|
Log-Analyse und Auswertung: Trojaner "System Check" - letzte Schritte?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
05.03.2012, 20:32 | #16 |
| Trojaner "System Check" - letzte Schritte? Hier der Log von GMER - OSAM folgt in Kürze ... GMER Logfile: Code:
ATTFilter GMER 1.0.15.15641 - hxxp://www.gmer.net Rootkit scan 2012-03-05 20:29:15 Windows 6.0.6001 Service Pack 1 Harddisk0\DR0 -> \Device\00000054 WDC_WD64 rev.05.0 Running: 8mnxkcc7.exe; Driver: C:\Users\mn\AppData\Local\Temp\pgldypoc.sys ---- System - GMER 1.0.15 ---- SSDT 8D3E96BC ZwCreateThread SSDT 8D3E96A8 ZwOpenProcess SSDT 8D3E96AD ZwOpenThread SSDT 8D3E96B7 ZwTerminateProcess ---- Kernel code sections - GMER 1.0.15 ---- .text ntkrnlpa.exe!KeSetTimerEx + 454 824CBA78 4 Bytes [BC, 96, 3E, 8D] .text ntkrnlpa.exe!KeSetTimerEx + 624 824CBC48 4 Bytes [A8, 96, 3E, 8D] .text ntkrnlpa.exe!KeSetTimerEx + 640 824CBC64 4 Bytes [AD, 96, 3E, 8D] .text ntkrnlpa.exe!KeSetTimerEx + 854 824CBE78 4 Bytes [B7, 96, 3E, 8D] .text C:\Windows\system32\DRIVERS\atikmdag.sys section is writeable [0x90C06000, 0x23097E, 0xE8000020] ? C:\Windows\system32\Drivers\PROCEXP113.SYS Das System kann die angegebene Datei nicht finden. ! ? C:\Users\mn\AppData\Local\Temp\catchme.sys Das System kann die angegebene Datei nicht finden. ! ---- User IAT/EAT - GMER 1.0.15 ---- IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdiplusShutdown] [74D08864] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipCloneImage] [74D49855] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipDrawImageRectI] [74D0B984] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipSetInterpolationMode] [74CFFB47] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdiplusStartup] [74D07A29] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipCreateFromHDC] [74CFEA65] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipCreateBitmapFromStreamICM] [74D3B12D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipCreateBitmapFromStream] [74D0BC4A] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipGetImageHeight] [74D00756] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipGetImageWidth] [74D006BD] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipDisposeImage] [74CF71B3] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipLoadImageFromFileICM] [74D8D9E0] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipLoadImageFromFile] [74D27329] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipDeleteGraphics] [74CFE109] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipFree] [74CF697E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipAlloc] [74CF69A9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\explorer.exe[1168] @ C:\Windows\explorer.exe [gdiplus.dll!GdipSetCompositingMode] [74D02475] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) ---- Devices - GMER 1.0.15 ---- AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation) ---- EOF - GMER 1.0.15 ---- So, und hier der von OSAM OSAM Logfile: Code:
ATTFilter Report of OSAM: Autorun Manager v5.0.11926.0 hxxp://www.online-solutions.ru/en/ Saved at 20:41:04 on 05.03.2012 OS: Windows Vista Home Premium Edition Service Pack 1 (Build 6001), 32-bit Default Browser: Mozilla Corporation Firefox 9.0.1 Scanner Settings [x] Rootkits detection (hidden registry) [x] Rootkits detection (hidden files) [x] Retrieve files information [x] Check Microsoft signatures Filters [ ] Trusted entries [ ] Empty entries [x] Hidden registry entries (rootkit activity) [x] Exclusively opened files [x] Not found files [x] Files without detailed information [x] Existing files [ ] Non-startable services [ ] Non-startable drivers [x] Active entries [x] Disabled entries [Common] -----( %SystemRoot%\Tasks )----- "GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe "GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe "MT66 Software Update.job" - "MedienTeam66" - C:\Program Files\Common Files\MT66 Software Update\UpdateClient.exe [Control Panel Objects] -----( %SystemRoot%\system32 )----- "FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\Windows\system32\FlashPlayerCPLApp.cpl "ISUSPM.cpl" - "Macrovision Corporation" - C:\Windows\system32\ISUSPM.cpl "odbccp32.cpl" - "Microsoft Corporation" - C:\Windows\system32\odbccp32.cpl [Drivers] -----( HKLM\SYSTEM\CurrentControlSet\Services )----- "adfs" (adfs) - "Adobe Systems, Inc." - C:\Windows\system32\drivers\adfs.sys "avgio" (avgio) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avgio.sys "avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys "avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys "catchme" (catchme) - ? - C:\Users\mn\AppData\Local\Temp\catchme.sys (File not found) "Dynamically loaded UxdDrv" (uxddrv) - ? - I:\DIAGNOSE\WSTGER32\2PART\uxddrv86.sys (File not found) "HPFXBULK" (HPFXBULK) - "Hewlett Packard" - C:\Windows\System32\drivers\hpfxbulk.sys "IP in IP Tunnel Driver" (IpInIp) - ? - C:\Windows\System32\DRIVERS\ipinip.sys (File not found) "IPX Traffic Filter Driver" (NwlnkFlt) - ? - C:\Windows\System32\DRIVERS\nwlnkflt.sys (File not found) "IPX Traffic Forwarder Driver" (NwlnkFwd) - ? - C:\Windows\System32\DRIVERS\nwlnkfwd.sys (File not found) "MBAMProtector" (MBAMProtector) - "Malwarebytes Corporation" - C:\Windows\system32\drivers\mbam.sys "PxHelp20" (PxHelp20) - "Sonic Solutions" - C:\Windows\System32\Drivers\PxHelp20.sys "ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys [Explorer] -----( HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )----- {63560240-BB5D-4F81-B0B9-AEBEA2FE3DD5} "Shell Extension for High-Logic FontCreator" - "High-Logic" - C:\PROGRA~1\HIGH-L~1\FONTCR~1\FONTCR~1.DLL -----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )----- {F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll -----( HKLM\Software\Classes\Protocols\Filter )----- {807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL -----( HKLM\Software\Classes\Protocols\Handler )----- {314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL {0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )----- {911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? - (File not found | COM-object registry key not found) {1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? - (File not found | COM-object registry key not found) {34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? - (File not found | COM-object registry key not found) {0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? - (File not found | COM-object registry key not found) {2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? - (File not found | COM-object registry key not found) {00020d75-0000-0000-c000-000000000046} "lnkfile" - ? - (File not found | COM-object registry key not found) {42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll {993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll {5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONFILTER.DLL {C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll {97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2} "NeroCoverEdLiveIcons Class" - "Nero AG" - C:\Program Files\Nero\Nero8\Nero CoverDesigner\CoverEdExtension.dll {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? - (File not found | COM-object registry key not found) {E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? - (File not found | COM-object registry key not found) {45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll {5E2121EE-0300-11D4-8D3B-444553540000} "SimpleShlExt Class" - "Advanced Micro Devices, Inc." - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll {52B87208-9CCF-42C9-B88E-069281105805} "Trojan Remover Shell Extension" - ? - (File not found | COM-object registry key not found) {da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? - (File not found | COM-object registry key not found) {B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - ? - C:\Program Files\WinRAR\rarext.dll [Internet Explorer] -----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Extensions )----- "eBay - Der weltweite Online-Marktplatz" - ? - hxxp://rover.ebay.com/rover/1/707-37276-17534-15/4 (HTTP value) -----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )----- <binary data> "ITBar7Layout" - ? - (File not found | COM-object registry key not found) -----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )----- {8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_27" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} "Java Plug-in 1.6.0_27" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_27" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_27.