Nach Trojaner Probleme mit Internet Videos

cosinus · 06.03.2012, 15:38

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

Lade dir ComboFix hier herunter auf deinen Desktop.

Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

Esel03 · 06.03.2012, 17:34

Nach Pc Neustart gings dann.

Hier der Log

Combofix Logfile:

Code:

ATTFilter

ComboFix 12-03-04.02 - Falk 06.03.2012  18:01:48.1.4 - x86
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.3071.1941 [GMT 1:00]
ausgeführt von:: c:\users\Falk\Desktop\ComboFix.exe
AV: Unitymedia Sicherheitspaket 9.01 *Disabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17}
FW: Unitymedia Sicherheitspaket 9.01 *Disabled* {2D7AC0A6-6241-D774-E168-461178D9686C}
SP: Unitymedia Sicherheitspaket 9.01 *Disabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\ipconfig.txt
c:\users\Falk\AppData\Local\._Revolution_
c:\windows\bwUnin-8.1.1.50-8876480SL.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-02-06 bis 2012-03-06  ))))))))))))))))))))))))))))))
.
.
2012-03-06 17:11 . 2012-03-06 17:11	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2012-03-06 17:11 . 2012-03-06 17:11	--------	d-----w-	c:\users\Default\AppData\Local\temp
2012-03-06 12:42 . 2012-02-08 06:03	6552120	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{1A2E991E-D16B-45BF-A160-76CB81ADF7EE}\mpengine.dll
2012-03-05 20:22 . 2012-03-05 20:22	--------	d-----w-	C:\_OTL
2012-02-27 15:42 . 2012-02-27 15:42	--------	d-----w-	c:\program files\7-Zip
2012-02-27 14:16 . 2012-02-27 14:16	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2012-02-27 14:16 . 2011-12-10 14:24	20464	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-02-26 17:20 . 2012-03-01 12:41	414368	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-02-25 01:39 . 2012-02-25 01:39	--------	d-----w-	c:\users\Falk\AppData\Roaming\F-Secure
2012-02-25 01:31 . 2012-02-27 18:41	--------	d-----w-	c:\program files\Vlcclassic
2012-02-25 01:31 . 2012-02-25 01:31	237	----a-w-	C:\user.js
2012-02-24 21:15 . 2012-03-02 14:07	--------	d-----w-	c:\program files\ESET
2012-02-19 20:39 . 2012-02-19 20:39	--------	d-----w-	c:\program files\Common Files\Java
2012-02-15 12:03 . 2011-12-14 16:17	680448	----a-w-	c:\windows\system32\msvcrt.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-23 08:18 . 2009-12-26 13:03	237072	------w-	c:\windows\system32\MpSigStub.exe
2012-02-19 20:37 . 2010-04-19 13:27	472808	----a-w-	c:\windows\system32\deployJava1.dll
2012-02-17 22:27 . 2011-12-01 23:52	134104	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9E571C81-21E7-496B-9E6B-127E60263022}]
2012-01-12 10:23	269312	----a-w-	c:\users\Falk\AppData\LocalLow\WOT\IE\WOT.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-03-04 22:38	121392	----a-w-	c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ICQ"="c:\program files\ICQ7.6\ICQ.exe" [2011-10-10 127040]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acer Empowering Technology Monitor"="c:\acer\Empowering Technology\SysMonitor.exe" [2008-01-09 326176]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-03-04 526896]
"PCMMediaSharing"="c:\program files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-01-25 204908]
"WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344]
"NVRaidService"="c:\windows\system32\nvraidservice.exe" [2008-06-06 203296]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-12-22 24064]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-01-12 37888]
"F-Secure Manager"="c:\program files\Unitymedia\Sicherheitspaket\Common\FSM32.EXE" [2009-08-05 199264]
"F-Secure TNB"="c:\program files\Unitymedia\Sicherheitspaket\FSGUI\TNBUtil.exe" [2009-08-05 2349664]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2010-07-21 1778064]
"RtHDVCpl"="RtHDVCpl.exe" [2007-10-11 4702208]
"Skytel"="Skytel.exe" [2007-10-11 1826816]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-14 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2007-08-22 80896]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736]
"vspdfprsrv.exe"="c:\program files\Visagesoft\eXPert PDF\vspdfprsrv.exe" [2006-05-04 998912]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"="start hxxp://www.avg.com/ww.special-uninstallation-feedback-app?lic=OQBBAFYARgBSAEUARQAtAFYAMgBHADMASwAtADgANwBXAFUAVQAtADIAVABWAEgAQQAtAFgANgBEAEYAOAAtAEwANgBQAEEATgA&inst=NwA3AC0ANAA0ADEAMAA2ADcAMQA3ADYALQBGAEwAKwA5AC0ARgA5AE0AKwAxAC0ARgA5AE0ANgArADEA&prod=90&ver=9.0.872" [?]
.
c:\users\Falk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CurseClientStartup.ccip [2010-10-26 0]
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
OpenOffice.org 3.3.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
ASETRES.EXE [2008-4-14 20480]
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2008-3-21 535336]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2010-1-23 67128]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
NETGEAR WG111v3 Smart Wizard.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2006-5-29 1708032]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
.
S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-01-25 269448]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	FontCache
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
HPService	REG_MULTI_SZ   	HPSLPSVC
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://search.babylon.com/?AF=109867&babsrc=HP_ss&mntrId=2cec11f3000000000000001b2fcde29b
IE: Free YouTube to MP3 Converter - c:\users\Falk\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7644E42D-B096-457F-8B5B-901238FC81AE} - c:\program files\ICQ7.6\ICQ.exe
LSP: c:\program files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL
TCP: DhcpNameServer = 192.168.2.1
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
FF - ProfilePath - c:\users\Falk\AppData\Roaming\Mozilla\Firefox\Profiles\o93ropm4.default\
FF - prefs.js: browser.search.defaulturl - 
FF - prefs.js: browser.search.selectedEngine - 
FF - user.js: yahoo.homepage.dontask - true
FF - user.js: browser.sessionstore.resume_from_crash - false
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=109867
FF - user.js: extensions.BabylonToolbar_i.babExt - 
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - 2cec11f3000000000000001b2fcde29b
FF - user.js: extensions.BabylonToolbar_i.hardId - 2cec11f3000000000000001b2fcde29b
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15395
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.172:31
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - base
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{c9508125-4747-4733-b048-e4b82dc9716d} - (no file)
URLSearchHooks-{88c7f2aa-f93f-432c-8f0e-b7d85967a527} - (no file)
URLSearchHooks-{a51a36e6-31e7-4838-9ff7-76298b527ec0} - (no file)
URLSearchHooks-{ff88a983-649d-4207-9336-9b999280b436} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{88C7F2AA-F93F-432C-8F0E-B7D85967A527} - (no file)
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
WebBrowser-{FF88A983-649D-4207-9336-9B999280B436} - (no file)
HKLM-Run-Acer Tour Reminder - c:\acer\AcerTour\Reminder.exe
HKLM-Run-Apanel - c:\acersw\config\NewSetApanel.cmd
AddRemove-Mijagi-MT2 - d:\metin 2\Uninstal.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2012-03-06 18:12
Windows 6.0.6002 Service Pack 2 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\SecuROM\License information*]
"datasecu"=hex:69,dc,1f,95,ad,d1,5e,19,23,3a,f8,7a,15,a2,8d,a4,79,ff,98,26,5d,
   eb,79,2c,8f,18,c8,5a,01,e4,18,6c,a5,10,9a,8c,52,fc,04,77,d9,1d,5d,53,43,df,\
"rkeysecu"=hex:64,ff,78,9c,32,5c,4f,97,0c,b7,c5,da,8f,86,8c,23
.
Zeit der Fertigstellung: 2012-03-06  18:21:33
ComboFix-quarantined-files.txt  2012-03-06 17:21
.
Vor Suchlauf: 17 Verzeichnis(se), 74.857.254.912 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 74.798.043.136 Bytes frei
.
- - End Of File - - 3885ACFF8167EDB070070F088E102441

--- --- ---

cosinus · 06.03.2012, 20:18

Mach bitte ein neues OTL-Log. Ich seh da nämlich noch Reste von irgendwelchen mülligen Toolbars, das möchte ich lieber mit OTL nachprüfen.

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

Starte bitte die OTL.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Setze oben mittig den Haken bei Scanne alle Benutzer
Kopiere nun den kompletten Inhalt aus der untenstehenden Codebox in die Textbox von OTL - wenn OTL auf deutsch ist wird sie mit beschriftet

Code:

ATTFilter

netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
wininit.exe
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Klick auf .
Kopiere nun den Inhalt aus OTL.txt hier in Deinen Thread

Esel03 · 06.03.2012, 21:01

So hier der Log.

OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 06.03.2012 20:36:40 - Run 2
OTL by OldTimer - Version 3.2.35.1     Folder = C:\Users\Falk\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19190)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 1,46 Gb Available Physical Memory | 48,76% Memory free
6,22 Gb Paging File | 4,53 Gb Available in Paging File | 72,80% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 141,79 Gb Total Space | 69,34 Gb Free Space | 48,90% Space Free | Partition Type: NTFS
Drive D: | 141,65 Gb Total Space | 81,00 Gb Free Space | 57,19% Space Free | Partition Type: NTFS
Drive E: | 123,71 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: FALK-PC | User Name: Falk | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.03.05 23:38:10 | 000,584,704 | ---- | M] (OldTimer Tools) -- C:\Users\Falk\Desktop\OTL.exe
PRC - [2012.02.17 23:27:49 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012.01.13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012.01.12 11:23:20 | 000,018,432 | ---- | M] () -- C:\Users\Falk\AppData\LocalLow\WOT\IE\WOTUpdater.exe
PRC - [2012.01.03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.11.17 15:30:18 | 000,488,104 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Unitymedia\Sicherheitspaket\Anti-Virus\fsav32.exe
PRC - [2011.10.15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011.10.15 09:53:00 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2011.10.15 09:53:00 | 001,328,960 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2011.10.15 00:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011.10.10 18:00:51 | 000,127,040 | ---- | M] (ICQ, LLC.) -- C:\Program Files\ICQ7.6\ICQ.exe
PRC - [2011.10.01 08:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011.10.01 08:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011.09.08 13:07:28 | 001,008,296 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Unitymedia\Sicherheitspaket\Anti-Virus\fssm32.exe
PRC - [2011.09.08 13:07:27 | 000,512,680 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Unitymedia\Sicherheitspaket\Anti-Virus\fsgk32.exe
PRC - [2011.05.23 16:25:06 | 000,061,088 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Unitymedia\Sicherheitspaket\ORSP Client\fsorsp.exe
PRC - [2011.01.17 17:50:34 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2011.01.17 17:50:34 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2010.12.01 13:27:05 | 000,522,848 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Unitymedia\Sicherheitspaket\FWES\program\fsdfwd.exe
PRC - [2010.01.23 23:08:03 | 000,067,128 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
PRC - [2010.01.15 13:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2010.01.12 21:02:46 | 000,037,888 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Winamp\winampa.exe
PRC - [2009.10.14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
PRC - [2009.10.14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files\Common Files\logishrd\LQCVFX\COCIManager.exe
PRC - [2009.10.07 01:47:34 | 000,154,136 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
PRC - [2009.08.05 16:58:52 | 000,186,976 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Unitymedia\Sicherheitspaket\Common\FSMA32.EXE
PRC - [2009.08.05 16:58:50 | 000,199,264 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Unitymedia\Sicherheitspaket\Common\FSM32.EXE
PRC - [2009.08.05 16:58:50 | 000,088,672 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Unitymedia\Sicherheitspaket\Common\FSHDLL32.EXE
PRC - [2009.08.05 16:56:10 | 000,215,648 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Unitymedia\Sicherheitspaket\Anti-Virus\fsgk32st.exe
PRC - [2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008.06.06 18:17:16 | 000,203,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvraidservice.exe
PRC - [2008.03.04 23:38:34 | 000,500,784 | ---- | M] (Egis Incorporated) -- C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
PRC - [2008.03.04 23:38:28 | 000,526,896 | ---- | M] (Egis Incorporated) -- C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
PRC - [2008.01.25 18:49:04 | 000,269,448 | ---- | M] (CyberLink) -- C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
PRC - [2008.01.09 18:43:26 | 000,326,176 | ---- | M] () -- C:\Acer\Empowering Technology\SysMonitor.exe
PRC - [2007.12.19 18:09:22 | 000,024,576 | ---- | M] () -- C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
PRC - [2007.10.17 10:38:20 | 000,028,672 | ---- | M] () -- C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
PRC - [2007.10.11 19:53:22 | 004,702,208 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2007.09.10 14:28:18 | 000,057,344 | ---- | M] (Acer Inc.) -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
PRC - [2007.09.06 11:02:04 | 000,393,216 | ---- | M] (Acer Inc.) -- C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
PRC - [2006.05.29 19:29:46 | 001,708,032 | ---- | M] () -- C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
PRC - [2006.05.04 06:58:56 | 000,998,912 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.02.17 23:27:48 | 001,911,768 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012.02.16 14:04:23 | 012,430,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\65450889f3742aada2a6c0cf8e6173e3\System.Windows.Forms.ni.dll
MOD - [2012.02.16 14:04:12 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\137696d0416b65dbc1561152971488b4\System.Drawing.ni.dll
MOD - [2012.02.16 14:02:17 | 007,953,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\c50133cb67d7c013fa31e1ffb942060b\System.ni.dll
MOD - [2011.10.17 12:16:04 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll
MOD - [2011.10.15 00:54:26 | 000,265,536 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
MOD - [2011.06.21 16:49:03 | 000,985,088 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2010.03.15 10:28:22 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2010.01.23 23:08:00 | 000,061,496 | ---- | M] () -- C:\Program Files\Logitech\Desktop Messenger\8876480\8.1.1.50-8876480SL\Program\clntutil.dll
MOD - [2009.10.14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
MOD - [2009.10.14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files\Common Files\logishrd\LQCVFX\COCIManager.exe
MOD - [2009.08.05 16:59:02 | 000,001,536 | ---- | M] () -- C:\Program Files\Unitymedia\Sicherheitspaket\FSPC\fspcfsm.eng
MOD - [2009.08.05 16:58:30 | 000,330,336 | ---- | M] () -- \\?\c:\program files\unitymedia\sicherheitspaket\hips\fshook32.dll
MOD - [2009.08.05 16:57:04 | 000,081,920 | ---- | M] () -- C:\Program Files\Unitymedia\Sicherheitspaket\FSGUI\strres.eng
MOD - [2009.08.05 16:56:56 | 000,920,160 | ---- | M] () -- C:\Program Files\Unitymedia\Sicherheitspaket\FSGUI\gres.dll
MOD - [2009.08.05 16:56:50 | 000,143,360 | ---- | M] () -- C:\Program Files\Unitymedia\Sicherheitspaket\FSGUI\flyerres.eng
MOD - [2009.08.05 16:56:50 | 000,045,056 | ---- | M] () -- C:\Program Files\Unitymedia\Sicherheitspaket\FSGUI\fsavures.eng
MOD - [2009.08.05 16:56:32 | 000,838,240 | ---- | M] () -- C:\Program Files\Unitymedia\Sicherheitspaket\FSGUI\about.dll
MOD - [2009.08.05 16:56:32 | 000,088,672 | ---- | M] () -- C:\Program Files\Unitymedia\Sicherheitspaket\FSGUI\aboutres.dll
MOD - [2008.03.04 23:38:16 | 000,227,888 | ---- | M] () -- C:\Acer\Empowering Technology\eDataSecurity\x86\ShowErrMsg.dll
MOD - [2008.01.09 18:43:26 | 000,326,176 | ---- | M] () -- C:\Acer\Empowering Technology\SysMonitor.exe
MOD - [2006.05.29 19:29:46 | 001,708,032 | ---- | M] () -- C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
MOD - [2006.05.04 06:58:56 | 000,998,912 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe
MOD - [2006.05.04 06:58:38 | 001,239,040 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\vspdfdialogs100.bpl
MOD - [2006.05.04 06:58:38 | 000,237,056 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\expertpdf4core.bpl
MOD - [2006.05.04 06:58:36 | 003,014,656 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\vspdfcore100.bpl
MOD - [2006.05.04 06:58:36 | 001,026,048 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\vsvector100.bpl
MOD - [2006.05.04 06:58:36 | 000,230,912 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\vspdfeditor100.bpl
MOD - [2006.04.15 06:34:26 | 000,568,320 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\TMSlite100.bpl
MOD - [2006.03.02 20:39:28 | 001,844,224 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\te100.bpl
MOD - [2006.03.02 20:33:18 | 000,444,928 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\VirtualTree100.bpl
MOD - [2006.03.02 20:28:36 | 000,139,776 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\uoolep100.bpl
MOD - [2006.03.02 20:01:50 | 000,071,168 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\VSDesktop100.bpl
MOD - [2006.03.02 19:57:48 | 000,383,488 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\visage100.bpl
MOD - [2006.03.02 19:55:22 | 000,089,088 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\vsmisc100.bpl
MOD - [2005.12.26 13:20:52 | 002,098,176 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\PKIECtrl100.bpl
MOD - [2003.08.22 07:23:16 | 000,225,792 | ---- | M] () -- C:\Program Files\Visagesoft\eXPert PDF\sqlite.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - [2012.01.13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.01.12 11:23:20 | 000,018,432 | ---- | M] () [Auto | Running] -- C:\Users\Falk\AppData\LocalLow\WOT\IE\WOTUpdater.exe -- (WOTUpdater)
SRV - [2012.01.03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.10.15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011.10.15 00:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011.10.01 08:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011.10.01 08:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011.05.23 16:25:06 | 000,061,088 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\Unitymedia\Sicherheitspaket\ORSP Client\fsorsp.exe -- (FSORSPClient)
SRV - [2010.12.01 13:27:05 | 000,522,848 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\Unitymedia\Sicherheitspaket\FWES\Program\fsdfwd.exe -- (FSDFWD)
SRV - [2009.10.07 01:47:34 | 000,154,136 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
SRV - [2009.08.05 16:58:52 | 000,186,976 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files\Unitymedia\Sicherheitspaket\Common\FSMA32.EXE -- (FSMA)
SRV - [2009.08.05 16:56:10 | 000,215,648 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files\Unitymedia\Sicherheitspaket\Anti-Virus\fsgk32st.exe -- (F-Secure Gatekeeper Handler Starter)
SRV - [2008.03.04 23:38:34 | 000,500,784 | ---- | M] (Egis Incorporated) [Auto | Running] -- C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe -- (eDataSecurity Service)
SRV - [2008.01.25 18:49:04 | 000,269,448 | ---- | M] (CyberLink) [Auto | Running] -- C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe -- (Acer HomeMedia Connect Service)
SRV - [2008.01.21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.12.19 18:09:22 | 000,024,576 | ---- | M] () [Auto | Running] -- C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe -- (eSettingsService)
SRV - [2007.10.17 10:38:20 | 000,028,672 | ---- | M] () [Auto | Running] -- C:\Acer\Empowering Technology\ePerformance\MemCheck.exe -- (AcerMemUsageCheckService)
SRV - [2007.09.10 14:28:18 | 000,057,344 | ---- | M] (Acer Inc.) [Auto | Running] -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe -- (eRecoveryService)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (RTL8192su)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (catchme)
DRV - [2011.12.10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011.10.15 09:53:00 | 010,327,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011.10.01 08:30:42 | 000,019,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
DRV - [2011.10.01 08:30:40 | 000,021,864 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
DRV - [2011.10.01 08:30:38 | 000,194,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
DRV - [2011.10.01 08:30:36 | 000,579,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
DRV - [2011.09.08 13:08:12 | 000,148,632 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\Unitymedia\Sicherheitspaket\Anti-Virus\minifilter\fsgk.sys -- (F-Secure Gatekeeper)
DRV - [2011.08.17 19:00:01 | 000,042,672 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\system32\Drivers\fsbts.sys -- (fsbts)
DRV - [2011.07.08 00:21:28 | 000,139,880 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2010.12.16 14:25:17 | 000,073,160 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\fsdfw.sys -- (FSFW)
DRV - [2010.12.16 14:24:36 | 000,036,792 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\fses.sys -- (FSES)
DRV - [2010.02.03 14:56:56 | 000,026,176 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2009.10.14 07:07:40 | 000,348,160 | ---- | M] (NETGEAR Inc.                           ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wg111v3.sys -- (RTL8187B)
DRV - [2009.10.07 01:46:36 | 000,025,752 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
DRV - [2009.08.05 16:58:30 | 000,068,064 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Program Files\Unitymedia\Sicherheitspaket\HIPS\drivers\fshs.sys -- (F-Secure HIPS)
DRV - [2009.08.05 16:56:12 | 000,012,384 | ---- | M] () [Kernel | System | Running] -- C:\Program Files\Unitymedia\Sicherheitspaket\Anti-Virus\minifilter\fsvista.sys -- (fsvista)
DRV - [2009.04.30 23:01:36 | 000,265,496 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvrs.sys -- (LVRS)
DRV - [2009.04.30 22:55:58 | 002,687,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LV302V32.SYS -- (PID_PEPI) Logitech QuickCam IM(PID_PEPI)
DRV - [2009.04.30 22:55:34 | 000,013,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lv302af.sys -- (pepifilter)
DRV - [2008.09.05 02:01:00 | 000,265,088 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\fwlanusb.sys -- (FWLANUSB)
DRV - [2008.09.05 02:01:00 | 000,004,352 | R--- | M] (AVM Berlin) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\avmeject.sys -- (avmeject)
DRV - [2008.06.07 11:13:40 | 000,145,440 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2008.06.07 11:13:40 | 000,133,152 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\nvrd32.sys -- (nvrd32)
DRV - [2007.11.18 03:39:50 | 001,040,544 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmfdx32.sys -- (NVENETFD)
DRV - [2007.11.06 09:30:48 | 000,006,080 | ---- | M] (Zeal SoftStudio) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\zntport.sys -- (zntport)
DRV - [2007.11.06 09:30:46 | 000,014,544 | ---- | M] (EnTech Taiwan) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\TVicPort.sys -- (tvicport)
DRV - [2007.07.19 01:44:00 | 000,041,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LVUSBSta.sys -- (LVUSBSta)
DRV - [2007.07.07 14:13:10 | 000,012,032 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2007.07.03 03:05:20 | 000,015,392 | ---- | M] (Acer, Inc.) [Kernel | Auto | Running] -- C:\Acer\Empowering Technology\eRecovery\int15.sys -- (int15)
DRV - [2003.10.15 16:52:50 | 000,174,530 | ---- | M] (OmniVision Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ov519vid.sys -- (ovt519)
DRV - [2003.04.18 23:32:04 | 000,004,736 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\tandpl.sys -- (tandpl)
DRV - [2003.03.02 16:44:26 | 000,007,552 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\enodpl.sys -- (enodpl)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\URLSearchHook:  - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKLM\..\URLSearchHook: {c9508125-4747-4733-b048-e4b82dc9716d} - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031778
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
 
