Cookies\benedikt@doubleclick[2].txt [ Cookie:benedikt@doubleclick.net/ ] C:\USERS\BENEDIKT\Cookies\benedikt@ad.yieldmanager[2].txt [ Cookie:benedikt@ad.yieldmanager.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@smartadserver[1].txt [ Cookie:benedikt@smartadserver.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@invitemedia[2].txt [ Cookie:benedikt@invitemedia.com/ ] C:\USERS\BENEDIKT\Cookies\benedikt@apmebf[1].txt [ Cookie:benedikt@apmebf.com/ ] ia.media-imdb.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W7KWBK5V ] media.adxpansion.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W7KWBK5V ] media.rockstargames.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W7KWBK5V ] secure-uk.imrworldwide.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W7KWBK5V ] www.adservercentral.info [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W7KWBK5V ] .im.banner.t-online.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .atdmt.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .xiti.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .apmebf.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .imrworldwide.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .imrworldwide.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .traffictrack.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .traffictrack.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .traffictrack.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .traffictrack.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .112.2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .eyewonder.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .gostats.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .usenext.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .apmebf.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.cheapfinders.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .112.2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.adultshop.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .mm.chitika.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] in.getclicky.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .collective-media.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adserver.adtechus.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .traffictrack.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adviva.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] eas4.emediate.eu [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ero-advertising.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .trafficmp.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .specificclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .specificclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .specificclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .specificclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .specificclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .specificclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .specificclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .specificclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .specificclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .eyewonder.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ad.adnet.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .fastclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .indieclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .traffictrack.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .at.atwola.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adtechus.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .twittercounter.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .twittercounter.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .googleads.g.doubleclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ad.adnet.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .fastclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .112.2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .getclicky.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .static.getclicky.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .mtvn.112.2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .guj.122.2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ad.adnet.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .a.revenuemax.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .rambler.ru [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .rambler.ru [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .rambler.ru [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .overture.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] stat.onestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] stat.onestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adxpose.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .harrenmedianetwork.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .overture.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adbrite.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] track.webtrekk.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .overture.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .atdmt.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .atdmt.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] uk.sitestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] uk.sitestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .histats.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .histats.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] stat.onestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .trafficmp.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .trafficmp.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .trafficmp.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .eyewonder.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .histats.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .weborama.fr [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] track.effiliation.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.medianord.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] sso-de.bestofmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .content.yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .collective-media.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .associatedcontent.112.2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .frontlinegmbh.122.2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] clicks.pangora.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] clicks.pangora.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] s2.netxmedia.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] s2.netxmedia.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] s2.netxmedia.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.dyntracker.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .komtrack.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .traffichaus.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads2.zeusclicks.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] testfindweb.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] testfindweb.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] testfindweb.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] testfindweb.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] testfindweb.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] testfindweb.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .teenbff.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads.zeusclicks.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] pornografish.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.gwarez.cc [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.mobile.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] track.adform.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .amazon-adsystem.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .socialmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .zieltrack.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .liveperson.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .liveperson.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.star-advertising.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.star-advertising.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adultfriendfinder.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webstats4u.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .philips.112.2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .msnportal.112.2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .atdmt.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] fl01.ct2.comclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .azjmp.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .azjmp.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .trafficmp.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .trafficmp.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] fl01.ct2.comclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.gwarez.cc [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.gwarez.cc [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] wstat.wibiya.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] eas4.emediate.eu [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] imagevenue.advertserve.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] imagevenue.advertserve.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .accounts.spartzmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] gotacha.rotator.hadj7.adjuggler.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] gotacha.rotator.hadj7.adjuggler.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] optimize.indieclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] optimize.indieclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .pro-market.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .traffictrack.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .traffictrack.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .www.traffictrack.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ru4.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] f.blogads.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .deutschepostag.112.2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .yadro.ru [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] s09.flagcounter.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] d.mediadakine.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ru4.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .warezslavez.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .www.warezslavez.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] toi-rvp-ticker-01.odmedia.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.porntv.bz [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .banners.bookofsex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.sim-technik.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] adserv.legitreviews.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.cheapfinders.