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab {233C1507-6A77-46A4-9443-F871F945D258} "Shockwave ActiveX Control" - "Adobe Systems, Inc." - C:\Windows\System32\Adobe\Director\SwDir.dll / hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} "{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}" - ? - (File not found | COM-object registry key not found) / hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab -----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )----- {48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll "eBay - Der weltweite Online-Marktplatz" - ? - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4 (HTTP value) {FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )----- {18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll {DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll [Logon] -----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )----- "desktop.ini" - ? - C:\Users\mn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini -----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )----- "desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini -----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )----- "StartupPrograms" - ? - rdpclip (File not found) -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )----- "Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" "AdobeCS4ServiceManager" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin "avgnt" - "Avira GmbH" - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min "Malwarebytes' Anti-Malware" - "Malwarebytes Corporation" - "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray "SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [Network Providers] -----( HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order )----- "Adobe Drive CS4 Network" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll [Print Monitors] -----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )----- "HP Standard TCP/IP Port" - "Hewlett Packard" - C:\Windows\system32\HpTcpMon.dll "PDFCreator" - ? - C:\Windows\system32\pdfcmnnt.dll (File found, but it contains no detailed information) "Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\Windows\system32\msonpmon.dll [Services] -----( HKLM\SYSTEM\CurrentControlSet\Services )----- "Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe "Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\sched.exe "FLEXnet Licensing Service" (FLEXnet Licensing Service) - "Acresso Software Inc." - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe "Google Update Service (gupdate)" (gupdate) - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe "Google Update-Dienst (gupdatem)" (gupdatem) - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe "HP CUE DeviceDiscovery Service" (hpqddsvc) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll "hpqcxs08" (hpqcxs08) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll "MBAMService" (MBAMService) - "Malwarebytes Corporation" - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe "Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE "Nero BackItUp Scheduler 3" (Nero BackItUp Scheduler 3) - "Nero AG" - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe "Net Driver HPZ12" (Net Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZinw12.dll "NMIndexingService" (NMIndexingService) - "Nero AG" - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe "Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE "PLFlash DeviceIoControl Service" (PLFlash DeviceIoControl Service) - "Prolific Technology Inc." - C:\Windows\system32\IoctlSvc.exe "Pml Driver HPZ12" (Pml Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZipm12.dll ===[ Logfile end ]=========================================[ Logfile end ]=== If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru [/code] Geändert von wrimpus (05.03.2012 um 20:42 Uhr) |
05.03.2012, 21:42 | #17 |
| Trojaner "System Check" - letzte Schritte? und hier Nr. 3