 
IE - HKU\.DEFAULT\..\URLSearchHook:  - No CLSID value found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\URLSearchHook:  - No CLSID value found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com [binary data]
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?AF=109867&babsrc=HP_ss&mntrId=2cec11f3000000000000001b2fcde29b
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\URLSearchHook:  - No CLSID value found
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/?q={searchTerms}&AF=109867&babsrc=SP_ss&mntrId=2cec11f3000000000000001b2fcde29b
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE359
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031778
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = hxxp://search.avg.com/route/?d=4ba6cb5c&v=6.10.6.4&i=23&tp=chrome&q={searchTerms}&lng={language}&iy=&ychte=us
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.search.useDBForOrder: true
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\litmus-ff@f-secure.com: C:\Program Files\Unitymedia\Sicherheitspaket\NRS\litmus-ff@f-secure.com [2012.02.22 21:40:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.02.22 21:39:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.02.26 18:55:19 | 000,000,000 | ---D | M]
 
[2009.12.26 13:44:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Falk\AppData\Roaming\mozilla\Extensions
[2012.03.05 21:23:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Falk\AppData\Roaming\mozilla\Firefox\Profiles\o93ropm4.default\extensions
[2012.03.05 21:23:08 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012.02.22 21:39:59 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
[2012.02.17 23:27:49 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.02.19 21:37:40 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010.01.12 21:03:50 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2012.01.17 14:07:17 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.01.17 14:07:17 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.01.17 14:07:17 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.01.17 14:07:17 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.01.17 14:07:17 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.01.17 14:07:17 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
 
O1 HOSTS File: ([2012.03.06 18:11:49 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll File not found
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (WOT) - {9E571C81-21E7-496B-9E6B-127E60263022} - C:\Users\Falk\AppData\LocalLow\WOT\IE\WOT.dll (WOT Services Oy)
O2 - BHO: (Browsing Protection Class) - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files\Unitymedia\Sicherheitspaket\NRS\iescript\baselitmus.dll (F-Secure Corporation)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKLM..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe ()
O4 - HKLM..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (Egis Incorporated)
O4 - HKLM..\Run: [F-Secure Manager] C:\Program Files\Unitymedia\Sicherheitspaket\Common\FSM32.EXE (F-Secure Corporation)
O4 - HKLM..\Run: [F-Secure TNB] C:\Program Files\Unitymedia\Sicherheitspaket\FSGUI\TNBUtil.exe (F-Secure Corporation)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NVRaidService] C:\Windows\System32\nvraidservice.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [vspdfprsrv.exe] C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe ()
O4 - HKLM..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000..\Run: [ICQ] C:\Program Files\ICQ7.6\ICQ.exe (ICQ, LLC.)
O4 - HKU\S-1-5-21-2303213444-1857024994-1684439035-1001..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\Windows\System32\cmd.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2303213444-1857024994-1684439035-1001..\RunOnce: [RUN] C:\Windows\Acer_Normal\run_DT.exe ()
O4 - Startup: C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O4 - Startup: C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-2303213444-1857024994-1684439035-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Falk\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O15 - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{96DF96FC-D1D2-403C-9451-9A031973ED11}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Falk\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Falk\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.02.02 14:19:24 | 000,000,089 | R--- | M] () - E:\Autorun.inf -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
 
 
SafeBootMin: AppMgmt -  File not found
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS -  File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet: AppMgmt -  File not found
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS -  File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfPf - Driver
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - 
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - 
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Macromedia Shockwave Flash
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\Windows\System32\lhacm.acm (Microsoft Corporation)
Drivers32: msacm.mkdmp3enc - C:\PROGRA~1\ACERAR~1\ACERVI~1\Kernel\Burner\MKDMP3Enc.ACM File not found
Drivers32: MSVideo - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.I420 - C:\Windows\System32\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.03.06 18:21:54 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012.03.06 17:59:31 | 000,000,000 | ---D | C] -- C:\ComboFix
[2012.03.06 15:43:30 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012.03.06 15:43:30 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012.03.06 15:43:30 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012.03.06 15:43:12 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2012.03.06 15:43:09 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012.03.06 15:40:46 | 004,427,148 | R--- | C] (Swearware) -- C:\Users\Falk\Desktop\ComboFix.exe
[2012.03.06 15:31:09 | 000,389,024 | ---- | C] (Bleeping Computer, LLC) -- C:\Users\Falk\Desktop\unhide.exe
[2012.03.06 15:24:45 | 002,063,920 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Falk\Desktop\tdsskiller.exe
[2012.03.05 23:37:51 | 000,584,704 | ---- | C] (OldTimer Tools) -- C:\Users\Falk\Desktop\OTL.exe
[2012.03.05 21:22:58 | 000,000,000 | ---D | C] -- C:\_OTL
[2012.03.02 15:06:02 | 002,322,184 | ---- | C] (ESET) -- C:\Users\Falk\Desktop\esetsmartinstaller_enu.exe
[2012.02.27 16:42:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2012.02.27 16:42:30 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2012.02.27 16:35:34 | 000,607,260 | R--- | C] (Swearware) -- C:\Users\Falk\Desktop\dds.scr
[2012.02.27 15:16:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.02.27 15:16:37 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.02.27 15:16:37 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.02.26 18:54:37 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2012.02.25 02:39:19 | 000,000,000 | ---D | C] -- C:\Users\Falk\AppData\Roaming\F-Secure
[2012.02.25 02:36:15 | 000,000,000 | ---D | C] -- C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC
[2012.02.25 02:31:18 | 000,000,000 | ---D | C] -- C:\Program Files\Vlcclassic
[2012.02.24 22:15:50 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2012.02.19 21:39:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
 
========== Files - Modified Within 30 Days ==========
 
[2012.03.06 20:02:47 | 000,003,216 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.03.06 20:02:47 | 000,003,216 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.03.06 20:02:46 | 000,000,584 | ---- | M] () -- C:\Windows\tasks\Scheduled scanning task.job
[2012.03.06 20:02:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.03.06 20:02:42 | 3220,373,504 | -HS- | M] () -- C:\hiberfil.sys
[2012.03.06 18:11:49 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2012.03.06 15:41:14 | 004,427,148 | R--- | M] (Swearware) -- C:\Users\Falk\Desktop\ComboFix.exe
[2012.03.06 15:31:10 | 000,389,024 | ---- | M] (Bleeping Computer, LLC) -- C:\Users\Falk\Desktop\unhide.exe
[2012.03.06 15:24:53 | 002,063,920 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Falk\Desktop\tdsskiller.exe
[2012.03.05 23:38:10 | 000,584,704 | ---- | M] (OldTimer Tools) -- C:\Users\Falk\Desktop\OTL.exe
[2012.03.05 16:39:46 | 000,006,144 | ---- | M] () -- C:\Users\Falk\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.03.02 15:06:06 | 002,322,184 | ---- | M] (ESET) -- C:\Users\Falk\Desktop\esetsmartinstaller_enu.exe
[2012.02.27 17:16:04 | 277,400,196 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012.02.27 16:39:11 | 000,302,592 | ---- | M] () -- C:\Users\Falk\Desktop\ssr2tibw.exe
[2012.02.27 16:35:40 | 000,607,260 | R--- | M] (Swearware) -- C:\Users\Falk\Desktop\dds.scr
[2012.02.27 16:00:53 | 000,000,000 | ---- | M] () -- C:\Users\Falk\defogger_reenable
[2012.02.27 16:00:01 | 000,050,477 | ---- | M] () -- C:\Users\Falk\Desktop\Defogger.exe
[2012.02.27 15:17:35 | 000,000,809 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.02.27 15:16:42 | 000,000,911 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.02.26 18:55:19 | 000,001,897 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2012.02.25 02:36:15 | 000,001,058 | ---- | M] () -- C:\Users\Falk\Desktop\VLC.lnk
[2012.02.25 02:31:08 | 000,000,237 | ---- | M] () -- C:\user.js
[2012.02.24 22:05:04 | 001,382,491 | ---- | M] () -- C:\Users\Falk\Documents\Scannen0005.jpg
[2012.02.24 22:02:37 | 001,279,391 | ---- | M] () -- C:\Users\Falk\Documents\Scannen0011.jpg
[2012.02.24 22:02:27 | 001,299,827 | ---- | M] () -- C:\Users\Falk\Documents\Scannen0010.jpg
[2012.02.22 18:53:36 | 000,001,037 | ---- | M] () -- C:\Users\Falk\Desktop\DVDVideoSoft Free Studio.lnk
[2012.02.22 18:53:35 | 000,001,196 | ---- | M] () -- C:\Users\Falk\Desktop\Free YouTube to MP3 Converter.lnk
[2012.02.21 00:14:32 | 000,636,076 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.02.21 00:14:32 | 000,603,370 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.02.21 00:14:32 | 000,129,678 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.02.21 00:14:32 | 000,107,302 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.02.16 13:59:15 | 000,407,592 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
 
