| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware????Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
15.07.2012, 18:28
| #1 |
 |  Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? Hallo zusammen, ich habe mir gestern Security Shield eingefangen. Wo ich das her habe, kann ich leider nicht sagen. Gemerkt habe ich es dadurch, dass ständig ein Fenster aufging, das mich auf meinen "verseuchten Laptop" aufmerksam machte. Konnte das Fenster immer wieder wegklicken, aber irgendwann nervte es, so fing ich an zu googeln und habe dann schnell festgestellt, dass es sich um Malware handelt. Habe mir dann auf dieser Seite Malwarebytes Anti-Malware runtergeladen und über den Rechner laufen lassen. Danach war Security Shield weg. Vorsichtig geworden durch die vielen Beiträge hier, bin ich nun doch verunsichert, ob das böse Ding tatsächlich weg ist, oder noch irgendwo vor sich hinschlummert???? Könnt ihr mir bitte weiterhelfen?? Habe leider nicht so viel Ahnung vom PC, bin eher so der Anwender, aber versuche nun nach euren Schritten vorzugehen und hoffe, dass das alles so klappt. Anbei die beiden Textdokumente von OTL. Übrigens ich habe einen Laptop Betriebssystem Windows 7 Vielen Dank im voraus für jede Hilfe! Gabi Hier der OTL.txt Geändert von Gabi_66 (15.07.2012 um 18:34 Uhr) |
|
16.07.2012, 21:33
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? Ohne die Logs von Malwarebytes und Co wird das hier nichts.
__________________ Alles von Malwarebytes (und evtl. anderen Scannern) muss hier gepostet werden. Bitte alles nach Möglichkeit hier in CODE-Tags posten. Wird so gemacht: [code] hier steht das Log [/code] Und das ganze sieht dann so aus: Code:
ATTFilter hier steht das Log
__________________ |
|
17.07.2012, 15:43
| #3 |
| | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? Hallo,
__________________hier nun die Logs von Malwarebytes bevor Security Shield entfernt wurde und danach, außerdem habe ich eben mein Avira drüber laufen lassen und der hat jetzt einen neuen Trojaner gefunden TR/Winwebsec.zruen und in Quarantäne geschoben, Log füge ich auch bei. Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.62.0.1300 www.malwarebytes.org Datenbank Version: v2012.07.14.07 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 *** :: ***-PC [Administrator] Schutz: Aktiviert 14.07.2012 21:51:26 mbam-log-2012-07-14 (21-51-26).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 270164 Laufzeit: 3 Minute(n), 14 Sekunde(n) Infizierte Speicherprozesse: 1 C:\Users\***\AppData\Local\zgauo.exe (Trojan.Lameshield) -> 4832 -> Löschen bei Neustart. Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 2 C:\Users\***\AppData\Local\zgauo.exe (Trojan.Lameshield) -> Löschen bei Neustart. C:\Users\***\Downloads\SoftonicDownloader_fuer_pc-inspector-smart-recovery.exe (PUP.BundleOffer.Downloader.S) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Log nachdem Security Shield entfernt wurde: Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.62.0.1300 www.malwarebytes.org Datenbank Version: v2012.07.16.08 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 *** :: ***-PC [Administrator] Schutz: Aktiviert 16.07.2012 17:32:39 mbam-log-2012-07-16 (17-32-39).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 38759 Laufzeit: 40 Sekunde(n) [Abgebrochen] Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Log von Avira heute nachmittag: Code:
ATTFilter
Avira Free Antivirus
Erstellungsdatum der Reportdatei: Dienstag, 17. Juli 2012 13:46
Es wird nach 3881246 Virenstämmen gesucht.
Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.