__________________Code:
ATTFilter aswMBR version 0.9.9.1649 Copyright(c) 2011 AVAST Software Run date: 2012-03-05 20:43:23 ----------------------------- 20:43:23.727 OS Version: Windows 6.0.6001 Service Pack 1 20:43:23.727 Number of processors: 2 586 0x203 20:43:23.727 ComputerName: MN-PC UserName: mn 20:43:50.466 Initialize success 20:45:05.647 AVAST engine defs: 12030501 20:45:58.313 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000055 20:45:58.313 Disk 0 Vendor: WDC_WD64 05.0 Size: 610480MB BusType: 8 20:45:58.328 Disk 0 MBR read successfully 20:45:58.328 Disk 0 MBR scan 20:45:58.328 Disk 0 Windows VISTA default MBR code 20:45:58.344 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 589993 MB offset 2048 20:45:58.344 Disk 0 Partition - 00 0F Extended LBA 20483 MB offset 1208307712 20:45:58.375 Disk 0 Partition 2 00 0B FAT32 MSDOS5.0 20483 MB offset 1208307775 20:45:58.375 Disk 0 scanning sectors +1250258625 20:45:58.453 Disk 0 scanning C:\Windows\system32\drivers 20:46:06.674 Service scanning 20:46:22.976 Modules scanning 20:46:26.252 Disk 0 trace - called modules: 20:46:26.908 ntkrnlpa.exe CLASSPNP.SYS disk.sys storport.sys hal.dll ahcix86s.sys USBPORT.SYS usbehci.sys PxHelp20.sys dxgkrnl.sys atikmdag.sys USBSTOR.SYS acpi.sys usbhub.sys tcpip.sys NETIO.SYS watchdog.sys HDAudBus.sys processr.sys rassstp.sys usbo 20:46:26.908 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x86e52ac8] 20:46:26.908 3 CLASSPNP.SYS[8b3aa745] -> nt!IofCallDriver -> \Device\00000055[0x85d998f0] 20:46:26.923 5 CLASSPNP.SYS[8b3a925e] -> nt!IofCallDriver -> [0x87a1c018] 20:46:26.923 7 PxHelp20.sys[82b7e773] -> nt!IofCallDriver -> \Device\00000054[0x85d99c90] 20:46:26.939 9 USBSTOR.SYS[918e5dd6] -> nt!IofCallDriver -> [0x88333198] 20:46:26.939 11 acpi.sys[82a116a0] -> nt!IofCallDriver -> \Device\USBPDO-7[0x88290030] 20:46:26.954 13 usbhub.sys[9180de67] -> nt!IofCallDriver -> [0x87dd9c10] 20:46:26.954 15 acpi.sys[82a116a0] -> nt!IofCallDriver -> \Device\USBPDO-2[0x87438028] 20:46:26.970 17 USBSTOR.SYS[918e5dd6] -> nt!IofCallDriver -> [0x88333198] 20:46:26.970 19 acpi.sys[82a116a0] -> nt!IofCallDriver -> \Device\USBPDO-7[0x88290030] 20:46:26.970 21 usbhub.sys[9180de67] -> nt!IofCallDriver -> [0x87dd9c10] 20:46:26.986 23 acpi.sys[82a116a0] -> nt!IofCallDriver -> \Device\USBPDO-2[0x87438028] 20:46:26.986 25 USBSTOR.SYS[918e5dd6] -> nt!IofCallDriver -> [0x88333198] 20:46:26.986 27 acpi.sys[82a116a0] -> nt!IofCallDriver -> \Device\USBPDO-7[0x88290030] 20:46:27.001 29 usbhub.sys[9180de67] -> nt!IofCallDriver -> [0x87dd9c10] 20:46:27.001 31 acpi.sys[82a116a0] -> nt!IofCallDriver -> \Device\USBPDO-2[0x87438028] 20:46:27.017 33 USBSTOR.SYS[918e5dd6] -> nt!IofCallDriver -> [0x88333198] 20:46:27.017 35 acpi.sys[82a116a0] -> nt!IofCallDriver -> \Device\USBPDO-7[0x88290030] 20:46:27.017 37 usbhub.sys[9180de67] -> nt!IofCallDriver -> [0x87dd9c10] 20:46:27.032 39 acpi.sys[82a116a0] -> nt!IofCallDriver -> \Device\USBPDO-2[0x87438028] 20:46:27.032 41 USBSTOR.SYS[918e5dd6] -> nt!IofCallDriver -> [0x88333198] 20:46:27.032 43 acpi.sys[82a116a0] -> nt!IofCallDriver -> \Device\USBPDO-7[0x88290030] 20:46:27.048 45 usbhub.sys[9180de67] -> nt!IofCallDriver -> [0x87dd9c10] 20:46:27.048 47 acpi.sys[82a116a0] -> nt!IofCallDriver -> \Device\USBPDO-2[0x87438028] 20:46:27.048 49 USBSTOR.SYS[918e5dd6] -> nt!IofCallDriver -> [0x88333198] 20:46:27.048 51 acpi.sys[82a116a0] -> nt!IofCallDriver -> \Device\USBPDO-7[0x88290030] 20:46:27.064 53 usbhub.sys[9180de67] -> nt!IofCallDriver -> [0x87dd9c10] 20:46:27.064 55 acpi.sys[82a116a0] -> nt!IofCallDriver -> \Device\USBPDO-2[0x87438028] 20:46:29.014 AVAST engine scan C:\Windows 20:46:33.506 AVAST engine scan C:\Windows\system32 20:49:31.503 AVAST engine scan C:\Windows\system32\drivers 20:49:47.291 AVAST engine scan C:\Users\mn 21:32:07.532 AVAST engine scan C:\ProgramData 21:38:12.198 Scan finished successfully 21:39:39.417 Disk 0 MBR has been saved successfully to "C:\Users\mn\Desktop\MBR.dat" 21:39:39.433 The log file has been saved successfully to "C:\Users\mn\Desktop\aswMBR.txt" |
06.03.2012, 11:44 | #18 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Trojaner "System Check" - letzte Schritte? Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