========== Files Created - No Company Name ==========
 
[2012.03.06 18:22:59 | 000,000,584 | ---- | C] () -- C:\Windows\tasks\Scheduled scanning task.job
[2012.03.06 15:43:30 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012.03.06 15:43:30 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012.03.06 15:43:30 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012.03.06 15:43:30 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012.03.06 15:43:30 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012.03.06 14:22:51 | 3220,373,504 | -HS- | C] () -- C:\hiberfil.sys
[2012.02.27 16:54:45 | 277,400,196 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012.02.27 16:39:07 | 000,302,592 | ---- | C] () -- C:\Users\Falk\Desktop\ssr2tibw.exe
[2012.02.27 16:00:53 | 000,000,000 | ---- | C] () -- C:\Users\Falk\defogger_reenable
[2012.02.27 15:59:39 | 000,050,477 | ---- | C] () -- C:\Users\Falk\Desktop\Defogger.exe
[2012.02.27 15:16:42 | 000,000,911 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.02.26 18:55:19 | 000,001,897 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2012.02.26 18:55:19 | 000,001,804 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2012.02.25 02:36:15 | 000,001,058 | ---- | C] () -- C:\Users\Falk\Desktop\VLC.lnk
[2012.02.25 02:31:07 | 000,000,237 | ---- | C] () -- C:\user.js
[2012.02.24 22:04:53 | 001,382,491 | ---- | C] () -- C:\Users\Falk\Documents\Scannen0005.jpg
[2012.02.24 22:02:27 | 001,279,391 | ---- | C] () -- C:\Users\Falk\Documents\Scannen0011.jpg
[2012.02.24 22:02:16 | 001,299,827 | ---- | C] () -- C:\Users\Falk\Documents\Scannen0010.jpg
[2012.02.22 23:24:40 | 000,006,144 | ---- | C] () -- C:\Users\Falk\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.01.26 01:36:51 | 000,014,336 | ---- | C] () -- C:\Windows\System32\vsmon1.dll
[2011.12.13 18:53:48 | 000,000,156 | ---- | C] () -- C:\Windows\wininit.ini
[2011.12.06 00:51:22 | 000,407,592 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.10.15 00:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2011.10.10 14:17:08 | 000,000,232 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2011.06.22 21:49:57 | 000,200,704 | ---- | C] () -- C:\Windows\sel3110.exe
[2011.06.22 21:49:56 | 000,040,960 | ---- | C] () -- C:\Windows\CleanDev.exe
[2011.06.22 21:49:56 | 000,032,528 | ---- | C] () -- C:\Windows\amcap.exe
[2011.04.09 17:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011.02.27 00:43:17 | 000,000,000 | ---- | C] () -- C:\Windows\System32\Access.dat
[2011.02.07 17:39:58 | 000,186,609 | ---- | C] () -- C:\Windows\hpoins21.dat
[2011.01.11 15:47:55 | 000,451,072 | ---- | C] () -- C:\Windows\System32\ISSRemoveSP.exe
[2010.11.30 21:10:40 | 000,042,672 | ---- | C] () -- C:\Windows\System32\drivers\fsbts.sys
[2010.10.17 17:12:24 | 000,097,360 | ---- | C] () -- C:\Windows\System32\drivers\Fwusb1b.bin
[2010.04.13 13:18:33 | 000,007,552 | ---- | C] () -- C:\Windows\System32\drivers\enodpl.sys
[2010.04.13 13:18:33 | 000,004,736 | ---- | C] () -- C:\Windows\System32\drivers\tandpl.sys
 
========== LOP Check ==========
 
[2008.03.21 14:57:57 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Acer GameZone Console
[2011.02.25 13:52:07 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Acreon
[2012.02.22 19:03:24 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\DVDVideoSoft
[2011.08.04 13:27:11 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.02.22 21:40:07 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\eXPert PDF Editor
[2012.02.25 02:39:19 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\F-Secure
[2010.02.22 17:08:19 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\GetRightToGo
[2012.03.06 15:08:53 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\ICQ
[2010.01.26 19:42:21 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Leadertech
[2011.06.21 16:56:13 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\OpenOffice.org
[2011.06.20 02:10:51 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\SoftGrid Client
[2010.12.07 22:37:30 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\TeamViewer
[2011.06.19 21:35:36 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\TP
[2012.02.22 21:40:08 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\TS3Client
[2011.02.27 04:46:00 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Tunngle
[2008.03.21 14:57:57 | 000,000,000 | ---D | M] -- C:\Users\UpdatusUser\AppData\Roaming\Acer GameZone Console
[2012.03.06 20:01:36 | 000,032,514 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012.03.06 20:02:46 | 000,000,584 | ---- | M] () -- C:\Windows\Tasks\Scheduled scanning task.job
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2008.03.21 14:57:57 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Acer GameZone Console
[2011.02.25 13:52:07 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Acreon
[2011.12.02 00:59:29 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Adobe
[2011.11.02 00:14:32 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Apple Computer
[2010.10.26 20:33:36 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\DivX
[2012.02.22 19:03:24 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\DVDVideoSoft
[2011.08.04 13:27:11 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.02.22 21:40:07 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\eXPert PDF Editor
[2012.02.25 02:39:19 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\F-Secure
[2010.02.22 17:08:19 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\GetRightToGo
[2009.12.26 13:41:43 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Google
[2011.02.07 18:07:35 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\HP
[2012.02.01 18:21:15 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\HpUpdate
[2012.03.06 15:08:53 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\ICQ
[2009.12.22 15:59:47 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Identities
[2010.01.26 19:42:21 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Leadertech
[2009.12.22 16:00:14 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Macromedia
[2011.11.22 21:41:33 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Malwarebytes
[2006.11.02 13:37:34 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Media Center Programs
[2012.02.01 18:19:11 | 000,000,000 | --SD | M] -- C:\Users\Falk\AppData\Roaming\Microsoft
[2009.12.26 13:44:45 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Mozilla
[2011.08.18 19:42:31 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\NVIDIA
[2011.06.21 16:56:13 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\OpenOffice.org
[2011.08.18 22:05:03 | 000,000,000 | R--D | M] -- C:\Users\Falk\AppData\Roaming\SecuROM
[2012.03.05 15:42:28 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Skype
[2011.06.26 01:39:59 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\skypePM
[2011.06.20 02:10:51 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\SoftGrid Client
[2010.06.09 19:22:48 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\teamspeak2
[2010.12.07 22:37:30 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\TeamViewer
[2011.06.19 21:35:36 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\TP
[2012.02.22 21:40:08 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\TS3Client
[2011.02.27 04:46:00 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Tunngle
[2012.03.06 04:19:33 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\Winamp
[2010.10.25 19:44:47 | 000,000,000 | ---D | M] -- C:\Users\Falk\AppData\Roaming\WinRAR
 
< %APPDATA%\*.exe /s >
[2011.02.25 13:52:09 | 000,272,384 | ---- | M] () -- C:\Users\Falk\AppData\Roaming\Acreon\WowMatrix\Modules\curl.exe
 
< %SYSTEMDRIVE%\*.exe >
 
 
< MD5 for: AGP440.SYS  >
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\ERDNT\cache\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\drivers\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006.11.02 10:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\ERDNT\cache\atapi.sys
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006.11.02 10:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\ERDNT\cache\cngaudit.dll
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
 
< MD5 for: IASTOR.SYS  >
[2005.10.12 05:07:12 | 000,874,240 | ---- | M] (Intel Corporation) MD5=309C4D86D989FB1FCF64BD30DC81C51B -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_2517c98a\iaStor.sys
[2005.10.12 05:07:12 | 000,874,240 | ---- | M] (Intel Corporation) MD5=309C4D86D989FB1FCF64BD30DC81C51B -- C:\Windows\System32\DriverStore\FileRepository\iastor.inf_ef2f01d9\iaStor.sys
[2006.06.13 21:56:40 | 000,247,808 | ---- | M] (Intel Corporation) MD5=580BFEC487C55264BFE3D60C3C24EEE1 -- C:\Windows\System32\drivers\iaStor.sys
[2006.06.13 21:56:40 | 000,247,808 | ---- | M] (Intel Corporation) MD5=580BFEC487C55264BFE3D60C3C24EEE1 -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_d8b4315a\iaStor.sys
[2006.06.13 21:56:40 | 000,247,808 | ---- | M] (Intel Corporation) MD5=580BFEC487C55264BFE3D60C3C24EEE1 -- C:\Windows\System32\DriverStore\FileRepository\iastor.inf_101ee613\iaStor.sys
 
< MD5 for: IASTORV.SYS  >
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\drivers\iaStorV.sys
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006.11.02 10:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\ERDNT\cache\netlogon.dll
[2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll
[2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008.01.21 03:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2006.11.02 10:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\drivers\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys
 