Lizenznehmer : Avira AntiVir Personal - Free Antivirus
Seriennummer : 0000149996-ADJIE-0000001
Plattform : Windows 7 Home Premium
Windowsversion : (Service Pack 1) [6.1.7601]
Boot Modus : Normal gebootet
Benutzername : ***
Computername : ***-PC
Versionsinformationen:
BUILD.DAT : 12.0.0.1125 41829 Bytes 02.05.2012 16:34:00
AVSCAN.EXE : 12.3.0.15 466896 Bytes 08.05.2012 11:00:18
AVSCAN.DLL : 12.3.0.15 66256 Bytes 08.05.2012 11:00:18
LUKE.DLL : 12.3.0.15 68304 Bytes 08.05.2012 11:00:19
AVSCPLR.DLL : 12.3.0.14 97032 Bytes 08.05.2012 11:00:19
AVREG.DLL : 12.3.0.17 232200 Bytes 12.05.2012 11:04:51
VBASE000.VDF : 7.10.0.0 19875328 Bytes 06.11.2009 18:18:34
VBASE001.VDF : 7.11.0.0 13342208 Bytes 14.12.2010 09:07:39
VBASE002.VDF : 7.11.19.170 14374912 Bytes 20.12.2011 08:37:42
VBASE003.VDF : 7.11.21.238 4472832 Bytes 01.02.2012 15:00:30
VBASE004.VDF : 7.11.26.44 4329472 Bytes 28.03.2012 16:32:00
VBASE005.VDF : 7.11.34.116 4034048 Bytes 29.06.2012 21:07:35
VBASE006.VDF : 7.11.34.117 2048 Bytes 29.06.2012 21:07:35
VBASE007.VDF : 7.11.34.118 2048 Bytes 29.06.2012 21:07:35
VBASE008.VDF : 7.11.34.119 2048 Bytes 29.06.2012 21:07:35
VBASE009.VDF : 7.11.34.120 2048 Bytes 29.06.2012 21:07:35
VBASE010.VDF : 7.11.34.121 2048 Bytes 29.06.2012 21:07:35
VBASE011.VDF : 7.11.34.122 2048 Bytes 29.06.2012 21:07:35
VBASE012.VDF : 7.11.34.123 2048 Bytes 29.06.2012 21:07:35
VBASE013.VDF : 7.11.34.124 2048 Bytes 29.06.2012 21:07:35
VBASE014.VDF : 7.11.34.201 169472 Bytes 02.07.2012 21:07:36
VBASE015.VDF : 7.11.35.19 122368 Bytes 04.07.2012 14:32:44
VBASE016.VDF : 7.11.35.87 146944 Bytes 06.07.2012 14:32:45
VBASE017.VDF : 7.11.35.143 126464 Bytes 09.07.2012 14:32:46
VBASE018.VDF : 7.11.35.235 151552 Bytes 12.07.2012 17:15:44
VBASE019.VDF : 7.11.36.45 118784 Bytes 13.07.2012 17:15:44
VBASE020.VDF : 7.11.36.107 123904 Bytes 16.07.2012 11:44:34
VBASE021.VDF : 7.11.36.108 2048 Bytes 16.07.2012 11:44:35
VBASE022.VDF : 7.11.36.109 2048 Bytes 16.07.2012 11:44:35
VBASE023.VDF : 7.11.36.110 2048 Bytes 16.07.2012 11:44:35
VBASE024.VDF : 7.11.36.111 2048 Bytes 16.07.2012 11:44:35
VBASE025.VDF : 7.11.36.112 2048 Bytes 16.07.2012 11:44:35
VBASE026.VDF : 7.11.36.113 2048 Bytes 16.07.2012 11:44:35
VBASE027.VDF : 7.11.36.114 2048 Bytes 16.07.2012 11:44:36
VBASE028.VDF : 7.11.36.115 2048 Bytes 16.07.2012 11:44:36
VBASE029.VDF : 7.11.36.116 2048 Bytes 16.07.2012 11:44:36
VBASE030.VDF : 7.11.36.117 2048 Bytes 16.07.2012 11:44:36
VBASE031.VDF : 7.11.36.132 46080 Bytes 17.07.2012 11:44:37
Engineversion : 8.2.10.114
AEVDF.DLL : 8.1.2.10 102772 Bytes 10.07.2012 14:33:03
AESCRIPT.DLL : 8.1.4.32 455034 Bytes 10.07.2012 14:33:03
AESCN.DLL : 8.1.8.2 131444 Bytes 27.01.2012 09:41:59
AESBX.DLL : 8.2.5.12 606578 Bytes 21.06.2012 14:41:18
AERDL.DLL : 8.1.9.15 639348 Bytes 08.09.2011 21:16:06
AEPACK.DLL : 8.3.0.14 807287 Bytes 14.07.2012 17:15:57
AEOFFICE.DLL : 8.1.2.40 201082 Bytes 02.07.2012 21:07:47
AEHEUR.DLL : 8.1.4.72 5038455 Bytes 14.07.2012 17:15:55
AEHELP.DLL : 8.1.23.2 258422 Bytes 02.07.2012 21:07:38
AEGEN.DLL : 8.1.5.32 434548 Bytes 10.07.2012 14:32:51
AEEXP.DLL : 8.1.0.62 86389 Bytes 14.07.2012 17:15:57
AEEMU.DLL : 8.1.3.2 393587 Bytes 10.07.2012 14:32:50
AECORE.DLL : 8.1.27.2 201078 Bytes 10.07.2012 14:32:50
AEBB.DLL : 8.1.1.0 53618 Bytes 01.09.2011 21:46:01
AVWINLL.DLL : 12.3.0.15 27344 Bytes 08.05.2012 11:00:18
AVPREF.DLL : 12.3.0.15 51920 Bytes 08.05.2012 11:00:18
AVREP.DLL : 12.3.0.15 179208 Bytes 08.05.2012 11:00:19