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] toi-rvp-ticker-01.odmedia.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] toi-rvp-ticker-01.odmedia.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.zanox-affiliate.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .unitymedia.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.dyntracker.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .myclickfind.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .myclickfind.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adnetxchange.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .sexxxdoll.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .sexxxdoll.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .pornhub.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .pornhub.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .lfstmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .lfstmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .lfstmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .lucidmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] r2.unicornmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .komtrack.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .s1.tldadserv.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .s1.tldadserv.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] media.gan-online.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] adserv.kwick.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] adserv.kwick.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adultfriendfinder.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] studivz.adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] studivz.adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] adserver.pc-cooling.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .e-2dj6ael4ukd5eho.stats.esomniture.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .weborama.fr [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .homairvacances.solution.weborama.fr [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .homairvacances.solution.weborama.fr [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .homairvacances.solution.weborama.fr [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .homairvacances.solution.weborama.fr [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] static.freewebs.getclicky.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .at.atwola.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tacoda.at.atwola.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tacoda.at.atwola.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tacoda.at.atwola.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .at.atwola.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ar.atwola.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .gametracker.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] zbox.zanox.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .247realmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .interclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .interclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .interclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] track.webtrekk.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] 4fuckr.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] sextasytube.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .toplist.eu [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .toplist.sk [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] sextasytube.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ad.adnet.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .amazon-adsystem.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .xm.xtendmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .bedavasexizle.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .bedavasexizle.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .bedavasexizle.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .freeyouporn.org [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .freeyouporn.org [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .legsex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .legsex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .porntube.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] 1xxx.cqcounter.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www4.addfreestats.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .freeporn.hu [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .freeporn.hu [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .novoporn.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .novoporn.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .collective-media.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .collective-media.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .collective-media.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .collective-media.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .collective-media.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .collective-media.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .collective-media.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .www.mediaversand.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] partners.webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.adserver01.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.adserver01.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] stats.internet-yadro.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] media-mgmt.armorgames.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .server.cpmstar.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .server.cpmstar.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .server.cpmstar.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.dyntracker.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .cdn.complexmedianetwork.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .cdn.complexmedianetwork.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .viewablemedia.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .stats.complex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .stats.complex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] adserver.adreactor.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] media.gan-online.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] s03.flagcounter.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.adition.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.adition.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .myroitracking.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .clicksor.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .clicksor.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .xxxmsncam.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .xxxmsncam.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] traffic.tcmagnet.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] traffic.tcmagnet.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .porntube.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .porntube.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .girlsteachsex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adxpansion.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .realgfporn.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .realgfporn.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.mediahitmetrics.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adultadworld.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adultadworld.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .partypoker.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .partypoker.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .de.partypoker.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] rts.pgmediaserve.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] rts.pgmediaserve.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] rts.pgmediaserve.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .partypoker.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .partypoker.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .partypoker.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .sexyandshocking.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .sexyandshocking.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .sexyclips.org [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .sexyclips.org [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] delivery.trafficbroker.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adbrite.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adbrite.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adnetxchange.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .pornoeye.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .pornoeye.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .xxxprivates.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .xxxprivates.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .toplist.cz [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.star-advertising.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .clicksor.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .clicksor.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] globalgroup.missioncontrol.global-media.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] track.effiliation.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] track.effiliation.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] track.effiliation.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] track.effiliation.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] track.effiliation.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .traffictrack.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .lfstmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .unitymedia.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .unitymedia.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.dyntracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.tldadserv.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .18clicks.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.adservercentral.info [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] fidelity.rotator.hadj7.adjuggler.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] fidelity.rotator.hadj7.adjuggler.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .track.gridlockparadise.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .track.gridlockparadise.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .homemadecelebrityporn.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .homemadecelebrityporn.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] hollywood-naked.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] hollywood-naked.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] hollywood-naked.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .warnerbros.112.2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.adultrevads.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.zanox.