__________________Denk dran beide Tools zu updaten vor dem Scan!!
__________________ |
06.03.2012, 14:04 | #19 |
| Trojaner "System Check" - letzte Schritte? Hier der Log von Malwarebytes: Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.60.1.1000 www.malwarebytes.org Datenbank Version: v2012.03.06.04 Windows Vista Service Pack 1 x86 NTFS Internet Explorer 7.0.6001.18000 mn :: MN-PC [Administrator] Schutz: Aktiviert 06.03.2012 13:04:15 mbam-log-2012-03-06 (13-04-15).txt Art des Suchlaufs: Vollständiger Suchlauf Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 377985 Laufzeit: 56 Minute(n), 45 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) |
06.03.2012, 16:25 | #20 |
| Trojaner "System Check" - letzte Schritte? Und hier der von SuperAntiSpyware: Code:
ATTFilter SUPERAntiSpyware Scan Log hxxp://www.superantispyware.com Generated 03/06/2012 at 04:02 PM Application Version : 5.0.1144 Core Rules Database Version : 8306 Trace Rules Database Version: 6118 Scan type : Complete Scan Total Scan Time : 01:52:25 Operating System Information Windows Vista Home Premium 32-bit, Service Pack 1 (Build 6.00.6001) UAC On - Administrator Memory items scanned : 632 Memory threats detected : 0 Registry items scanned : 35576 Registry threats detected : 0 File items scanned : 233410 File threats detected : 472 Adware.Tracking Cookie C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@a3.adserver01[1].txt [ /a3.adserver01 ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@ad.71i[1].txt [ /ad.71i ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@ad.adition[1].txt [ /ad.adition ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@ad.adnet[1].txt [ /ad.adnet ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@ad.yieldmanager[2].txt [ /ad.yieldmanager ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@ad.zanox[2].txt [ /ad.zanox ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@adfarm1.adition[1].txt [ /adfarm1.adition ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@adredirect.zattoo[2].txt [ /adredirect.zattoo ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@ads.heias[1].txt [ /ads.heias ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@adtech[2].txt [ /adtech ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@advertising[2].txt [ /advertising ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@adx.chip[2].txt [ /adx.chip ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@apmebf[1].txt [ /apmebf ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@atdmt[2].txt [ /atdmt ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@atwola[1].txt [ /atwola ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@bluestreak[2].txt [ /bluestreak ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@bs.serving-sys[2].txt [ /bs.serving-sys ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@collective-media[1].txt [ /collective-media ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@doubleclick[1].txt [ /doubleclick ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@fastclick[1].txt [ /fastclick ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@mediaplex[2].txt [ /mediaplex ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@questionmarket[2].txt [ /questionmarket ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@roiservice[1].txt [ /roiservice ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@serving-sys[1].txt [ /serving-sys ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@smartadserver[2].txt [ /smartadserver ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@track.webtrekk[1].txt [ /track.webtrekk ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@tracking.quisma[1].txt [ /tracking.quisma ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@tradedoubler[1].txt [ /tradedoubler ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@traffictrack[1].txt [ /traffictrack ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@tto2.traffictrack[1].txt [ /tto2.traffictrack ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@webmasterplan[2].txt [ /webmasterplan ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@www.etracker[1].txt [ /www.etracker ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@www.zanox-affiliate[1].txt [ /www.zanox-affiliate ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@zanox-affiliate[2].txt [ /zanox-affiliate ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@zanox[1].txt [ /zanox ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@de.sitestat[1].txt [ /de.sitestat.com ] C:\Users\mn\AppData\Roaming\Microsoft\Windows\Cookies\mn@de.sitestat[2].txt [ /de.sitestat.com ] C:\USERS\MN\AppData\Roaming\Microsoft\Windows\Cookies\Low\mn@adfarm1.adition[1].txt [ Cookie:mn@adfarm1.adition.com/ ] C:\USERS\MN\AppData\Roaming\Microsoft\Windows\Cookies\Low\mn@tradedoubler[1].txt [ Cookie:mn@tradedoubler.com/ ] C:\USERS\MN\Cookies\mn@advertising[2].txt [ Cookie:mn@advertising.com/ ] C:\USERS\MN\Cookies\mn@bs.serving-sys[2].txt [ Cookie:mn@bs.serving-sys.com/ ] C:\USERS\MN\Cookies\mn@zanox-affiliate[2].txt [ Cookie:mn@zanox-affiliate.de/ ] C:\USERS\MN\Cookies\mn@tto2.traffictrack[1].txt [ Cookie:mn@tto2.traffictrack.de/ ] C:\USERS\MN\Cookies\mn@zanox[1].txt [ Cookie:mn@zanox.com/ ] C:\USERS\MN\Cookies\mn@bluestreak[2].txt [ Cookie:mn@bluestreak.com/ ] C:\USERS\MN\Cookies\mn@apmebf[1].txt [ Cookie:mn@apmebf.com/ ] C:\USERS\MN\Cookies\mn@mediaplex[2].txt [ Cookie:mn@mediaplex.com/ ] C:\USERS\MN\Cookies\mn@ad.adition[1].txt [ Cookie:mn@ad.adition.net/ ] C:\USERS\MN\Cookies\mn@atwola[1].txt [ Cookie:mn@atwola.com/ ] C:\USERS\MN\Cookies\mn@tracking.quisma[1].txt [ Cookie:mn@tracking.quisma.com/ ] C:\USERS\MN\Cookies\mn@serving-sys[1].txt [ Cookie:mn@serving-sys.com/ ] C:\USERS\MN\Cookies\mn@adfarm1.adition[1].txt [ Cookie:mn@adfarm1.adition.com/ ] C:\USERS\MN\Cookies\mn@traffictrack[1].txt [ Cookie:mn@traffictrack.de/ ] C:\USERS\MN\Cookies\mn@de.sitestat[1].txt [ Cookie:mn@de.sitestat.com/tcook/condor/ ] C:\USERS\MN\Cookies\mn@ad.yieldmanager[2].txt [ Cookie:mn@ad.yieldmanager.com/ ] C:\USERS\MN\Cookies\mn@ad.zanox[2].txt [ Cookie:mn@ad.zanox.com/ ] C:\USERS\MN\Cookies\mn@a3.adserver01[1].txt [ Cookie:mn@a3.adserver01.de/ ] C:\USERS\MN\Cookies\mn@tradedoubler[1].txt [ Cookie:mn@tradedoubler.com/ ] C:\USERS\MN\Cookies\mn@atdmt[2].txt [ Cookie:mn@atdmt.com/ ] C:\USERS\MN\Cookies\mn@questionmarket[2].txt [ Cookie:mn@questionmarket.com/ ] C:\USERS\MN\Cookies\mn@webmasterplan[2].txt [ Cookie:mn@webmasterplan.com/ ] C:\USERS\MN\Cookies\mn@adredirect.zattoo[2].txt [ Cookie:mn@adredirect.zattoo.com/ ] C:\USERS\MN\Cookies\mn@de.sitestat[2].txt [ Cookie:mn@de.sitestat.com/tcook/ ] C:\USERS\MN\Cookies\mn@fastclick[1].txt [ Cookie:mn@fastclick.net/ ] C:\USERS\MN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\MN@ADTECH[1].TXT [ /ADTECH ] C:\USERS\MN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\MN@DOUBLECLICK[1].TXT [ /DOUBLECLICK ] C:\USERS\MN\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\MN@WW251.SMARTADSERVER[1].TXT [ /WW251.SMARTADSERVER ] de.sitestat.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .4stats.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .4stats.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .atdmt.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] track.webtrekk.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .specificclick.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .imrworldwide.