AVARKT.DLL : 12.3.0.15 211408 Bytes 08.05.2012 11:00:18
AVEVTLOG.DLL : 12.3.0.15 169168 Bytes 08.05.2012 11:00:18
SQLITE3.DLL : 3.7.0.1 398288 Bytes 08.05.2012 11:00:19
AVSMTP.DLL : 12.3.0.15 63440 Bytes 08.05.2012 11:00:18
NETNT.DLL : 12.3.0.15 17104 Bytes 08.05.2012 11:00:19
RCIMAGE.DLL : 12.3.0.15 4447952 Bytes 08.05.2012 11:00:18
RCTEXT.DLL : 12.3.0.15 98512 Bytes 08.05.2012 11:00:18
Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Lokale Laufwerke
Konfigurationsdatei...................: C:\program files (x86)\avira\antivir desktop\alldrives.avp
Protokollierung.......................: standard
Primäre Aktion........................: interaktiv
Sekundäre Aktion......................: ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, D:, E:,
Durchsuche aktive Programme...........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: aus
Integritätsprüfung von Systemdateien..: aus
Datei Suchmodus.......................: Intelligente Dateiauswahl
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert
Beginn des Suchlaufs: Dienstag, 17. Juli 2012 13:46
Der Suchlauf über die Masterbootsektoren wird begonnen:
Masterbootsektor HD0
[INFO] Es wurde kein Virus gefunden!
Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'C:\'
[INFO] Es wurde kein Virus gefunden!
Bootsektor 'D:\'
[INFO] Es wurde kein Virus gefunden!
Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'avscan.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'mbamservice.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'Com4QLBEx.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'fbserver.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'hpqwmiex.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'AVWEBGRD.EXE' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'mbamgui.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'QLBCtrl.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'ONENOTEM.EXE' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'RichVideo.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'LSSrvc.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'fbguard.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '1' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '1' Modul(e) wurden durchsucht
Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '2755' Dateien ).
Der Suchlauf über die ausgewählten Dateien wird begonnen:
Beginne mit der Suche in 'C:\'
C:\Program Files (x86)\OpenOffice.org 3\Basis\presets\config\standard.sob
[WARNUNG] Die komprimierten Daten sind fehlerhaft
C:\Users\***\AppData\Local\Temp\hornbach_videoanleitung_streichen.zip
[WARNUNG] Unerwartetes Dateiende erreicht
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\642c57e1-2ab1ce5a
[FUND] Ist das Trojanische Pferd TR/Winwebsec.zruen
C:\Users\***\AppData\Roaming\OpenOffice.org\3\user\config\standard.sob
[WARNUNG] Die komprimierten Daten sind fehlerhaft
C:\Users\***\Documents\Igelnest\KIWI\KIWIUninstaller.exe
[WARNUNG] Unerwartetes Dateiende erreicht
C:\Users\***\Downloads\avira_free_antivirus_de.exe
[WARNUNG] Die Datei ist kennwortgeschützt
C:\Users\***\Downloads\install_flashplayer11x64_mssa_aih(1).exe
[WARNUNG] Die Datei ist kennwortgeschützt
C:\Users\Mara\AppData\Roaming\OpenOffice.org\3\user\config\standard.sob
[WARNUNG] Die komprimierten Daten sind fehlerhaft
Beginne mit der Suche in 'D:\' <RECOVERY>
Beginne mit der Suche in 'E:\'
Der zu durchsuchende Pfad E:\ konnte nicht geöffnet werden!