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] statse.webtrendslive.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] adserver.bremen.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.googleadservices.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] optimize.indieclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] optimize.indieclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .indieclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] optimize.indieclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .apmebf.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] toplisted.us [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] warez-load.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.pornbb.org [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .banners.bookofsex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .banners.bookofsex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .banners.bookofsex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .banners.bookofsex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .banners.bookofsex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] partners.webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .lfstmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] frankwalder.traffective-tracking.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] frankwalder.traffective-tracking.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] frankwalder.traffective-tracking.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] frankwalder.traffective-tracking.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] frankwalder.traffective-tracking.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .exoclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.crakmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] tracking.hostgator.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] adserver2.exgfnetwork.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.star-advertising.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.star-advertising.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.crakmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adxpansion.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .exoclick.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] track.adform.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .trinitymirror.112.2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] stats.computecmedia.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] track.adform.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adform.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad1.adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.usenext.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adbrite.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adbrite.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adbrite.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] adserv.adservercentral.info [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.adservercentral.info [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ads.crakmedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] accounts.google.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .liveperson.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adbrite.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adbrite.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .fastclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] sales.liveperson.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] stats.computecmedia.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adviva.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.mindshare.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] view.advert-layer.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] view.advert-layer.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .advert-layer.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .advert-layer.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .advert-layer.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .track.webgains.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .track.webgains.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .komtrack.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .komtrack.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] teufel-media.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] delivery.way2traffic.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ww251.smartadserver.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .zanox-affiliate.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] stats.computecmedia.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .zanox.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad1.dyntracker.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad4.adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.zanox.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] www.zanox-affiliate.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .pro-market.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .pro-market.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.pointroll.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .pointroll.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .pointroll.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.pointroll.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.pointroll.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.pointroll.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.pointroll.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.pointroll.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .ads.pointroll.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] dc.tremormedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .4fuckr.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] adserver.gunaxin.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .media6degrees.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adbrite.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .yieldmanager.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] 4fuckr.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad2.adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .4fuckr.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .4fuckr.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .4fuckr.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] delivery.way2traffic.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] delivery.way2traffic.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] delivery.way2traffic.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracker.icerocket.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .tracker.icerocket.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] ad3.adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] adx.chip.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] adx.chip.de [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] .googleads.g.doubleclick.net [ C:\USERS\BENEDIKT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9GBWPVS7.DEFAULT\COOKIES.SQLITE ] C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\BENEDIKT@MYROITRACKING[1].TXT [ /MYROITRACKING ] Code:
ATTFilter Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Datenbank Version: 8072 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 02.11.2011 22:31:31 mbam-log-2011-11-02 (22-31-31).txt Art des Suchlaufs: Flash-Scan Durchsuchte Objekte: 132049 Laufzeit: 1 Minute(n), 20 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 2 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (PUM.Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) Code:
ATTFilter Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Datenbank Version: 8074 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 03.11.2011 09:47:47 mbam-log-2011-11-03 (09-47-47).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Durchsuchte Objekte: 345961 Laufzeit: 1 Stunde(n), 54 Minute(n), 31 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 1 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: c:\Qoobox\quarantine\C\Users\Benedikt\AppData\Roaming\Ywylag\tawa.exe.vir (Trojan.FraudLoad) -> Quarantined and deleted successfully. |
03.11.2011, 16:07 | #4 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" Gibt es noch weitere Logs von Malwarebytes? Wenn ja bitte alle posten, die in Malwarebytes im Reiter Logdateien sichtbar sind.
__________________ Logfiles bitte immer in CODE-Tags posten |
03.11.2011, 16:10 | #5 |
| Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" Nein, nur die beiden. Antivir hat nichts gefunden, hab mich geirrt. Spybot Code:
ATTFilter 02.11.2011 21:56:20 - ##### check started ##### 02.11.2011 21:56:20 - ### Version: 1.6.2 02.11.2011 21:56:20 - ### Date: 02.11.2011 21:56:20 02.11.2011 21:56:24 - ##### checking bots ##### 02.11.2011 21:59:35 - found: Fraud.DefenseCenter Einstellungen --- Report generated: 2011-11-02 22:00 --- Fraud.DefenseCenter: [SBI $400D394B] Einstellungen (Registrierungsdatenbank-Änderung, nothing done) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr --- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) --- 2009-01-26 blindman.exe (1.0.0.8) 2009-01-26 SDFiles.exe (1.6.1.7) 2009-01-26 SDMain.exe (1.0.0.6) 2009-01-26 SDShred.exe (1.0.2.5) 2009-01-26 SDUpdate.exe (1.6.0.12) 2009-01-26 SDWinSec.exe (1.0.0.12) 2009-01-26 SpybotSD.exe (1.6.2.46) 2009-01-26 TeaTimer.exe (1.6.4.26) 2011-11-02 unins000.exe (51.49.0.0) 2009-01-26 Update.exe (1.6.0.7) 2009-01-26 advcheck.dll (1.6.2.15) 2007-04-02 aports.dll (2.1.0.0) 2008-06-14 DelZip179.dll (1.79.11.1) 2009-01-26 SDHelper.dll (1.6.2.14) 2008-06-19 sqlite3.dll 2009-01-26 Tools.dll (2.1.6.10) 2009-01-16 UninsSrv.dll (1.0.0.0) 2011-03-18 Includes\Adware.sbi (*) 2011-08-29 Includes\AdwareC.sbi (*) 2010-08-13 Includes\Cookies.sbi (*) 2010-12-14 Includes\Dialer.sbi (*) 2011-03-08 Includes\DialerC.sbi (*) 2011-02-24 Includes\HeavyDuty.sbi (*) 2011-03-29 Includes\Hijackers.sbi (*) 2011-10-04 Includes\HijackersC.sbi (*) 2010-09-15 Includes\iPhone.sbi (*) 2010-12-14 Includes\Keyloggers.sbi (*) 2011-09-27 Includes\KeyloggersC.sbi (*) 2004-11-29 Includes\LSP.sbi (*) 2011-10-31 Includes\Malware.sbi (*) 2011-10-31 Includes\MalwareC.sbi (*) 2011-02-24 Includes\PUPS.sbi (*) 2011-10-11 Includes\PUPSC.sbi (*) 2010-01-25 Includes\Revision.sbi (*) 2011-02-24 Includes\Security.sbi (*) 2011-05-03 Includes\SecurityC.sbi (*) 2008-06-03 Includes\Spybots.sbi (*) 2008-06-03 Includes\SpybotsC.sbi (*) 2011-10-18 Includes\Spyware.sbi (*) 2011-10-18 Includes\SpywareC.sbi (*) 2010-03-08 Includes\Tracks.uti 2011-09-28 Includes\Trojans.sbi (*) 2011-10-31 Includes\TrojansC-02.sbi (*) 2011-10-31 Includes\TrojansC-03.sbi (*) 2011-10-28 Includes\TrojansC-04.sbi (*) 2011-10-31 Includes\TrojansC-05.sbi (*) 2011-09-27 Includes\TrojansC.sbi (*) 2008-03-04 Plugins\Chai.dll 2008-03-05 Plugins\Fennel.dll 2008-02-26 Plugins\Mate.dll 2007-12-24 Plugins\TCPIPAddress.dll |
03.11.2011, 16:12 | #6 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" Führ bitte auch ESET aus, danach sehen wir weiter: ESET Online Scanner