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .imrworldwide.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] eas4.emediate.eu [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tracking.umg-cms.eu [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tracking.umg-cms.eu [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] fl01.ct2.comclick.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .viacom.adbureau.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .viacom.adbureau.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] adserv.quality-channel.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .a.revenuemax.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .apmebf.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adinterax.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] adserver.yopi.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .getclicky.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .static.getclicky.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] in.getclicky.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .aok.122.2o7.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .unstats.un.org [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .unstats.un.org [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .worldmapfinder.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .worldmapfinder.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] studivz.adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] studivz.adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .4stats.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .4stats.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .youporn.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .legolas-media.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .legolas-media.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adinterax.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .system.medianac.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .system.medianac.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] track.effiliation.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .guj.122.2o7.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adserver.adtechus.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] wstat.wibiya.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tivoli.112.2o7.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .deutschepostag.112.2o7.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adxpose.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .amazon-adsystem.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] eas4.emediate.eu [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .yieldmanager.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .amazon-adsystem.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ads.adxvalue.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] fl01.ct2.comclick.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] fl01.ct2.comclick.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] banner.holidaycheck.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .2o7.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adviva.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .ceramex-media.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .ceramex-media.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] track.webtrekk.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .wissende.122.2o7.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .xiti.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .eyewonder.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.adserver01.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] adserver.icmedienhaus.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] adserver.ep-solutions.org [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .passende-gedichte-finden.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .passende-gedichte-finden.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .pro-market.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] eas4.emediate.eu [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .elitepartner.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .eyewonder.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] accounts.google.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] tracking.sim-technik.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .weborama.fr [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .lanes.solution.weborama.fr [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adxvalue.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adxvalue.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adbrite.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adbrite.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.zanox.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] tradefx.advertserve.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .unrulymedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .c.gigcount.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adxvalue.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .eyewonder.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .eyewonder.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .files.bannersnack.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .files.bannersnack.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .overture.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .overture.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .komtrack.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .komtrack.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] track.effiliation.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .paypal.112.2o7.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .traffictrack.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tto2.traffictrack.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.traffective-tracking.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.traffective-tracking.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tracking.mindshare.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ec-track.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .yadro.ru [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .hightraffic.hugoboss.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] server.adform.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] server.adform.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .at.atwola.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adxvalue.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .questionmarket.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .questionmarket.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.zanox-affiliate.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .urbia.wwe-media.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] tracking.tchibo.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] track.adform.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tribalfusion.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] tracking.quisma.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .atdmt.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .c.atdmt.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .c.atdmt.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .ads.quartermedia.