Systemfehler [21]: Das Gerät ist nicht bereit.
Beginne mit der Desinfektion:
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\642c57e1-2ab1ce5a
[FUND] Ist das Trojanische Pferd TR/Winwebsec.zruen
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5683d9ad.qua' verschoben!
Ende des Suchlaufs: Dienstag, 17. Juli 2012 16:25
Benötigte Zeit: 1:39:05 Stunde(n)
Der Suchlauf wurde vollständig durchgeführt.
41360 Verzeichnisse wurden überprüft
1079442 Dateien wurden geprüft
1 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
1 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
1079441 Dateien ohne Befall
5756 Archive wurden durchsucht
7 Warnungen
1 Hinweise
Lieben Dank und schöne Grüße upps, das 1. Log von Malwarebytes direkt nach dem Entfernen von Security Shield muss dieses hier gewesen sein. Sorry, aber ich habe soviel gescannt, gegoogelt und gegrübelt, bin schon ganz durcheinander: Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.62.0.1300 www.malwarebytes.org Datenbank Version: v2012.07.14.07 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 *** :: ***-PC [Administrator] Schutz: Aktiviert 14.07.2012 22:28:42 mbam-log-2012-07-14 (22-28-42).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 195699 Laufzeit: 1 Stunde(n), 6 Minute(n), 33 Sekunde(n) [Abgebrochen] Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) |
|
18.07.2012, 15:20
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware????Code:
ATTFilter C:\Users\***\Downloads\SoftonicDownloader_fuer_pc-inspecto
 Finger weg von Softonic!!  Softonic ist eine Toolbar- und Adwareschleuder! Finger weg! Software lädt man sich mit oberster Priorität direkt vom Hersteller und nicht von solchen Toolbarklitschen wie Softonic! Im Notfall würde natürlich chip.de gehen Führ bitte auch ESET aus, danach sehen wir weiter. Hinweis: ESET zeigt durchaus öfter ein paar Fehlalarme. Deswegen soll auch von ESET immer nur erst das Log gepostet und nichts entfernt werden. ESET Online Scanner Bitte während der Online-Scans evtl. vorhandene externe Festplatten einschalten! Bitte während der Scans alle Hintergrundwächter (Anti-Virus-Programm, Firewall, Skriptblocking und ähnliches) abstellen und nicht vergessen, alles hinterher wieder einzuschalten.
 + R Taste und kopiere folgenden Text in das Ausführen Fenster.Code:
ATTFilter "%PROGRAMFILES%\Eset\Eset Online Scanner\log.txt"
Code:
ATTFilter "%PROGRAMFILES(X86)%\Eset\Eset Online Scanner\log.txt"
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
19.07.2012, 14:53
| #5 |
| | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? Hallo Arne, so - hier nun die log.txt des Eset-Scanners. Hoffe, dass ich alles richtig gemacht habe und dass das Ergebnis vielversprechend ist: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=dd7c02376b912f43b9f0626c65f3cb8b
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-07-19 10:35:33
# local_time=2012-07-19 12:35:33 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1792 16777215 100 0 24027375 24027375 0 0
# compatibility_mode=5893 16776574 100 94 116420 94261631 0 0
# compatibility_mode=8192 67108863 100 0 760 760 0 0
# scanned=299649
# found=0
# cleaned=0
# scan_time=62351
Lieben Gruß, Gabi |
|
19.07.2012, 19:42
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? adwCleaner - Toolbars und ungewollte Start-/Suchseiten aufspüren Downloade Dir bitte AdwCleaner auf deinen Desktop.