__________________ --> Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" |
03.11.2011, 17:24 | #7 | |
| Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" Zwischenstand (er ist gerade bei 43%) Zitat:
|
03.11.2011, 18:08 | #8 |
| Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" So: Code:
ATTFilter ESETSmartInstaller@High as CAB hook log: OnlineScanner.ocx - registred OK ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6583 # api_version=3.0.2 # EOSSerial=e32b6420ee5990489406f9b8c9fbdf86 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-11-03 05:05:55 # local_time=2011-11-03 06:05:55 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=1797 16775165 100 100 66762 95230042 59999 0 # compatibility_mode=5892 16776573 100 100 10641 157866206 0 0 # compatibility_mode=8192 67108863 100 0 3814 3814 0 0 # scanned=184697 # found=1 # cleaned=0 # scan_time=6477 C:\Users\Benedikt\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\d8b9bf1-63ad81bd a variant of Java/Agent.DW trojan (unable to clean) 00000000000000000000000000000000 I |
03.11.2011, 18:29 | #9 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" CustomScan mit OTL Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
ATTFilter netsvcs msconfig safebootminimal safebootnetwork activex drivers32 %ALLUSERSPROFILE%\Application Data\*. %ALLUSERSPROFILE%\Application Data\*.exe /s %APPDATA%\*. %APPDATA%\*.exe /s %SYSTEMDRIVE%\*.exe /md5start wininit.exe userinit.exe eventlog.dll scecli.dll netlogon.dll cngaudit.dll ws2ifsl.sys sceclt.dll ntelogon.dll winlogon.exe logevent.dll user32.DLL iaStor.sys nvstor.sys atapi.sys IdeChnDr.sys viasraid.sys AGP440.sys vaxscsi.sys nvatabus.sys viamraid.sys nvata.sys nvgts.sys iastorv.sys ViPrt.sys eNetHook.dll ahcix86.sys KR10N.sys nvstor32.sys ahcix86s.sys /md5stop %systemroot%\system32\drivers\*.sys /lockedfiles %systemroot%\System32\config\*.sav %systemroot%\*. /mp /s %systemroot%\system32\*.dll /lockedfiles CREATERESTOREPOINT
__________________ Logfiles bitte immer in CODE-Tags posten |
03.11.2011, 18:44 | #10 |
| Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" Ok, werde ich machen, ich poste das Ergebnis wenn's fertig ist. Wenn Windows startet kommt jetzt: |
03.11.2011, 19:05 | #11 |
| Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" Customscan OTL Code:
ATTFilter OTL logfile created on: 03.11.2011 18:46:11 - Run 3 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Benedikt\Desktop Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 7.0.6002.18005) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 66,72% Memory free 6,19 Gb Paging File | 5,22 Gb Available in Paging File | 84,35% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 138,91 Gb Total Space | 11,02 Gb Free Space | 7,94% Space Free | Partition Type: NTFS Drive D: | 10,00 Gb Total Space | 5,62 Gb Free Space | 56,25% Space Free | Partition Type: NTFS Computer Name: HERBERT | User Name: Benedikt | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.11.03 12:58:02 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Benedikt\Desktop\OTL.exe PRC - [2011.10.25 13:38:10 | 000,542,672 | ---- | M] (Threat Expert Ltd.) -- C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe PRC - [2011.08.31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2011.08.12 00:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe PRC - [2011.07.11 20:51:21 | 000,269,480 | -H-- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2011.04.30 18:19:56 | 000,136,360 | -H-- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2010.11.05 07:58:45 | 000,281,768 | -H-- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2010.09.06 17:56:38 | 000,247,096 | ---- | M] () -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe PRC - [2010.01.14 21:10:53 | 000,076,968 | -H-- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe PRC - [2009.05.21 11:13:58 | 000,206,064 | -H-- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtcmd.exe PRC - [2009.04.10 23:28:16 | 000,117,248 | ---- | M] () -- \\?\C:\Windows\System32\wbem\WMIADAP.EXE PRC - [2009.04.10 23:27:38 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe PRC - [2008.08.14 00:04:44 | 000,201,968 | -H-- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe PRC - [2008.06.30 11:28:24 | 000,040,960 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\hidfind.exe PRC - [2008.06.30 11:28:14 | 000,196,608 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\Apoint.exe PRC - [2008.06.30 11:28:12 | 000,049,152 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApntEx.exe PRC - [2008.06.30 11:28:12 | 000,046,376 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApMsgFwd.exe PRC - [2008.06.26 12:10:06 | 000,442,467 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\sttray.exe PRC - [2008.06.26 12:10:00 | 000,221,273 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_238116a1\stacsv.exe PRC - [2008.06.26 12:09:50 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_238116a1\AEstSrv.exe PRC - [2008.04.28 15:56:28 | 000,161,048 | -H-- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe PRC - [2008.01.21 03:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe PRC - [2008.01.21 03:23:24 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\WindowsMobile\wmdSync.exe PRC - [2007.10.03 14:45:02 | 000,358,936 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe PRC - [2007.10.03 14:44:58 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe PRC - [2003.08.05 09:43:04 | 000,045,056 | R--- | M] (Prolific Technology Inc.) -- C:\Windows\System32\HotFixQ0306270.exe ========== Modules (No Company Name) ========== MOD - [2010.10.28 08:29:34 | 011,804,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\62dfd8797881fd7a0d0de3f448a18c01\System.Web.ni.dll MOD - [2010.10.28 08:29:25 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\9b8e883fd5fa51f026577156a0ee9d57\System.Runtime.Remoting.ni.dll MOD - [2010.10.28 08:23:55 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\88593f5f0fc6de5d5f4a85aa2b1466f3\System.Xml.ni.dll MOD - [2010.10.28 08:21:46 | 007,949,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ed6ae2749d12c4729ee43ff339de4bb8\System.ni.dll MOD - [2010.10.28 08:21:28 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\98bbdd8c400493ad228b8283665cc9da\mscorlib.ni.dll MOD - [2009.08.07 21:23:44 | 000,043,520 | ---- | M] () -- C:\Windows\System32\CmdLineExt03.dll MOD - [2008.08.29 09:55:00 | 000,132,608 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll MOD - [2008.05.04 09:42:20 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll MOD - [2008.05.02 05:15:37 | 000,010,240 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerCOM.dll MOD - [2008.03.12 06:37:52 | 000,055,808 | ---- | M] () -- C:\Windows\System32\bcmwlrmt.dll MOD - [2007.09.02 12:57:36 | 000,069,632 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.dll ========== Win32 Services (SafeList) ========== SRV - [2011.10.28 11:02:02 | 001,117,624 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe -- (sdCoreService) SRV - [2011.10.27 21:49:32 | 000,402,336 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe -- (sdAuxService) SRV - [2011.10.25 13:38:10 | 000,542,672 | ---- | M] (Threat Expert Ltd.) [Auto | Running] -- C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe -- (Browser Defender Update Service) SRV - [2011.08.31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011.08.12 00:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE) SRV - [2011.07.11 20:51:21 | 000,269,480 | -H-- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011.04.30 18:19:56 | 000,136,360 | -H-- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2010.09.06 17:56:38 | 000,247,096 | ---- | M] () [Auto | Running] -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service) SRV - [2009.09.28 14:48:15 | 000,316,664 | -H-- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService) SRV - [2008.08.22 09:03:20 | 000,016,680 | -H-- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe -- (GoToAssist) SRV - [2008.08.14 00:04:44 | 000,201,968 | -H-- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter) SRV - [2008.06.26 12:10:00 | 000,221,273 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_238116a1\stacsv.exe -- (STacSV) SRV - [2008.06.26 12:09:50 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_238116a1\AEstSrv.exe -- (AESTFilters) SRV - [2008.04.28 15:56:28 | 000,161,048 | -H-- | M] (Stardock Corporation) [Auto | Running] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService) SRV - [2008.01.21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2008.01.21 03:23:24 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2008.01.21 03:23:24 | 000,167,936 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) SRV - [2008.01.09 11:30:08 | 000,121,360 | -H-- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ) SRV - [2007.10.03 14:45:02 | 000,358,936 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R) ========== Driver Services (SafeList) ========== DRV - [2011.10.28 11:02:54 | 000,185,560 | ---- | M] (PC Tools) [Kernel | System | Running] -- C:\Windows\System32\drivers\PCTSD.sys -- (PCTSD) DRV - [2011.10.22 15:11:14 | 000,331,880 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\PCTCore.sys -- (PCTCore) DRV - [2011.10.07 17:52:06 | 000,341,656 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\pctDS.sys -- (pctDS) DRV - [2011.09.28 13:14:02 | 000,056,840 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PCTBD.sys -- (PCTBD) DRV - [2011.08.31 17:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector) DRV - [2011.07.22 17:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV) DRV - [2011.07.12 22:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL) DRV - [2011.07.11 20:51:22 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2011.07.11 20:51:22 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2010.09.03 20:40:46 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd) DRV - [2009.05.21 12:59:12 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi) DRV - [2009.05.11 09:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009.02.13 11:35:01 | 000,011,608 | -H-- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008.07.30 06:51:30 | 000,277,736 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\acedrv11.sys -- (acedrv11) DRV - [2008.06.30 11:28:10 | 000,170,032 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService) DRV - [2008.06.26 12:10:08 | 000,380,928 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA) DRV - [2008.05.04 09:42:18 | 003,548,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300) DRV - [2008.05.04 09:42:18 | 003,548,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2008.05.04 09:42:18 | 003,548,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag) DRV - [2008.03.14 14:04:26 | 000,054,784 | ---- | M] (ITE Tech. Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\itecir.sys -- (itecir) DRV - [2008.03.12 06:37:46 | 000,018,424 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bcm42rly.sys -- (BCM42RLY) DRV - [2008.03.11 07:42:24 | 000,203,264 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\k57nd60x.sys -- (k57nd60x) Broadcom NetLink (TM) DRV - [2008.03.11 07:24:46 | 000,038,400 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp) DRV - [2008.03.11 07:24:44 | 000,046,592 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2008.03.11 07:24:42 | 000,043,008 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk) DRV - [2008.01.21 03:23:25 | 000,251,904 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VSTBS23.SYS -- (VSTHWBS2) DRV - [2008.01.21 03:23:25 | 000,220,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel(R) DRV - [2007.11.29 01:17:56 | 000,036,368 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt) DRV - [2007.11.29 01:17:48 | 000,035,088 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt) DRV - [2007.05.11 10:59:00 | 000,017,536 | ---- | M] (Olivetti-Engineering SA) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\desrvusb.sys -- (DESVUSB) DRV - [2003.10.06 10:29:08 | 000,007,424 | R--- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\plff.sys -- (PLFF) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\..\URLSearchHook: - No CLSID value found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: - No CLSID value found IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0: C:\Program Files\Picasa2\npPicasa2.dll File not found FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: File not found FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2910: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: File not found FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Benedikt\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{cb84136f-9c44-433a-9048-c5cd9df1dc16}: C:\Program Files\PC Tools\PC Tools Security\BDT\Firefox\ [2011.11.02 21:45:43 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.10.06 16:18:25 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.03.21 10:33:49 | 000,000,000 | ---D | M] [2010.04.28 14:13:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Extensions [2010.04.28 14:13:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2009.06.26 12:12:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Extensions\uploadr@flickr.com [2011.10.24 16:37:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Firefox\Profiles\9gbwpvs7.default\extensions [2010.04.27 20:10:58 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Firefox\Profiles\9gbwpvs7.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011.02.16 19:52:59 | 000,000,000 | ---D | M] (PDF Download) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Firefox\Profiles\9gbwpvs7.default\extensions\{37E4D8EA-8BDA-4831-8EA1-89053939A250} [2009.06.02 19:04:48 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Users\Benedikt\AppData\Roaming\mozilla\Firefox\Profiles\9gbwpvs7.default\extensions\moveplayer@movenetworks.com [2011.10.26 18:43:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010.10.04 09:05:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010.10.05 19:44:58 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010.11.27 21:25:51 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011.02.20 21:36:11 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011.06.17 12:56:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2011.10.26 18:43:38 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2011.10.06 16:18:24 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011.10.03 04:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2010.12.09 11:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll [2011.10.06 16:18:21 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2011.10.06 16:18:21 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2011.10.06 16:18:21 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2011.10.06 16:18:21 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2011.10.06 16:18:21 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2011.10.06 16:18:21 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2010.09.22 17:43:12 | 000,000,057 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found. O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll (SimplyGen) O2 - BHO: (PC Tools Browser Defender BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.) O2 - BHO: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O3 - HKLM\..\Toolbar: (PC Tools Browser Defender) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) O3 - HKLM\..\Toolbar: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O3 - HKCU\..\Toolbar\WebBrowser: (PC Tools Browser Defender) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O4 - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [dellsupportcenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.) O4 - HKLM..\Run: [ECenter] C:\DELL\E-Center\EULALauncher.exe ( ) O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation) O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [PLFFAP] C:\Windows\System32\HotFixQ0306270.exe (Prolific Technology Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation) O4 - HKCU..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe () O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O9 - Extra Button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programs\PartyGaming.Net\PartyPokerNet\RunPF.exe () O9 - Extra 'Tools' menuitem : PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programs\PartyGaming.Net\PartyPokerNet\RunPF.exe () O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000037 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2D5B2A83-26CD-4993-A422-1070C2D311AA}: DhcpNameServer = 195.50.140.118 195.50.140.248 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F12C023B-96A9-4254-A2BC-45E07E338589}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com) O20 - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll) - C:\Program Files\Citrix\GoToAssist\514\g2awinlogon.dll (Citrix Online, a division of Citrix Systems, Inc.) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img29.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img29.jpg O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com) O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe - (Logitech Inc.) MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe - (Logitech, Inc.) MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Privoxy.lnk - - File not found MsConfig - StartUpFolder: C:^Users^Benedikt^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dell Dock.lnk - C:\Program Files\Dell\DellDock\DellDock.exe - (Stardock Corporation) MsConfig - StartUpFolder: C:^Users^Benedikt^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE - (Microsoft Corporation) MsConfig - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) MsConfig - StartUpReg: AdobeAAMUpdater-1.0 - hkey= - key= - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) MsConfig - StartUpReg: AdobeCS4ServiceManager - hkey= - key= - File not found MsConfig - StartUpReg: CORSAIR_PLUtil - hkey= - key= - C:\Program Files\Corsair\Corsair Flash Voyager Utility\PLBkMon.exe (Prolific Technology Inc.) MsConfig - StartUpReg: DellSupportCenter - hkey= - key= - C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.) MsConfig - StartUpReg: dscactivate - hkey= - key= - C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( ) MsConfig - StartUpReg: ehTray.exe - hkey= - key= - C:\Windows\ehome\ehtray.exe (Microsoft Corporation) MsConfig - StartUpReg: ICQ - hkey= - key= - File not found MsConfig - StartUpReg: iTunesHelper - hkey= - key= - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.) MsConfig - StartUpReg: Kernel and Hardware Abstraction Layer - hkey= - key= - C:\Windows\KHALMNPR.Exe (Logitech, Inc.) MsConfig - StartUpReg: MgKPyEORiQUvGj.exe - hkey= - key= - File not found MsConfig - StartUpReg: OODefragTray - hkey= - key= - File not found MsConfig - StartUpReg: PCMService - hkey= - key= - C:\Program Files\Dell\MediaDirect\PCMService.exe (CyberLink Corp.) MsConfig - StartUpReg: pdfFactory Dispatcher v3 - hkey= - key= - File not found MsConfig - StartUpReg: PDVD9LanguageShortcut - hkey= - key= - File not found MsConfig - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files\QuickTime\QTTask.exe (Apple Inc.) MsConfig - StartUpReg: RemoteControl9 - hkey= - key= - File not found MsConfig - StartUpReg: Skype - hkey= - key= - C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) MsConfig - State: "startup" - 2 MsConfig - State: "bootini" - 2 SafeBootMin: !SASCORE - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE (SUPERAntiSpyware.com) SafeBootMin: AppMgmt - File not found SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: sdAuxService - C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe (PC Tools) SafeBootMin: sdCoreService - C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe (PC Tools) SafeBootMin: System Bus Extender - Driver Group SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: !SASCORE - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE (SUPERAntiSpyware.com) SafeBootNet: AppMgmt - File not found SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: hitmanpro35 - Reg Error: Value error. SafeBootNet: hitmanpro35.sys - Reg Error: Value error. SafeBootNet: HitmanPro35Crusader - Reg Error: Value error. SafeBootNet: Messenger - File not found SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: sdAuxService - C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe (PC Tools) SafeBootNet: sdCoreService - C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe (PC Tools) SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0 ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 10.4 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 10.4 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {62097C1F-D4E1-9563-B095-55F70FC01E1B} - Browser Customizations ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {AB3EFB54-4244-8ABE-3888-9CC991A60ED0} - Microsoft Windows Media Player ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {EE58D085-42E4-F49F-D517-C0CF20713DD4} - Browser Customizations ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.lhacm - C:\Windows\System32\lhacm.acm (Microsoft Corporation) Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.) Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll () Drivers32: VIDC.I420 - C:\Windows\System32\i420vfw.dll (www.helixcommunity.org) Drivers32: vidc.yv12 - C:\Windows\System32\yv12vfw.dll (www.helixcommunity.org) CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2011.11.03 16:16:14 | 002,322,184 | ---- | C] (ESET) -- C:\Users\Benedikt\Desktop\esetsmartinstaller_enu.exe [2011.11.03 16:14:24 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2011.11.03 12:58:05 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Benedikt\Desktop\OTL.exe [2011.11.03 12:57:23 | 000,000,000 | ---D | C] -- C:\Users\Benedikt\AppData\Roaming\SUPERAntiSpyware.com [2011.11.03 12:56:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware [2011.11.03 12:56:12 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com [2011.11.03 12:56:12 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware [2011.11.03 12:55:33 | 012,837,560 | ---- | C] (SUPERAntiSpyware.com) -- C:\Users\Benedikt\Desktop\SUPERAntiSpyware501134.exe [2011.11.02 22:23:10 | 009,852,544 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Benedikt\Desktop\mbam-setup-1.51.2.1300.exe [2011.11.02 22:05:19 | 000,000,000 | ---D | C] -- C:\Users\Benedikt\AppData\Local\Threat Expert [2011.11.02 21:55:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy [2011.11.02 21:55:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2011.11.02 21:55:46 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy [2011.11.02 21:45:43 | 000,149,456 | ---- | C] (PC Tools) -- C:\Windows\SGDetectionTool.dll [2011.11.02 21:45:43 | 000,056,840 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTBD.sys [2011.11.02 21:45:42 | 002,291,664 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDCore.dll [2011.11.02 21:45:42 | 001,681,360 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDRes.dll [2011.11.02 21:45:04 | 000,252,840 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctgntdi.sys [2011.11.02 21:45:04 | 000,105,792 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctwfpfilter.sys [2011.11.02 21:45:00 | 000,017,848 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctBTFix.sys [2011.11.02 21:45:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Tools Security [2011.11.02 21:44:57 | 000,070,536 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctplsg.sys [2011.11.02 21:44:50 | 000,000,000 | ---D | C] -- C:\Program Files\PC Tools [2011.11.02 21:41:40 | 000,660,992 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctEFA.sys [2011.11.02 21:41:40 | 000,341,656 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctDS.sys [2011.11.02 21:41:35 | 000,331,880 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTCore.sys [2011.11.02 21:41:35 | 000,162,584 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTAppEvent.sys [2011.11.02 21:41:33 | 000,185,560 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTSD.sys [2011.11.02 21:41:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools [2011.11.02 21:41:13 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools [2011.10.31 13:00:44 | 000,000,000 | -H-D | C] -- C:\Users\Benedikt\AppData\Local\O&O [2011.10.30 12:24:58 | 000,000,000 | -H-D | C] -- C:\Users\Benedikt\AppData\Local\Downloaded Installations [2011.10.30 12:14:03 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2011.10.30 12:14:02 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner ========== Files - Modified Within 30 Days ========== [2011.11.03 18:50:05 | 000,000,424 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{50F6F6D8-62B8-44EE-8129-9F539D72EE3C}.job [2011.11.03 18:47:01 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job [2011.11.03 18:46:59 | 000,670,946 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2011.11.03 18:46:59 | 000,631,636 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011.11.03 18:46:59 | 000,144,082 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2011.11.03 18:46:59 | 000,118,262 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011.11.03 18:43:00 | 000,065,445 | ---- | M] () -- C:\Users\Benedikt\Desktop\2_160x160.jpg [2011.11.03 18:41:12 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.11.03 18:41:10 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011.11.03 18:41:10 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011.11.03 18:40:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.11.03 17:34:03 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.11.03 16:16:14 | 002,322,184 | ---- | M] (ESET) -- C:\Users\Benedikt\Desktop\esetsmartinstaller_enu.exe [2011.11.03 12:58:02 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Benedikt\Desktop\OTL.exe [2011.11.03 12:57:56 | 000,000,120 | ---- | M] () -- C:\Users\Benedikt\Desktop\UdlzgwzW.htm.part.htm [2011.11.03 12:56:17 | 000,001,762 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk [2011.11.03 12:55:56 | 012,837,560 | ---- | M] (SUPERAntiSpyware.com) -- C:\Users\Benedikt\Desktop\SUPERAntiSpyware501134.exe [2011.11.03 07:32:47 | 000,000,868 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011.11.02 22:23:16 | 009,852,544 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Benedikt\Desktop\mbam-setup-1.51.2.1300.exe [2011.11.02 21:45:00 | 000,001,911 | ---- | M] () -- C:\Users\Public\Desktop\PC Tools Spyware Doctor.lnk [2011.11.01 09:59:25 | 000,061,952 | -H-- | M] () -- C:\Users\Benedikt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.10.30 19:59:21 | 000,000,042 | ---- | M] () -- C:\Windows\oodjobd.INI [2011.10.29 07:50:34 | 000,000,000 | ---- | M] () -- C:\Windows\System32\null [2011.10.28 11:03:18 | 000,070,536 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\pctplsg.sys [2011.10.28 11:02:54 | 000,185,560 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\PCTSD.sys [2011.10.28 11:01:36 | 000,017,848 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\pctBTFix.sys [2011.10.28 10:41:04 | 000,105,792 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\pctwfpfilter.sys [2011.10.28 10:40:58 | 000,252,840 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\pctgntdi.sys [2011.10.25 13:38:20 | 000,149,456 | ---- | M] (PC Tools) -- C:\Windows\SGDetectionTool.dll [2011.10.25 13:38:18 | 002,291,664 | ---- | M] (Threat Expert Ltd.) -- C:\Windows\PCTBDCore.dll [2011.10.25 13:38:18 | 001,681,360 | ---- | M] (Threat Expert Ltd.) -- C:\Windows\PCTBDRes.dll [2011.10.25 13:38:08 | 000,767,952 | ---- | M] () -- C:\Windows\BDTSupport.dll [2011.10.22 15:11:14 | 000,331,880 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\PCTCore.sys [2011.10.22 15:11:08 | 000,162,584 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\PCTAppEvent.sys [2011.10.07 17:52:12 | 000,660,992 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\pctEFA.sys [2011.10.07 17:52:06 | 000,341,656 | ---- | M] (PC Tools) -- C:\Windows\System32\drivers\pctDS.sys ========== Files Created - No Company Name ========== [2011.11.03 18:43:00 | 000,065,445 | ---- | C] () -- C:\Users\Benedikt\Desktop\2_160x160.jpg [2011.11.03 12:57:53 | 000,000,120 | ---- | C] () -- C:\Users\Benedikt\Desktop\UdlzgwzW.htm.part.htm [2011.11.03 12:56:17 | 000,001,762 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk [2011.11.03 07:32:47 | 000,000,868 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011.11.02 21:45:43 | 000,767,952 | ---- | C] () -- C:\Windows\BDTSupport.dll [2011.11.02 21:45:43 | 000,000,882 | ---- | C] () -- C:\Windows\RegSDImport.xml [2011.11.02 21:45:43 | 000,000,879 | ---- | C] () -- C:\Windows\RegISSImport.xml [2011.11.02 21:45:43 | 000,000,131 | ---- | C] () -- C:\Windows\IDB.zip [2011.11.02 21:45:42 | 000,003,488 | ---- | C] () -- C:\Windows\UDB.zip [2011.11.02 21:45:00 | 000,001,911 | ---- | C] () -- C:\Users\Public\Desktop\PC Tools Spyware Doctor.lnk [2011.10.30 19:59:21 | 000,000,042 | ---- | C] () -- C:\Windows\oodjobd.INI [2011.05.18 15:07:05 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2011.03.16 11:38:37 | 000,000,074 | ---- | C] () -- C:\Windows\FinalAlert2.ini [2011.01.02 18:37:22 | 000,000,132 | ---- | C] () -- C:\Users\Benedikt\AppData\Roaming\Adobe PNG Format CS5 Prefs [2011.01.01 16:18:49 | 000,000,132 | ---- | C] () -- C:\Users\Benedikt\AppData\Roaming\Adobe GIF Format CS5 Prefs [2010.11.26 03:15:14 | 000,023,040 | ---- | C] () -- C:\Windows\System32\atitmpxx.dll [2010.10.30 18:42:03 | 000,001,456 | -H-- | C] () -- C:\Users\Benedikt\AppData\Local\Adobe Für Web speichern 12.0 Prefs [2010.08.10 13:59:27 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe [2010.08.10 13:59:27 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2010.08.10 13:59:27 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2010.08.10 13:59:27 | 000,077,312 | ---- | C] () -- C:\Windows\MBR.exe [2010.08.10 13:59:27 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2010.08.07 21:22:11 | 000,016,968 | ---- | C] () -- C:\Windows\System32\drivers\hitmanpro35.sys [2010.07.04 11:54:11 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat [2010.05.15 16:36:51 | 000,000,122 | ---- | C] () -- C:\Windows\wa.INI [2010.05.13 19:31:28 | 000,000,113 | ---- | C] () -- C:\Windows\(null)toolkit.ini [2009.10.29 17:56:18 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2009.10.29 17:55:21 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2009.10.29 14:00:01 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2009.08.27 12:02:55 | 000,000,144 | ---- | C] () -- C:\Windows\Sierra.ini [2009.08.13 19:37:07 | 000,000,020 | ---- | C] () -- C:\Windows\mafosav.INI [2009.06.21 20:12:59 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll [2009.05.22 16:45:33 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll [2009.05.22 16:45:22 | 000,007,119 | ---- | C] () -- C:\Windows\mgxoschk.ini [2009.03.24 10:17:44 | 000,032,256 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll [2009.02.19 18:25:54 | 000,022,328 | ---- | C] () -- C:\Users\Benedikt\AppData\Roaming\PnkBstrK.sys [2009.01.18 13:00:13 | 000,149,504 | ---- | C] () -- C:\Windows\UNWISE.EXE [2008.12.10 15:04:41 | 000,225,256 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat [2008.11.24 16:51:30 | 000,000,118 | ---- | C] () -- C:\Windows\System32\MRT.INI [2008.11.21 22:44:16 | 000,012,288 | ---- | C] () -- C:\Windows\System32\DivXWMPExtType.dll [2008.10.03 15:33:59 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini [2008.09.16 01:14:24 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll [2008.09.12 10:38:02 | 000,010,752 | ---- | C] () -- C:\Windows\System32\BASSMOD.dll [2008.09.09 15:37:53 | 000,061,952 | -H-- | C] () -- C:\Users\Benedikt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008.08.31 20:27:50 | 000,001,461 | ---- | C] () -- C:\Windows\mozver.dat [2008.08.31 15:28:57 | 000,000,304 | ---- | C] () -- C:\Users\Benedikt\AppData\Roaming\wklnhst.dat [2008.08.31 15:04:57 | 000,000,018 | ---- | C] () -- C:\Windows\wininit.ini [2008.08.31 14:44:51 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2008.08.31 14:37:02 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2008.08.31 10:41:04 | 000,001,356 | -H-- | C] () -- C:\Users\Benedikt\AppData\Local\d3d9caps.dat [2008.08.22 18:32:09 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat [2008.08.22 18:32:09 | 000,168,883 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat [2008.08.22 18:32:09 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll [2008.08.22 18:32:09 | 000,090,112 | ---- | C] () -- C:\Windows\System32\atibrtmon.exe [2008.08.22 10:38:23 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2008.08.22 08:56:25 | 000,055,808 | ---- | C] () -- C:\Windows\System32\bcmwlrmt.dll [2008.08.22 08:56:25 | 000,024,064 | ---- | C] () -- C:\Windows\System32\WLTRYSVC.EXE [2008.01.21 08:15:58 | 000,670,946 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2008.01.21 08:15:58 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2008.01.21 08:15:58 | 000,144,082 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2008.01.21 08:15:58 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2007.06.06 07:32:00 | 000,002,699 | ---- | C] () -- C:\Windows\System32\d1wiaUiStr.bin [2006.11.02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006.11.02 13:47:37 | 004,173,840 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006.11.02 11:33:01 | 000,631,636 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006.11.02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006.11.02 11:33:01 | 000,118,262 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006.11.02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006.11.02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006.11.02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006.11.02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006.11.02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2000.02.09 23:00:00 | 000,047,104 | ---- | C] () -- C:\Windows\System32\wrkgadm.exe [2000.02.09 23:00:00 | 000,012,288 | ---- | C] () -- C:\Windows\System32\HLINKPRX.DLL [1996.04.03 20:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys ========== LOP Check ========== [2011.09.20 16:18:55 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\.minecraft [2009.01.23 13:05:53 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Alien Skin [2010.08.10 13:54:09 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Arvau [2009.06.21 20:15:53 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Atari [2010.05.26 18:28:32 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Audacity [2010.03.28 17:11:46 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Canon [2011.01.02 19:25:27 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2009.12.28 21:32:34 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Command & Conquer 3 Tiberium Wars [2009.01.12 18:24:04 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Crayon Physics Deluxe [2008.09.04 13:16:55 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\DAEMON Tools [2011.10.30 12:07:53 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\DAEMON Tools Lite [2009.08.19 13:57:24 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\de.makesoft.twhirl.0EA062BC275E7ED1E6EC3762EFFD73C7158ADF33.1 [2008.12.02 18:06:06 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Exif Viewer [2008.09.20 18:00:25 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\FDRLab [2009.06.26 12:12:26 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Flickr [2011.07.10 12:24:53 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\FreeFLVConverter [2008.09.14 10:37:16 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\GHISLER [2009.09.11 13:32:36 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\gtk-2.0 [2011.09.26 20:11:23 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Hobbyist Software [2009.03.01 16:54:19 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\L4dOgerLauncher [2011.02.25 18:40:35 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\LolClient [2009.05.22 16:51:47 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\MAGIX [2010.04.18 10:50:49 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\ManyCam [2011.03.04 19:48:13 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Miranda [2011.08.18 18:54:03 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Mymaz [2008.10.22 18:50:14 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\OpenOffice.org [2009.11.23 19:04:40 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Planetside Software [2008.11.13 19:40:20 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\ProtectDisc [2008.12.10 17:44:51 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\QIP [2008.11.21 16:18:25 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Red Alert 3 [2008.09.22 13:10:12 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\ScreenSeven [2009.04.25 16:05:05 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Soldat [2010.10.31 19:02:16 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2008.09.20 09:14:29 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\T-Online [2008.11.09 11:50:26 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Teeworlds [2008.08.31 15:28:58 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Template [2009.01.22 17:18:55 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Thinstall [2010.04.28 14:13:40 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Thunderbird [2010.03.02 13:31:37 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Trillian [2011.10.30 12:07:02 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\TS3Client [2009.11.23 19:04:40 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\uk.co.planetside [2010.12.22 19:49:32 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Unity [2009.09.13 19:40:42 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\uTorrent [2009.10.03 19:05:16 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Walea GmbH [2010.05.16 09:04:28 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\xWeasel [2011.08.18 16:22:54 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Ytxyl [2010.08.10 14:12:41 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Ywylag [2011.11.03 18:21:35 | 000,032,514 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2011.11.03 18:50:05 | 000,000,424 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{50F6F6D8-62B8-44EE-8129-9F539D72EE3C}.job ========== Purity Check ========== ========== Custom Scans ========== < %ALLUSERSPROFILE%\Application Data\*. > < %ALLUSERSPROFILE%\Application Data\*.exe /s > < %APPDATA%\*. > [2011.09.20 16:18:55 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\.minecraft [2010.09.22 17:52:23 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Adobe [2010.10.31 19:02:16 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Adobe Mini Bridge CS5 [2009.01.23 13:05:53 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Alien Skin [2010.12.28 18:29:16 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Apple Computer [2010.08.10 13:54:09 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Arvau [2009.06.21 20:15:53 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Atari [2008.08.31 10:42:44 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\ATI [2010.05.26 18:28:32 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Audacity [2010.03.27 07:55:19 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Avira [2010.03.28 17:11:46 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Canon [2011.01.02 19:25:27 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2009.12.28 21:32:34 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Command & Conquer 3 Tiberium Wars [2009.01.12 18:24:04 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Crayon Physics Deluxe [2010.03.12 11:02:00 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Creative [2009.07.14 13:26:15 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\CyberLink [2008.09.04 13:16:55 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\DAEMON Tools [2011.10.30 12:07:53 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\DAEMON Tools Lite [2009.08.19 13:57:24 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\de.makesoft.twhirl.0EA062BC275E7ED1E6EC3762EFFD73C7158ADF33.1 [2008.08.31 10:41:00 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Dell [2008.10.11 18:00:45 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\DivX [2011.03.09 11:49:51 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Download Manager [2011.08.21 14:44:21 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\dvdcss [2008.12.02 18:06:06 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Exif Viewer [2008.09.20 18:00:25 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\FDRLab [2009.06.26 12:12:26 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Flickr [2011.07.10 12:24:53 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\FreeFLVConverter [2008.09.14 10:37:16 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\GHISLER [2008.09.14 19:21:16 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Google [2009.09.11 13:32:36 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\gtk-2.0 [2009.05.21 13:21:02 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Hamachi [2011.09.26 20:11:23 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Hobbyist Software [2008.08.31 10:41:46 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Identities [2008.09.02 09:34:37 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\InstallShield [2009.03.01 16:54:19 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\L4dOgerLauncher [2008.09.02 09:38:32 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Logitech [2011.02.25 18:40:35 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\LolClient [2008.08.31 14:35:02 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Macromedia [2009.05.22 16:51:47 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\MAGIX [2010.08.10 11:55:45 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Malwarebytes [2010.04.18 10:50:49 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\ManyCam [2006.11.02 13:37:34 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Media Center Programs [2010.09.23 17:33:51 | 000,000,000 | --SD | M] -- C:\Users\Benedikt\AppData\Roaming\Microsoft [2011.03.04 19:48:13 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Miranda [2011.02.28 14:02:19 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\mIRC [2009.06.26 12:12:27 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Mozilla [2009.09.20 17:36:57 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Mozilla-Cache [2011.08.18 18:54:03 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Mymaz [2011.01.01 19:02:39 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Nero [2008.10.22 18:50:14 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\OpenOffice.org [2009.11.23 19:04:40 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Planetside Software [2008.11.13 19:40:20 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\ProtectDisc [2008.12.10 17:44:51 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\QIP [2008.11.04 12:44:06 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Real [2008.11.21 16:18:25 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Red Alert 3 [2008.09.22 13:10:12 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\ScreenSeven [2010.07.09 06:54:41 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Skype [2010.07.04 11:54:08 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\skypePM [2009.04.25 16:05:05 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Soldat [2010.10.31 19:02:16 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2011.11.03 12:57:23 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\SUPERAntiSpyware.com [2008.09.20 09:14:29 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\T-Online [2010.02.03 19:59:24 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\teamspeak2 [2008.11.09 11:50:26 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Teeworlds [2008.08.31 15:28:58 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Template [2009.01.22 17:18:55 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Thinstall [2010.04.28 14:13:40 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Thunderbird [2010.03.02 