< MD5 for: NVSTOR32.SYS  >
[2007.12.08 06:28:10 | 000,140,320 | ---- | M] (NVIDIA Corporation) MD5=689A2160B851F8BF88F20728FD2F30BD -- C:\Windows\System32\DriverStore\FileRepository\nvrd32.inf_a5207023\nvstor32.sys
[2007.09.11 08:19:16 | 000,114,208 | ---- | M] (NVIDIA Corporation) MD5=8FFB327669B980549BD318D939A34F9B -- C:\Windows\System32\DriverStore\FileRepository\nvstor32.inf_4b699c67\nvstor32.sys
[2007.09.11 08:19:18 | 000,114,208 | ---- | M] (NVIDIA Corporation) MD5=AFD01721DC3297E6715C5F472DD8BCCD -- C:\Windows\System32\DriverStore\FileRepository\nvrd32.inf_8225a48e\nvstor32.sys
[2008.06.07 11:13:40 | 000,145,440 | ---- | M] (NVIDIA Corporation) MD5=D7B213299852D2026DBC90DAB77EF06C -- C:\DRV\RAID\NVIDIA\nvstor32.sys
[2008.06.07 11:13:40 | 000,145,440 | ---- | M] (NVIDIA Corporation) MD5=D7B213299852D2026DBC90DAB77EF06C -- C:\DRV\RaidV2\nvstor32.sys
[2008.06.07 11:13:40 | 000,145,440 | ---- | M] (NVIDIA Corporation) MD5=D7B213299852D2026DBC90DAB77EF06C -- C:\Windows\System32\drivers\nvstor32.sys
[2008.06.07 11:13:40 | 000,145,440 | ---- | M] (NVIDIA Corporation) MD5=D7B213299852D2026DBC90DAB77EF06C -- C:\Windows\System32\DriverStore\FileRepository\nvrd32.inf_52f8ebc7\nvstor32.sys
 
< MD5 for: SCECLI.DLL  >
[2008.01.21 03:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\ERDNT\cache\scecli.dll
[2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll
[2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll
 
< MD5 for: USER32.DLL  >
[2009.04.11 07:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\ERDNT\cache\user32.dll
[2008.01.21 03:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll
[2009.04.11 07:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\user32.dll
[2009.04.11 07:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\ERDNT\cache\userinit.exe
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2008.01.21 03:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\ERDNT\cache\wininit.exe
[2008.01.21 03:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\System32\wininit.exe
[2008.01.21 03:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2012.01.13 14:53:20 | 000,182,856 | ---- | M] () MD5=63EEC8A8B221AB79045E776E5F592868 -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\ERDNT\cache\winlogon.exe
[2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe
[2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2008.01.21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2008.01.21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2008.01.21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
[2008.03.21 22:08:02 | 013,115,392 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2008.03.21 22:07:55 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2008.03.21 22:08:02 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2008.03.21 22:08:10 | 017,629,184 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2008.03.21 22:08:11 | 006,639,616 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >
 
<           >

< End of report >

--- --- ---

Esel03 · 06.03.2012, 21:01

Doppel Post sorry :c

cosinus · 06.03.2012, 21:29

Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:

ATTFilter

:OTL
IE - HKLM\..\URLSearchHook:  - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKLM\..\URLSearchHook: {c9508125-4747-4733-b048-e4b82dc9716d} - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031778
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
IE - HKU\.DEFAULT\..\URLSearchHook:  - No CLSID value found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\S-1-5-18\..\URLSearchHook:  - No CLSID value found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://global.acer.com [binary data]
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?AF=109867&babsrc=HP_ss&mntrId=2cec11f3000000000000001b2fcde29b
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\URLSearchHook:  - No CLSID value found
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=109867&babsrc=SP_ss&mntrId=2cec11f3000000000000001b2fcde29b
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE359
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031778
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://search.avg.com/route/?d=4ba6cb5c&v=6.10.6.4&i=23&tp=chrome&q={searchTerms}&lng={language}&iy=&ychte=us
IE - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-2303213444-1857024994-1684439035-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O32 - HKLM CDRom: AutoRun - 1
:Commands
[emptytemp]
[resethosts]

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

Esel03 · 06.03.2012, 21:46

Sooo, hier das Lögchen

Code:

ATTFilter

 All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{c9508125-4747-4733-b048-e4b82dc9716d} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c9508125-4747-4733-b048-e4b82dc9716d}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{A3BC75A2-1F87-4686-AA43-5347D756017C} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}\ not found.
HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Secondary_Page_URL| /E : value set successfully!
HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\SearchDefaultBranded| /E : value set successfully!
HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\StartPageCache| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
Registry key HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}\ not found.
Registry key HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.
Registry key HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.
Registry value HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\WinampAgent deleted successfully.
C:\Program Files\Winamp\winampa.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDrives deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDrives deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2303213444-1857024994-1684439035-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Falk
->Temp folder emptied: 613104 bytes
->Temporary Internet Files folder emptied: 82054 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 120617150 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 835 bytes
 
User: Public
->Temp folder emptied: 0 bytes
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 128114 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 116,00 mb
 
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.35.1 log created on 03062012_214005

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\logishrd\LVPrcInj01.dll scheduled to be moved on reboot.
File move failed. C:\Windows\temp\CLDigitalHome\CLMS_AGENT_LOG1.txt scheduled to be moved on reboot.
File move failed. C:\Windows\temp\CLDigitalHome\PCMMediaServer.log scheduled to be moved on reboot.

Registry entries deleted on Reboot...

cosinus · 07.03.2012, 00:06

Ok. Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte

aswMBR.exe und speichere die Datei auf deinem Desktop.

Starte die aswMBR.exe - (aswMBR.exe Anleitung)
Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS-Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).

Esel03 · 07.03.2012, 02:51

Bei GMER hatte ich das Problem wie früher.
Hängt sich auf und der Pc verabschiedet sich mit nem Bluescreen.

Osam

Code:

ATTFilter

Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 00:44:15 on 07.03.2012

OS: Windows Vista Home Premium Edition Service Pack 2 (Build 6002), 32-bit
Default Browser: Mozilla Corporation Firefox 10.0.2

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[AppInit DLLs]
-----( HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows )-----
"AppInit_DLLs" - "Google" - C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"DivXControlPanelApplet.cpl" - "DivX, Inc." - C:\Windows\system32\DivXControlPanelApplet.cpl
"FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\Windows\system32\FlashPlayerCPLApp.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\MLCFG32.CPL

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"AVM Eject" (avmeject) - "AVM Berlin" - C:\Windows\System32\drivers\avmeject.sys
"AVM FRITZ!WLAN" (FWLANUSB) - "AVM GmbH" - C:\Windows\System32\DRIVERS\fwlanusb.sys
"catchme" (catchme) - ? - C:\Users\Falk\AppData\Local\Temp\catchme.sys  (File not found)
"enodpl" (enodpl) - ? - C:\Windows\System32\drivers\enodpl.sys  (File found, but it contains no detailed information)
"F-Secure Email Scanning Driver" (FSES) - "F-Secure Corporation" - C:\Windows\System32\drivers\fses.sys
"F-Secure Firewall Driver" (FSFW) - "F-Secure Corporation" - C:\Windows\System32\drivers\fsdfw.sys
"F-Secure Gatekeeper" (F-Secure Gatekeeper) - "F-Secure Corporation" - C:\Program Files\Unitymedia\Sicherheitspaket\Anti-Virus\minifilter\fsgk.sys
"F-Secure HIPS Driver" (F-Secure HIPS) - "F-Secure Corporation" - C:\Program Files\Unitymedia\Sicherheitspaket\HIPS\drivers\fshs.sys
"F-Secure Vista Support Driver" (fsvista) - "F-Secure Corporation" - C:\Program Files\Unitymedia\Sicherheitspaket\Anti-Virus\minifilter\fsvista.sys
"fsbts" (fsbts) - "F-Secure Corporation" - C:\Windows\System32\Drivers\fsbts.sys
"Hamachi Network Interface" (hamachi) - "LogMeIn, Inc." - C:\Windows\System32\DRIVERS\hamachi.sys
"int15" (int15) - "Acer, Inc." - C:\Acer\Empowering Technology\eRecovery\int15.sys
"IP in IP Tunnel Driver" (IpInIp) - ? - C:\Windows\System32\DRIVERS\ipinip.sys  (File not found)
"IPX Traffic Filter Driver" (NwlnkFlt) - ? - C:\Windows\System32\DRIVERS\nwlnkflt.sys  (File not found)
"IPX Traffic Forwarder Driver" (NwlnkFwd) - ? - C:\Windows\System32\DRIVERS\nwlnkfwd.sys  (File not found)
"MBAMProtector" (MBAMProtector) - "Malwarebytes Corporation" - C:\Windows\system32\drivers\mbam.sys
"PSDFilter" (PSDFilter) - "Egis Incorporated" - C:\Windows\System32\DRIVERS\psdfilter.sys
"PSDNServ" (PSDNServ) - "Egis Incorporated" - C:\Windows\System32\DRIVERS\PSDNServ.sys
"PSDVdisk" (psdvdisk) - "Egis Incorporated" - C:\Windows\System32\DRIVERS\PSDVdisk.sys
"Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter" (RTL8192su) - ? - C:\Windows\System32\DRIVERS\RTL8192su.sys  (File not found)
"Sftfs" (Sftfs) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftfslh.sys
"Sftplay" (Sftplay) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftplaylh.sys
"Sftredir" (Sftredir) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftredirlh.sys
"Sftvol" (Sftvol) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftvollh.sys
"tandpl" (tandpl) - ? - C:\Windows\System32\drivers\tandpl.sys  (File found, but it contains no detailed information)
"tvicport" (tvicport) - "EnTech Taiwan" - C:\Windows\system32\drivers\tvicport.sys
"Upper Class Filter Driver" (NTIDrvr) - "NewTech Infosystems, Inc." - C:\Windows\System32\DRIVERS\NTIDrvr.sys
"zntport" (zntport) - "Zeal SoftStudio" - C:\Windows\system32\drivers\zntport.sys