__________________ --> Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? |
|
20.07.2012, 14:23
| #7 |
| | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware????Code:
ATTFilter # AdwCleaner v1.703 - Logfile created 07/20/2012 at 15:20:04
# Updated 20/07/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : *** - ***-PC
# Running from : C:\Users\***\Desktop\adwcleaner.exe
# Option [Search]
***** [Services] *****
***** [Files / Folders] *****
Folder Found : C:\Users\***\AppData\Local\AskToolbar
Folder Found : C:\Users\Gabi1\AppData\Local\AskToolbar
Folder Found : C:\Users\***\AppData\LocalLow\AskToolbar
Folder Found : C:\Users\Gabi1\AppData\LocalLow\AskToolbar
Folder Found : C:\Program Files (x86)\Ask.com
Folder Found : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
File Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
***** [Registry] *****
[*] Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2736476
Key Found : HKCU\Software\APN
Key Found : HKCU\Software\AppDataLow\Software\AskToolbar
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AskToolbar
Key Found : HKCU\Software\Softonic
Key Found : HKLM\SOFTWARE\APN
Key Found : HKLM\SOFTWARE\AskToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Found : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Found : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
[x64] Key Found : HKCU\Software\APN
[x64] Key Found : HKCU\Software\AppDataLow\Software\AskToolbar
[x64] Key Found : HKCU\Software\AppDataLow\Software\Conduit
[x64] Key Found : HKCU\Software\AskToolbar
[x64] Key Found : HKCU\Software\Softonic
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\Conduit.Engine
[x64] Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
[x64] Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
[x64] Key Found : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
[x64] Key Found : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
[x64] Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
***** [Registre - GUID] *****
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7E111A5C-3D11-4F56-9463-5310C3C69025}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7E111A5C-3D11-4F56-9463-5310C3C69025}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{7E111A5C-3D11-4F56-9463-5310C3C69025}]
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
[x64] Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7E111A5C-3D11-4F56-9463-5310C3C69025}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
[x64] Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7E111A5C-3D11-4F56-9463-5310C3C69025}]
[x64] Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
[x64] Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{7E111A5C-3D11-4F56-9463-5310C3C69025}]
***** [Internet Browsers] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] Registry is clean.
-\\ Mozilla Firefox v13.0.1 (de)
Profile name : default
File : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\ic6uc5s5.default\prefs.js
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [6010 octets] - [20/07/2012 15:20:04]
########## EOF - C:\AdwCleaner[R1].txt - [6138 octets] ##########
|
|
20.07.2012, 18:16
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen
__________________ Logfiles bitte immer in CODE-Tags posten |
|
21.07.2012, 21:00
| #9 |
| | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? Bitteschön: Code:
ATTFilter # AdwCleaner v1.703 - Logfile created 07/21/2012 at 21:54:22
# Updated 20/07/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : *** - ***-PC
# Running from : C:\Users\***\Desktop\adwcleaner.exe
# Option [Delete]
***** [Services] *****
***** [Files / Folders] *****
Folder Deleted : C:\Users\***\AppData\Local\AskToolbar
Folder Deleted : C:\Users\Gabi1\AppData\Local\AskToolbar
Folder Deleted : C:\Users\***\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\Gabi1\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Program Files (x86)\Ask.com
Folder Deleted : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
***** [Registry] *****
[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2736476
Key Deleted : HKCU\Software\APN
Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AskToolbar
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\SOFTWARE\APN
Key Deleted : HKLM\SOFTWARE\AskToolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
[x64] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
***** [Registre - GUID] *****
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7E111A5C-3D11-4F56-9463-5310C3C69025}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7E111A5C-3D11-4F56-9463-5310C3C69025}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{7E111A5C-3D11-4F56-9463-5310C3C69025}]
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
***** [Internet Browsers] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] Registry is clean.
-\\ Mozilla Firefox v13.0.1 (de)
Profile name : default
File : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\ic6uc5s5.default\prefs.js
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [6091 octets] - [20/07/2012 15:20:04]
AdwCleaner[S1].txt - [4417 octets] - [21/07/2012 21:54:22]
########## EOF - C:\AdwCleaner[S1].txt - [4545 octets] ##########
Gabi |
|
23.07.2012, 14:10
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? Hätte da mal zwei Fragen bevor es weiter geht 1.) Geht der normale Modus von Windows (wieder) uneingeschränkt? 2.) Vermisst du irgendwas im Startmenü? Sind da leere Ordner unter alle Programme oder ist alles vorhanden?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
23.07.2012, 21:33
| #11 |
| | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? Hallo, 1) Windows lief die ganze Zeit uneingeschränkt 2) ich vermisse nichts - sieht alles ganz so aus wie immer aber ich hätte auch noch ne Frage kommt da noch viel, bzw. dauert es noch lange, bis ich mir sicher sein kann, dass alles i.O. ist??? Nur mal so, aus Neugier ;-)) Gruß und vielen Dank für deine Hilfe, Gabi |
|
24.07.2012, 15:49
| #12 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? Mach bitte ein neues OTL-Log. Bitte alles nach Möglichkeit hier in CODE-Tags posten. Wird so gemacht: [code] hier steht das Log [/code] Und das ganze sieht dann so aus: Code:
ATTFilter hier steht das Log
Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop. Falls schon vorhanden, bitte die ältere vorhandene Datei durch die neu heruntergeladene Datei ersetzen, damit du auch wirklich mit einer aktuellen Version von OTL arbeitest.