13:31:37 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Trillian [2011.10.30 12:07:02 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\TS3Client [2010.01.28 13:34:02 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\U3 [2009.11.23 19:04:40 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\uk.co.planetside [2010.12.22 19:49:32 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Unity [2009.09.13 19:40:42 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\uTorrent [2011.10.15 14:40:12 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\vlc [2009.10.03 19:05:16 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Walea GmbH [2011.10.31 12:28:32 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Winamp [2008.09.01 07:49:17 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\WinRAR [2010.05.16 09:04:28 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\xWeasel [2008.09.02 11:00:53 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Yahoo! [2011.08.18 16:22:54 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Ytxyl [2010.08.10 14:12:41 | 000,000,000 | ---D | M] -- C:\Users\Benedikt\AppData\Roaming\Ywylag < %APPDATA%\*.exe /s > [2011.02.25 20:25:53 | 000,053,632 | -H-- | M] (Adobe Systems Inc.) -- C:\Users\Benedikt\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe [2009.06.17 17:27:31 | 001,878,984 | -H-- | M] (Adobe Systems Incorporated) -- C:\Users\Benedikt\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\fpupdatepl.exe [2008.09.02 09:38:25 | 000,010,134 | RH-- | M] () -- C:\Users\Benedikt\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe [2010.05.06 18:23:52 | 000,026,582 | RH-- | M] () -- C:\Users\Benedikt\AppData\Roaming\Microsoft\Installer\{6583D00E-0924-4950-8BE9-5D09FE70B333}\_43651A41F8B233F970CAD4.exe [2010.05.06 18:23:52 | 000,026,582 | RH-- | M] () -- C:\Users\Benedikt\AppData\Roaming\Microsoft\Installer\{6583D00E-0924-4950-8BE9-5D09FE70B333}\_AAFEC972C6A808875A25F1.exe [2009.04.07 17:43:18 | 000,040,960 | RH-- | M] (InstallShield Software Corp.) -- C:\Users\Benedikt\AppData\Roaming\Microsoft\Installer\{9559F7CA-5E34-4237-A2D9-D856464AD727}\ARPPRODUCTICON.exe [2009.04.07 17:43:19 | 000,040,960 | RH-- | M] (InstallShield Software Corp.) -- C:\Users\Benedikt\AppData\Roaming\Microsoft\Installer\{9559F7CA-5E34-4237-A2D9-D856464AD727}\NewShortcut1_9559F7CA5E344237A2D9D856464AD727.exe [2009.04.07 17:43:19 | 000,008,854 | RH-- | M] () -- C:\Users\Benedikt\AppData\Roaming\Microsoft\Installer\{9559F7CA-5E34-4237-A2D9-D856464AD727}\Uninstall_Project64__9559F7CA5E344237A2D9D856464AD727.exe [2009.01.22 17:19:06 | 000,007,680 | ---- | M] () -- C:\Users\Benedikt\AppData\Roaming\Thinstall\Diablo II\4000001100002i\Game.exe [2007.10.23 09:27:20 | 000,110,592 | ---- | M] () -- C:\Users\Benedikt\AppData\Roaming\U3\temp\cleanup.exe [2008.05.02 10:41:48 | 003,493,888 | -H-- | M] (SanDisk Corporation) -- C:\Users\Benedikt\AppData\Roaming\U3\temp\Launchpad Removal.exe < %SYSTEMDRIVE%\*.exe > [2007.05.03 16:32:29 | 000,000,385 | ---- | M] () -- C:\hsyte12.exe < MD5 for: AGP440.SYS > [2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\ERDNT\cache\AGP440.sys [2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\drivers\AGP440.sys [2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys [2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys [2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys [2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys [2006.11.02 10:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys < MD5 for: ATAPI.SYS > [2008.08.22 18:27:10 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\Windows\ERDNT\cache\atapi.sys [2008.08.22 18:27:10 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\Windows\System32\drivers\atapi.sys [2008.08.22 18:27:10 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_4c9c5a00\atapi.sys [2008.08.22 18:27:10 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18034_none_dd1bb97e219e87cb\atapi.sys [2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys [2009.04.10 23:32:28 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys [2009.04.10 23:32:28 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys [2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys [2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys [2006.11.02 10:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys [2008.08.22 18:27:10 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=96DC4E1A9F90CCD489950A8935425C59 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.22134_none_dda556493abc2795\atapi.sys < MD5 for: CNGAUDIT.DLL > [2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\ERDNT\cache\cngaudit.dll [2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll [2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll < MD5 for: IASTOR.SYS > [2007.09.29 22:03:32 | 000,384,024 | ---- | M] (Intel Corporation) MD5=16A4671255CFB842225F0FDB6DBDB414 -- C:\Program Files\Intel\Intel Matrix Storage Manager\Driver64\IaStor.sys [2008.03.11 07:44:12 | 000,305,176 | -H-- | M] (Intel Corporation) MD5=2358C53F30CB9DCD1D3843C4E2F299B2 -- C:\Drivers\storage\R180982\iastor.sys [2008.03.11 07:44:12 | 000,305,176 | ---- | M] (Intel Corporation) MD5=2358C53F30CB9DCD1D3843C4E2F299B2 -- C:\Windows\System32\drivers\iaStor.sys [2008.03.11 07:44:12 | 000,305,176 | ---- | M] (Intel Corporation) MD5=2358C53F30CB9DCD1D3843C4E2F299B2 -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_cfa1dde4\iaStor.sys [2008.03.11 07:44:12 | 000,305,176 | ---- | M] (Intel Corporation) MD5=2358C53F30CB9DCD1D3843C4E2F299B2 -- C:\Windows\System32\DriverStore\FileRepository\iastor.inf_ec8a8d1b\iaStor.sys [2007.09.29 22:03:12 | 000,308,248 | ---- | M] (Intel Corporation) MD5=E5A0034847537EAEE3C00349D5C34C5F -- C:\Program Files\Intel\Intel Matrix Storage Manager\Driver\IaStor.sys < MD5 for: IASTORV.SYS > [2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\drivers\iaStorV.sys [2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys [2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys [2006.11.02 10:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys < MD5 for: NETLOGON.DLL > [2009.04.10 23:28:24 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\ERDNT\cache\netlogon.dll [2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll [2009.04.10 23:28:24 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll [2009.04.10 23:28:24 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll [2008.01.21 03:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll < MD5 for: NVSTOR.SYS > [2006.11.02 10:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys [2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\drivers\nvstor.sys [2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys [2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys < MD5 for: SCECLI.DLL > [2008.01.21 03:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll [2009.04.10 23:28:26 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\ERDNT\cache\scecli.dll [2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll [2009.04.10 23:28:26 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll [2009.04.10 23:28:26 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll < MD5 for: USER32.DLL > [2009.04.10 23:28:26 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\ERDNT\cache\user32.dll [2009.04.11 07:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll [2008.01.21 03:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll [2009.04.10 23:28:26 | 000,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\user32.dll [2009.04.10 23:28:26 | 000,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll < MD5 for: USERINIT.EXE > [2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\ERDNT\cache\userinit.exe [2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe [2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe < MD5 for: WININIT.EXE > [2008.01.21 03:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\System32\wininit.exe [2008.01.21 03:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe < MD5 for: WINLOGON.EXE > [2009.04.10 23:28:14 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\ERDNT\cache\winlogon.exe [2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe [2009.04.10 23:28:14 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe [2009.04.10 23:28:14 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe [2008.01.21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe < MD5 for: WS2IFSL.SYS > [2008.01.21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\System32\drivers\ws2ifsl.sys [2008.01.21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > [2010.09.03 20:40:46 | 000,691,696 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sptd.sys < %systemroot%\System32\config\*.sav > [2008.01.21 04:14:18 | 016,846,848 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV [2008.01.21 04:14:08 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV [2008.01.21 04:14:18 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV [2006.11.02 11:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV [2006.11.02 11:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > [2008.03.12 06:37:52 | 000,055,808 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\bcmwlrmt.dll ========== Alternate Data Streams ========== @Alternate Data Stream - 170 bytes -> C:\ProgramData\Temp:DFC5A2B2 @Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:430C6D84 < End of report > Edit: Der Internetexplorer ist übrigens permanent im Hintergrund an. Wenn ich den Prozess beende, startet er sich wieder automatisch. Geändert von Atomfrosch (03.11.2011 um 19:19 Uhr) |
03.11.2011, 19:55 | #12 | ||
/// Winkelfunktion /// TB-Süch-Tiger™ | Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt"Zitat:
Zitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
03.11.2011, 20:03 | #13 |
| Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" Keine Ahnung, ich hatte Combofix bisher noch nie drauf, weiss nicht wo das herkommt. CS5 war die Trial direkt von Adobe. |
03.11.2011, 20:10 | #14 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" Ich brauch den Quarantäneordner von Combofix. Bitte folgendes machen: 1.) GANZ WICHTIG!! Virenscanner deaktivieren, der darf das Packen nicht beeinflussen! 2.) Ordner Quarantine in C:\Qoobox in eine Datei zippen 3.) die erstellte ZIP-Datei hier hochladen => http://www.trojaner-board.de/54791-a...ner-board.html Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang in den Thread posten! 4.) Wenns erfolgreich war Bescheid sagen 5.) Erst dann wieder den Virenscanner einschalten
__________________ Logfiles bitte immer in CODE-Tags posten |
03.11.2011, 20:15 | #15 | |
| Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" Hab ich gerade gemacht. Zitat:
|
Themen zu Schwarzer Desktop, Startmenü verschwunden, Meldung "Festplatte Defekt" |
alternate, avira, bho, bonjour, booten, browser, defender, desktop, download, explorer, festplatte, firefox, format, google earth, home, icq, kaputt, logfile, microsoft, nodrives, pdf, plug-in, registry, safer networking, schwarzer desktop, security, software, tan, taskmanager, temp, version=1.0, vista |