[Explorer]
-----( HKCU\Software\Classes\Folder\shellex\ColumnHandlers )-----
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? -   (File not found | COM-object registry key not found)
-----( HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{AE424E85-F6DF-4910-A6A9-438797986431} "OpenOffice.org Property Handler" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
-----( HKLM\Software\Classes\Protocols\Handler )-----
{9462A756-7B47-47BC-8C80-C34B9B80B32B} "BackWeb GA Pluggable Protocol" - "Logitech Inc." - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? -   (File not found | COM-object registry key not found)
{23170F69-40C1-278A-1000-000100020000} "7-Zip Shell Extension" - "Igor Pavlov" - C:\Program Files\7-Zip\7-zip.dll
{1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)
{34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)
{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? -   (File not found | COM-object registry key not found)
{A70C977A-BF00-412C-90B7-034C51DA2439} "DesktopContext Class" - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\Display\nvui.dll
{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} "DragDropProtect Class" - "Egis Incorporated" - C:\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
{2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? -   (File not found | COM-object registry key not found)
{FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} "IE User Assist" - ? -   (File not found | COM-object registry key not found)
{ED6E87C6-8A83-43aa-8208-8DBC8247F4D2} "IntelliType Pro Key Settings Property Page" - "Microsoft Corporation" - c:\Program Files\Microsoft IntelliType Pro\itcplkey.dll
{111D8120-25EB-4E1C-A4DF-C9EE5FCA35CB} "IntelliType Pro Scrolling Property Page" - "Microsoft Corporation" - c:\Program Files\Microsoft IntelliType Pro\itcplwhl.dll
{1825D0FA-5B0C-4e20-A929-3EFD15B6DF71} "IntelliType Pro Touchpad Control Property Page" - "Microsoft Corporation" - c:\Program Files\Microsoft IntelliType Pro\itcpltp.dll
{A2569D1F-4E06-43EC-9825-0088B471BE47} "IntelliType Pro Wireless Control Panel Property Page" - "Microsoft Corporation" - c:\Program Files\Microsoft IntelliType Pro\itcplwir.dll
{97FA8AA2-EE77-4FF2-9449-424D8924EF21} "IntelliType Pro Zooming Property Page" - "Microsoft Corporation" - c:\Program Files\Microsoft IntelliType Pro\itcplzm.dll
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll
{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\ONFILTER.DLL
{00020d75-0000-0000-c000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\MLSHEXT.DLL
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll
{0875DCB6-C686-4243-9432-ADCCF0B9F2D7} "Microsoft OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office14\ONFILTER.DLL
{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} "NVIDIA CPL Context Menu Extension" - "NVIDIA Corporation" - C:\Windows\system32\nvshext.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? -   (File not found | COM-object registry key not found)
{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? -   (File not found | COM-object registry key not found)
{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? -   (File not found | COM-object registry key not found)
{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? -   (File not found | COM-object registry key not found)
{0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\OLKFSTUB.DLL
{C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)
{E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)
{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -   (File not found | COM-object registry key not found)
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - "Alexander Roshal" - C:\Program Files\WinRAR\rarext.dll

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
ITBar7Height "ITBar7Height" - ? -   (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_31" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} "Java Plug-in 1.6.0_31" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_31" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_31.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
{D27CDB6E-AE6D-11CF-96B8-444553540000} "Shockwave Flash Object" - "Adobe Systems, Inc." - C:\Windows\system32\Macromed\Flash\Flash11f.ocx / hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
{53707962-6F74-2D53-2644-206D7942484F} "ClsidExtension" - "Safer Networking Limited" - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
{DDE87865-83C5-48c4-8357-2F5B1AA84522} "HP Intelligente Auswahl" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
"ICQ7.6" - "ICQ, LLC." - C:\Program Files\ICQ7.6\ICQ.exe
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} "AVG Safe Search" - ? - C:\Program Files\AVG\AVG9\avgssie.dll  (File not found)
{C6867EB7-8350-4856-877F-93CF8AE3DC9C} "Browsing Protection Class" - "F-Secure Corporation" - C:\Program Files\Unitymedia\Sicherheitspaket\NRS\iescript\baselitmus.dll
{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} "HP Smart BHO Class" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} "Java(tm) Plug-In SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\ssv.dll
{53707962-6F74-2D53-2644-206D7942484F} "Spybot-S&D IE Protection" - "Safer Networking Limited" - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live ID Sign-in Helper" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
{9E571C81-21E7-496B-9E6B-127E60263022} "WOT" - "WOT Services Oy" - C:\Users\Falk\AppData\LocalLow\WOT\IE\WOT.dll

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE  (Shortcut exists | File exists)
"CurseClientStartup.ccip" - ? - C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip
"desktop.ini" - ? - C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"OpenOffice.org 3.3.lnk" - ? - C:\Program Files\OpenOffice.org 3\program\quickstart.exe  (Shortcut exists | File found, but it contains no detailed information | File exists)
-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"ASETRES.EXE" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ASETRES.EXE
"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"Empowering Technology Launcher.lnk" - "Acer Inc." - C:\Acer\Empowering Technology\eAPLauncher.exe  (Shortcut exists | File exists)
"HP Digital Imaging Monitor.lnk" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe  (Shortcut exists | File exists)
"Logitech Desktop Messenger.lnk" - "Logitech Inc." - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe  (Shortcut exists | File exists)
"McAfee Security Scan Plus.lnk" - "McAfee, Inc." - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe  (Shortcut exists | File exists)
"NETGEAR WG111v3 Smart Wizard.lnk" - ? - C:\Program Files\NETGEAR\WG111v3\WG111v3.exe  (Shortcut exists | File exists)
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"ICQ" - "ICQ, LLC." - "C:\Program Files\ICQ7.6\ICQ.exe" silent loginmode=4
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Acer Empowering Technology Monitor" - ? - C:\Acer\Empowering Technology\SysMonitor.exe
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"eDataSecurity Loader" - "Egis Incorporated" - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
"F-Secure Manager" - "F-Secure Corporation" - "C:\Program Files\Unitymedia\Sicherheitspaket\Common\FSM32.EXE" /splash
"F-Secure TNB" - "F-Secure Corporation" - "C:\Program Files\Unitymedia\Sicherheitspaket\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
"Google Desktop Search" - "Google" - "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
"HP Software Update" - "Hewlett-Packard" - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
"hpqSRMon" - "Hewlett-Packard" - C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
"itype" - "Microsoft Corporation" - "c:\Program Files\Microsoft IntelliType Pro\itype.exe"
"LogitechQuickCamRibbon" - "Logitech Inc." - "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
"Malwarebytes' Anti-Malware" - "Malwarebytes Corporation" - "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"NVRaidService" - "NVIDIA Corporation" - C:\Windows\system32\nvraidservice.exe
"PCMMediaSharing" - ? - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe  (File found, but it contains no detailed information)
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
"vspdfprsrv.exe" - ? - C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe --background
"WarReg_PopUp" - "Acer Inc." - C:\Acer\WR_PopUp\WarReg_PopUp.exe

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"PCL hpz3l5ha" - "Hewlett-Packard Company" - C:\Windows\system32\hpz3l5ha.dll
"Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\Windows\system32\msonpmon.dll
"VSP1:" - ? - C:\Windows\system32\vsmon1.dll  (File found, but it contains no detailed information)

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100" (WPFFontCache_v0400) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
"Acer HomeMedia Connect Service" (Acer HomeMedia Connect Service) - "CyberLink" - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
"Adobe Acrobat Update Service" (AdobeARMservice) - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
"Application Virtualization Client" (sftlist) - "Microsoft Corporation" - C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
"Application Virtualization Service Agent" (sftvsa) - "Microsoft Corporation" - C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
"Client Virtualization Handler" (cvhsvc) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
"Cyberlink RichVideo Service(CRVS)" (RichVideo) - ? - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
"eDataSecurity Service" (eDataSecurity Service) - "Egis Incorporated" - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
"ePerformance Service" (AcerMemUsageCheckService) - ? - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
"eRecovery Service" (eRecoveryService) - "Acer Inc." - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
"eSettings Service" (eSettingsService) - ? - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
"F-Secure Anti-Virus Firewall Daemon" (FSDFWD) - "F-Secure Corporation" - C:\Program Files\Unitymedia\Sicherheitspaket\FWES\Program\fsdfwd.exe
"F-Secure ORSP Client" (FSORSPClient) - "F-Secure Corporation" - C:\Program Files\Unitymedia\Sicherheitspaket\ORSP Client\fsorsp.exe
"FSGKHS" (F-Secure Gatekeeper Handler Starter) - "F-Secure Corporation" - C:\Program Files\Unitymedia\Sicherheitspaket\Anti-Virus\fsgk32st.exe
"FSMA" (FSMA) - "F-Secure Corporation" - C:\Program Files\Unitymedia\Sicherheitspaket\Common\FSMA32.EXE
"Google Desktop Manager 5.7.808.7150" (GoogleDesktopManager-080708-050100) - "Google" - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
"HP CUE DeviceDiscovery Service" (hpqddsvc) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
"HP Network Devices Support" (HPSLPSVC) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL
"hpqcxs08" (hpqcxs08) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
"LightScribeService Direct Disc Labeling Service" (LightScribeService) - "Hewlett-Packard Company" - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
"MBAMService" (MBAMService) - "Malwarebytes Corporation" - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
"Net Driver HPZ12" (Net Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZinw12.dll
"NVIDIA Display Driver Service" (nvsvc) - "NVIDIA Corporation" - C:\Windows\system32\nvvsvc.exe
"NVIDIA Stereoscopic 3D Driver Service" (Stereo Service) - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
"NVIDIA Update Service Daemon" (nvUpdatusService) - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
"Office  Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
"Office Software Protection Platform" (osppsvc) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
"Pml Driver HPZ12" (Pml Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZipm12.dll
"Process Monitor" (LVPrcSrv) - "Logitech Inc." - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
"Windows Live ID Sign-in Assistant" (wlidsvc) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
"WOT Updater" (WOTUpdater) - ? - C:\Users\Falk\AppData\LocalLow\WOT\IE\WOTUpdater.exe  (File found, but it contains no detailed information)

[Winlogon]
-----( HKCU\Control Panel\Desktop )-----
"SCRNSAVE.EXE" - ? - C:\Windows\ACER(N~1.SCR  (File found, but it contains no detailed information)

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries )-----
"F-Secure Protocol Scanner" - "F-Secure Corporation" - C:\Program Files\Unitymedia\Sicherheitspaket\FSPS\program\FSLSP.DLL

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru

Aswdings

Code:

ATTFilter

 aswMBR version 0.9.9.1649 Copyright(c) 2011 AVAST Software
Run date: 2012-03-07 00:45:38
-----------------------------
00:45:38.060    OS Version: Windows 6.0.6002 Service Pack 2
00:45:38.060    Number of processors: 4 586 0x1707
00:45:38.061    ComputerName: FALK-PC  UserName: Falk
00:45:57.311    Initialize success
00:49:46.837    AVAST engine defs: 12030600
00:51:40.203    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000006c
00:51:40.206    Disk 0 Vendor: ST332081 SD23 Size: 305245MB BusType: 8
00:51:40.221    Disk 0 MBR read successfully
00:51:40.224    Disk 0 MBR scan
00:51:40.229    Disk 0 unknown MBR code
00:51:40.231    Disk 0 Partition 1 00     27 Hidden NTFS WinRE NTFS        14998 MB offset 63
00:51:40.247    Disk 0 Partition 2 80 (A) 06        FAT16 NTFS       145197 MB offset 30717952
00:51:40.273    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS       145048 MB offset 328081408
00:51:40.303    Disk 0 scanning sectors +625139712
00:51:40.467    Disk 0 scanning C:\Windows\system32\drivers
00:52:03.666    Service scanning
00:52:39.739    Modules scanning
00:53:00.001    Disk 0 trace - called modules:
00:53:00.025    ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll storport.sys nvstor32.sys 
00:53:00.029    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x86227ac8]
00:53:00.034    3 CLASSPNP.SYS[82b998b3] -> nt!IofCallDriver -> [0x85862668]
00:53:00.038    5 acpi.sys[82a926bc] -> nt!IofCallDriver -> \Device\0000006c[0x849a2030]
00:53:00.985    AVAST engine scan C:\Windows
00:53:07.465    AVAST engine scan C:\Windows\system32
00:59:00.116    AVAST engine scan C:\Windows\system32\drivers
00:59:16.743    AVAST engine scan C:\Users\Falk
01:11:19.414    Disk 0 MBR has been saved successfully to "C:\Users\Falk\Desktop\MBR.dat"
01:11:19.446    The log file has been saved successfully to "C:\Users\Falk\Desktop\aswMBR.txt"


aswMBR version 0.9.9.1649 Copyright(c) 2011 AVAST Software
Run date: 2012-03-07 01:47:24
-----------------------------
01:47:24.582    OS Version: Windows 6.0.6002 Service Pack 2
01:47:24.583    Number of processors: 4 586 0x1707
01:47:24.584    ComputerName: FALK-PC  UserName: Falk
01:47:25.637    Initialize success
01:47:33.501    AVAST engine defs: 12030600
01:47:41.651    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000006c
01:47:41.654    Disk 0 Vendor: ST332081 SD23 Size: 305245MB BusType: 8
01:47:41.725    Disk 0 MBR read successfully
01:47:41.728    Disk 0 MBR scan
01:47:41.734    Disk 0 unknown MBR code
01:47:41.745    Disk 0 Partition 1 00     27 Hidden NTFS WinRE NTFS        14998 MB offset 63
01:47:41.769    Disk 0 Partition 2 80 (A) 06        FAT16 NTFS       145197 MB offset 30717952
01:47:41.803    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS       145048 MB offset 328081408
01:47:41.868    Disk 0 scanning sectors +625139712
01:47:42.122    Disk 0 scanning C:\Windows\system32\drivers
01:48:27.831    Service scanning
01:49:09.615    Modules scanning
01:50:52.839    Disk 0 trace - called modules:
01:50:52.853    
01:50:53.500    AVAST engine scan C:\Windows
01:51:33.935    AVAST engine scan C:\Windows\system32
02:06:27.246    AVAST engine scan C:\Windows\system32\drivers
02:07:51.932    AVAST engine scan C:\Users\Falk
02:41:14.663    AVAST engine scan C:\ProgramData
02:46:54.708    Scan finished successfully
02:49:50.029    Disk 0 MBR has been saved successfully to "C:\Users\Falk\Desktop\MBR.dat"
02:49:50.034    The log file has been saved successfully to "C:\Users\Falk\Desktop\aswMBR.txt"

cosinus · 07.03.2012, 10:10

Wir sollten den MBR fixen, sichere für den Fall der Fälle ALLE wichtigen Daten, auch wenn meistens alles glatt geht.

Hinweis: Mach bitte NICHT den MBR-Fix, wenn du noch andere Betriebssysteme wie zB Ubuntu installiert hast, ein MBR-Fix mit Windows-Tools macht ein parallel installiertes (Dualboot) Linux unbootbar.
Mach den Fix auch dann nicht, wenn du zB mit TrueCrypt oder anderen Verschlüsselungsprogrammen eine Vollverschlüsselung der Windowspartition bzw. gesamten Festplatte hast

Starte nach der Datensicherung aswmbr erneut und klick auf den Button FIXMBR.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehalalrm!

Anschließend Windows neu starten und ein neues Log mit aswMBR machen.

Esel03 · 07.03.2012, 16:19

Der Fix ging vllt 10 Sekunden ? oO
Ist das normal so?

Naja hier der Log

Code:

ATTFilter

 aswMBR version 0.9.9.1649 Copyright(c) 2011 AVAST Software
Run date: 2012-03-07 15:12:00
-----------------------------
15:12:00.779    OS Version: Windows 6.0.6002 Service Pack 2
15:12:00.779    Number of processors: 4 586 0x1707
15:12:00.780    ComputerName: FALK-PC  UserName: Falk
15:12:01.907    Initialize success
15:12:05.476    AVAST engine defs: 12030600
15:12:14.390    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000006d
15:12:14.393    Disk 0 Vendor: ST332081 SD23 Size: 305245MB BusType: 8
15:12:14.442    Disk 0 MBR read successfully
15:12:14.445    Disk 0 MBR scan
15:12:14.450    Disk 0 Windows VISTA default MBR code
15:12:14.462    Disk 0 Partition 1 00     27 Hidden NTFS WinRE NTFS        14998 MB offset 63
15:12:14.516    Disk 0 Partition 2 80 (A) 06        FAT16 NTFS       145197 MB offset 30717952
15:12:14.574    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS       145048 MB offset 328081408
15:12:14.602    Disk 0 scanning sectors +625139712
15:12:14.769    Disk 0 scanning C:\Windows\system32\drivers
15:12:44.236    Service scanning
15:13:22.244    Modules scanning
15:14:59.862    Disk 0 trace - called modules:
15:14:59.894    ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll storport.sys nvstor32.sys tcpip.sys NETIO.SYS 
15:14:59.899    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x861fbac8]
15:14:59.903    3 CLASSPNP.SYS[82b9a8b3] -> nt!IofCallDriver -> [0x849e04f0]
15:14:59.908    5 acpi.sys[82a936bc] -> nt!IofCallDriver -> \Device\0000006d[0x85862678]
15:15:00.579    AVAST engine scan C:\Windows
15:15:20.126    AVAST engine scan C:\Windows\system32
15:24:59.255    AVAST engine scan C:\Windows\system32\drivers
15:25:37.248    AVAST engine scan C:\Users\Falk
15:47:52.574    AVAST engine scan C:\ProgramData
15:52:48.065    Scan finished successfully
16:18:05.998    Disk 0 MBR has been saved successfully to "C:\Users\Falk\Desktop\MBR.dat"
16:18:06.003    The log file has been saved successfully to "C:\Users\Falk\Desktop\aswMBR.txt"

cosinus · 07.03.2012, 16:27

Ja das geht schnell. Der MBR ist ja auch nur 512 Byte groß

Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Esel03 · 07.03.2012, 23:53

So, nach n paar Stunden endlich fertig.

MalWareBytes

Code:

ATTFilter

 Malwarebytes Anti-Malware  (Test) 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.03.07.02

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 8.0.6001.19190
Falk :: FALK-PC [Administrator]

Schutz: Deaktiviert

07.03.2012 16:32:15
mbam-log-2012-03-07 (16-32-15).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 422348
Laufzeit: 3 Stunde(n), 13 Minute(n), 29 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Und SuperAntiSpyware, das ein ''paar'' Cookies gefunden hat

Code:

ATTFilter

 SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 03/07/2012 at 11:13 PM

Application Version : 5.0.1144

Core Rules Database Version : 8311
Trace Rules Database Version: 6123

Scan type       : Complete Scan
Total Scan Time : 03:09:42

Operating System Information
Windows Vista Home Premium 32-bit, Service Pack 2 (Build 6.00.6002)
UAC On - Limited User (Administrator User)

Memory items scanned      : 875
Memory threats detected   : 0
Registry items scanned    : 37894
Registry threats detected : 0
File items scanned        : 301243
File threats detected     : 528