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.active-tracking.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.active-tracking.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.active-tracking.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .clickfuse.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adbrite.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .apmebf.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .youporn.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .youporn.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .lfstmedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] adserver1.mokono.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] edates.traffective-tracking.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] edates.traffective-tracking.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] edates.traffective-tracking.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] edates.traffective-tracking.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .aerlingus.122.2o7.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .media6degrees.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] oasc-eu1.247realmedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adtech.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .zanox-affiliate.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.dyntracker.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] stat.dealtime.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .dealtime.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .lokalportal24de.112.2o7.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .nextag.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .nextag.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .nextag.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .nextag.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .nextag.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .nextag.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.mediabistro.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .w3counter.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] s0.2mdn.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .icompetence.122.2o7.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .ad.adnet.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] statse.webtrendslive.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad1.adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad4.adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .nextag.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .bs.serving-sys.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .bs.serving-sys.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .dyntracker.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .statcounter.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] track.adform.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adform.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] adserver.zeichensetzen.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] adx.chip.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] adx.chip.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] adx.chip.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .ads20.wwe-media.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .media6degrees.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .media6degrees.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .media6degrees.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.zanox.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .zanox.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .im.banner.t-online.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .clickfuse.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .ad.adnet.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .ad.adnet.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .invitemedia.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .webmasterplan.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tradedoubler.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .traffictrack.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] eas.apm.emediate.eu [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad.yieldmanager.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ww251.smartadserver.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .fastclick.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad2.adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] ad3.adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] adfarm1.adition.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .unitymedia.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .unitymedia.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .tracking.quisma.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] de.sitestat.com [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] www.etracker.de [ C:\USERS\MN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\43PUV1LI.DEFAULT\COOKIES.SQLITE ] Trojan.Agent/Gen-FakeAV C:\PROGRAM FILES\WINRAR\DEFAULT.SFX |
06.03.2012, 20:02 | #21 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Trojaner "System Check" - letzte Schritte? Sieht ok aus, da wurden nur Cookies gefunden. Die können weg. Und ein Fehlalarm war dabei. Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie ) Ist das System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?
__________________ --> Trojaner "System Check" - letzte Schritte? |
06.03.2012, 22:12 | #22 |
| Trojaner "System Check" - letzte Schritte? Alles klar, vielen Dank! Das System ist sonst wieder wunderbar in Ordnung (mein Desktop-Hintergrund ist weg, aber das ist egal). Empfiehlst du, die ganzen Scan-Programme nun wieder zu deinstallieren und kann ich die Logs etc. löschen? |
07.03.2012, 00:24 | #23 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Trojaner "System Check" - letzte Schritte? Dann wären wir durch! Die Programme, die hier zum Einsatz kamen, können alle wieder runter. CF kann über Start, Ausführen mit combofix /uninstall entfernt werden. Melde dich falls es da Fehlermeldungen zu gibt. Malwarebytes zu behalten ist kein Fehler. Kannst ja 1x im Monat damit scannen, aber immer vorher ans Update denken. Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden. Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern. Microsoftupdate Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren. Windows Vista/7: Anleitung Windows-Update PDF-Reader aktualisieren Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast) Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader. Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers: Adobe - Andere Version des Adobe Flash Player installieren Notfalls kann man auch von Chip.de runterladen => http://filepony.de/?q=Flash+Player Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind. Java-Update Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.
__________________ Logfiles bitte immer in CODE-Tags posten |
12.03.2012, 13:34 | #24 |
| Trojaner "System Check" - letzte Schritte? etwas verspätet, aber nicht minder herzlich: Vielen, vielen Dank für die Hilfe! |
Themen zu Trojaner "System Check" - letzte Schritte? |
check, desktop, entfern, eset-online, funde, hilfe!, laufe, laufen, leer, log, malwarebytes, scan, schritte, schwarz, system, system check, troja, trojaner, was tun, zunächst |