Adware.Tracking Cookie
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\ZMD3GXHA.txt [ /mediaplex.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\59S1WZEU.txt [ /smartadserver.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\63UUZQ62.txt [ /ad.adc-serv.net ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\W7G9SULQ.txt [ /atwola.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\E7NXQ16U.txt [ /adtech.de ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\4XDTJT3A.txt [ /imrworldwide.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\9Y2GZKSQ.txt [ /unitymedia.de ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\3RBQY7JK.txt [ /adserv.kwick.de ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\QKKROWSQ.txt [ /revsci.net ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\84XFX7K9.txt [ /lanes.solution.weborama.fr ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\GT2EM572.txt [ /www.zanox-affiliate.de ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\1PI8YTVP.txt [ /ar.atwola.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\I477YBZ7.txt [ /ad4.adfarm1.adition.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\QAWM8CAI.txt [ /atdmt.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\F4286TGD.txt [ /ads.creative-serving.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\X24II5RL.txt [ /zanox.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\F3VJ3QXP.txt [ /adfarm1.adition.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\2KQP13T5.txt [ /serving-sys.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\PZFUP8C5.txt [ /yieldmanager.net ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\8OAG0GL4.txt [ /tacoda.at.atwola.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\GCU2N6C2.txt [ /www.traffective-tracking.net ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\8CLAWNZI.txt [ /fastclick.net ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\7FW4TLPR.txt [ /ad3.adfarm1.adition.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\0DGV617A.txt [ /weborama.fr ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\7EV9RSZ9.txt [ /apmebf.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\WDBC3DV3.txt [ /advertising.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\LQGLFTTD.txt [ /track.adform.net ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\2J2PV1RV.txt [ /ad.adserver01.de ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\5GBR2378.txt [ /c.atdmt.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\9QR7XSUJ.txt [ /ad.yieldmanager.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\BVEJ63NG.txt [ /at.atwola.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\E43BU46F.txt [ /bs.serving-sys.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\ZDQE0Q5N.txt [ /ad.dyntracker.de ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\MH83YMGU.txt [ /tracking.quisma.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\8WLHXT7N.txt [ /adform.net ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\L2S655AP.txt [ /webmasterplan.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\0PPVV5B7.txt [ /doubleclick.net ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\LFKJK3B9.txt [ /ad2.adfarm1.adition.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\TF5YSO9E.txt [ /invitemedia.com ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\2XZFEBNX.txt [ /ad.ad-srv.net ]
	C:\Users\Falk\AppData\Roaming\Microsoft\Windows\Cookies\G2J4B7ER.txt [ /zanox-affiliate.de ]
	C:\USERS\FALK\AppData\Roaming\Microsoft\Windows\Cookies\CRW2RD00.txt [ Cookie:falk@adsonar.com/adserving ]
	C:\USERS\FALK\AppData\Roaming\Microsoft\Windows\Cookies\Low\2YZYZZHG.txt [ Cookie:falk@2o7.net/ ]
	C:\USERS\FALK\AppData\Roaming\Microsoft\Windows\Cookies\Low\DHD4J7HY.txt [ Cookie:falk@doubleclick.net/ ]
	C:\USERS\FALK\Cookies\59S1WZEU.txt [ Cookie:falk@smartadserver.com/ ]
	C:\USERS\FALK\Cookies\W7G9SULQ.txt [ Cookie:falk@atwola.com/ ]
	C:\USERS\FALK\Cookies\E7NXQ16U.txt [ Cookie:falk@adtech.de/ ]
	C:\USERS\FALK\Cookies\4XDTJT3A.txt [ Cookie:falk@imrworldwide.com/cgi-bin ]
	C:\USERS\FALK\Cookies\3RBQY7JK.txt [ Cookie:falk@adserv.kwick.de/ ]
	C:\USERS\FALK\Cookies\QKKROWSQ.txt [ Cookie:falk@revsci.net/ ]
	C:\USERS\FALK\Cookies\84XFX7K9.txt [ Cookie:falk@lanes.solution.weborama.fr/ ]
	C:\USERS\FALK\Cookies\GT2EM572.txt [ Cookie:falk@www.zanox-affiliate.de/ ]
	C:\USERS\FALK\Cookies\1PI8YTVP.txt [ Cookie:falk@ar.atwola.com/ ]
	C:\USERS\FALK\Cookies\I477YBZ7.txt [ Cookie:falk@ad4.adfarm1.adition.com/ ]
	C:\USERS\FALK\Cookies\QAWM8CAI.txt [ Cookie:falk@atdmt.com/ ]
	C:\USERS\FALK\Cookies\X24II5RL.txt [ Cookie:falk@zanox.com/ ]
	C:\USERS\FALK\Cookies\CRW2RD00.txt [ Cookie:falk@adsonar.com/adserving ]
	C:\USERS\FALK\Cookies\F3VJ3QXP.txt [ Cookie:falk@adfarm1.adition.com/ ]
	C:\USERS\FALK\Cookies\2KQP13T5.txt [ Cookie:falk@serving-sys.com/ ]
	C:\USERS\FALK\Cookies\PZFUP8C5.txt [ Cookie:falk@yieldmanager.net/ ]
	C:\USERS\FALK\Cookies\GCU2N6C2.txt [ Cookie:falk@www.traffective-tracking.net/ ]
	C:\USERS\FALK\Cookies\8CLAWNZI.txt [ Cookie:falk@fastclick.net/ ]
	C:\USERS\FALK\Cookies\7FW4TLPR.txt [ Cookie:falk@ad3.adfarm1.adition.com/ ]
	C:\USERS\FALK\Cookies\0DGV617A.txt [ Cookie:falk@weborama.fr/ ]
	C:\USERS\FALK\Cookies\7EV9RSZ9.txt [ Cookie:falk@apmebf.com/ ]
	C:\USERS\FALK\Cookies\LQGLFTTD.txt [ Cookie:falk@track.adform.net/ ]
	C:\USERS\FALK\Cookies\2J2PV1RV.txt [ Cookie:falk@ad.adserver01.de/ ]
	C:\USERS\FALK\Cookies\5GBR2378.txt [ Cookie:falk@c.atdmt.com/ ]
	C:\USERS\FALK\Cookies\9QR7XSUJ.txt [ Cookie:falk@ad.yieldmanager.com/ ]
	C:\USERS\FALK\Cookies\BVEJ63NG.txt [ Cookie:falk@at.atwola.com/ ]
	C:\USERS\FALK\Cookies\E43BU46F.txt [ Cookie:falk@bs.serving-sys.com/ ]
	C:\USERS\FALK\Cookies\8WLHXT7N.txt [ Cookie:falk@adform.net/ ]
	C:\USERS\FALK\Cookies\L2S655AP.txt [ Cookie:falk@webmasterplan.com/ ]
	C:\USERS\FALK\Cookies\0PPVV5B7.txt [ Cookie:falk@doubleclick.net/ ]
	C:\USERS\FALK\Cookies\LFKJK3B9.txt [ Cookie:falk@ad2.adfarm1.adition.com/ ]
	C:\USERS\FALK\Cookies\TF5YSO9E.txt [ Cookie:falk@invitemedia.com/ ]
	.tracking.3gnet.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.kaspersky.122.2o7.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.youporn.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.pornrabbit.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.pornrabbit.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.traffichaus.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.ru4.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.pro-market.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	accounts.google.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.partypoker.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.eyewonder.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.eyewonder.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.specificclick.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.paypal.112.2o7.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.server.cpmstar.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ads.saymedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adserver.adtechus.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.adserver01.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	media.gan-online.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	media-mgmt.armorgames.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.yieldmanager.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.imrworldwide.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.imrworldwide.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.stats.complex.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.stats.complex.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.a.revenuemax.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.f.megaclick.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.f.megaclick.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.megaclick.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ads.247activemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.mmotraffic.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.mmotraffic.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.xiti.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.unrulymedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adxvalue.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.clickbank.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.clickbank.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.viacom.adbureau.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.viacom.adbureau.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	httptrack.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	adsrv1.admediate.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ads.adxvalue.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ads.adxvalue.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ads.adxvalue.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ads.adxvalue.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ads2.zeusclicks.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.amazon-adsystem.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.amazon-adsystem.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	de.sitestat.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.aim4media.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.ads.quartermedia.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.ads.quartermedia.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.ads.quartermedia.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.questionmarket.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.questionmarket.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	fl01.ct2.comclick.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.nextag.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.nextag.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	fl01.ct2.comclick.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	httptrack.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	httptrack.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	httptrack.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	httptrack.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.track.gridlockparadise.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.track.gridlockparadise.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.youporn.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.youporn.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.ad.adnet.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.bs.serving-sys.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ads3.net2day.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.adition.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.adition.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.traffictrack.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	adserver2.clipkit.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	httptrack.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	rts.pgmediaserve.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	rts.pgmediaserve.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	rts.pgmediaserve.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adultfriendfinder.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.girlsteachsex.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.adform.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.vipgamesnetwork.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adxpose.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.userporn.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.userporn.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.userporn.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.tldadserv.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.lfstmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.lfstmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.lfstmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	statsadv.dadapro.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.hightraffic.hugoboss.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.hightraffic.hugoboss.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.luroxmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.luroxmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.luroxmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.zanox.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.ad.adnet.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.ad.adnet.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.ad-emea.doubleclick.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.ad-emea.doubleclick.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.kontera.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.warnerbros.112.2o7.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	dc.tremormedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adxvalue.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adxvalue.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adxvalue.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adxvalue.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.247realmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.statcounter.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	7.rotator.wigetmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	7.rotator.wigetmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tracking.mindshare.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tacoda.at.atwola.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tacoda.at.atwola.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tacoda.at.atwola.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.at.atwola.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tacoda.at.atwola.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.ar.atwola.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.atwola.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	r2.unicornmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.liveperson.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.liveperson.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.at.atwola.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.liveperson.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ox-d.ad.repofadvertising.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.adform.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adform.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.mediamarkt.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.mediamarkt.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.mediamarkt.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.dyntracker.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tedi-discount.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tedi-discount.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tedi-discount.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.active-tracking.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.active-tracking.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.active-tracking.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	e2.emediate.se [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	e2.emediate.se [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.republicofadvertising.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	tracking.dc-storm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ww251.smartadserver.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.unitymedia.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	tracking.dc-storm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.ipcounter.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.usenext.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad4.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.overture.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adviva.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.dyntracker.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	pornografish.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.dyntracker.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad3.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	stats.computecmedia.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.lucidmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tribalfusion.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.ru4.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	track.solocpm.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.zanox-affiliate.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.zanox-affiliate.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.lfstmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	www.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	mediaservices-d.openxenterprise.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.profilebanner.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.exoclick.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.sexad.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.syndication.traffichaus.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ads.crakmedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.syndication.traffichaus.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.syndication.traffichaus.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.syndication.traffichaus.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adultfriendfinder.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adultfriendfinder.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adultfriendfinder.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adultfriendfinder.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adultfriendfinder.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.exoclick.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adultfriendfinder.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adultfriendfinder.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adultfriendfinder.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adxpansion.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	accounts.google.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	accounts.google.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.yadro.ru [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.yadro.ru [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.zanox.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.dyntracker.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.snapfish.112.2o7.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.traffictrack.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.advertising.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.zanox.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	statse.webtrendslive.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.fastclick.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad1.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad2.adfarm1.adition.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\FALK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\O93ROPM4.DEFAULT\COOKIES.SQLITE ]

cosinus · 08.03.2012, 00:28

Sieht ok aus, da wurden nur Cookies gefunden. Die können weg.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ist das System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Esel03 · 08.03.2012, 00:45

Es geht wieder deutlich besser ja

Probleme nicht weiter, Funde gabs auch nicht

Gibts noch irgendwas von deiner Seite aus?
Ansonsten bedanke ich mich für die Hilfe

07.03.2012, 16:27	#42
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Nach Trojaner Probleme mit Internet Videos Ja das geht schnell. Der MBR ist ja auch nur 512 Byte groß Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs. Denk dran beide Tools zu updaten vor dem Scan!! __________________ Logfiles bitte immer in CODE-Tags posten

Nach Trojaner Probleme mit Internet Videos

Log-Analyse und Auswertung: Nach Trojaner Probleme mit Internet Videos