Code:
ATTFilter netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
wininit.exe
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT
__________________ Logfiles bitte immer in CODE-Tags posten |
|
26.07.2012, 15:29
| #13 |
| | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? Hallo, hier ist der gewünschte Inhalt aus Otl.txt: Code:
ATTFilter OTL logfile created on: 26.07.2012 16:04:20 - Run 2 OTL by OldTimer - Version 3.2.54.1 Folder = C:\Users\***\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,97 Gb Total Physical Memory | 2,89 Gb Available Physical Memory | 72,73% Memory free 7,93 Gb Paging File | 6,65 Gb Available in Paging File | 83,84% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 285,13 Gb Total Space | 220,88 Gb Free Space | 77,47% Space Free | Partition Type: NTFS Drive D: | 12,76 Gb Total Space | 2,13 Gb Free Space | 16,68% Space Free | Partition Type: NTFS Computer Name: ***-PC | User Name: *** | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.07.26 15:59:57 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe PRC - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2012.06.20 13:18:08 | 001,568,976 | ---- | M] (Ask) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe PRC - [2012.05.08 13:00:19 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2012.05.08 13:00:18 | 000,465,360 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe PRC - [2012.05.08 13:00:18 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2012.05.08 13:00:18 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2009.07.22 18:54:14 | 000,081,920 | ---- | M] (Firebird Project) -- C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe PRC - [2009.07.22 18:53:44 | 002,736,128 | ---- | M] (Firebird Project) -- C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe ========== Modules (No Company Name) ========== ========== Win32 Services (SafeList) ========== SRV:64bit: - [2009.08.13 22:09:38 | 000,240,640 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\stacsv64.exe -- (STacSV) SRV:64bit: - [2009.03.02 23:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\AESTSr64.exe -- (AESTFilters) SRV - [2012.07.11 19:39:11 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2012.07.02 11:11:51 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012.05.08 13:00:19 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2012.05.08 13:00:18 | 000,465,360 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService) SRV - [2012.05.08 13:00:18 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009.08.13 22:09:38 | 000,240,640 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\STacSV64.exe -- (STacSV) SRV - [2009.07.22 18:54:14 | 000,081,920 | ---- | M] (Firebird Project) [Auto | Running] -- C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance) SRV - [2009.07.22 18:53:44 | 002,736,128 | ---- | M] (Firebird Project) [On_Demand | Running] -- C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe -- (FirebirdServerDefaultInstance) SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009.06.06 02:07:28 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService) SRV - [2009.03.02 23:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\AESTSr64.exe -- (AESTFilters) SRV - [2009.02.22 13:00:00 | 000,129,584 | ---- | M] (EasyBits Sofware AS) [Auto | Running] -- C:\Windows\SysWOW64\ezsvc7.dll -- (ezSharedSvc) ========== Driver Services (SafeList) ========== DRV:64bit: - [2012.07.03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:64bit: - [2012.05.08 13:00:19 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb) DRV:64bit: - [2012.05.08 13:00:19 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2011.10.11 15:00:01 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr) DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010.11.20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2010.02.17 21:42:50 | 000,507,392 | ---- | M] (ITETech ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AF15BDA.sys -- (AF15BDA) DRV:64bit: - [2009.09.21 20:47:14 | 001,484,800 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:64bit: - [2009.09.02 19:58:08 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:64bit: - [2009.08.13 22:09:38 | 000,487,936 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA) DRV:64bit: - [2009.07.15 01:16:34 | 000,273,456 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.06.27 16:55:10 | 000,083,488 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:64bit: - [2009.06.10 23:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:64bit: - [2009.06.10 23:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:64bit: - [2009.06.10 23:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:64bit: - [2009.06.10 23:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:64bit: - [2009.06.10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2009.06.10 22:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7) DRV:64bit: - [2009.06.10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.05.22 16:52:30 | 000,215,040 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2009.04.29 09:48:32 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV:64bit: - [2008.07.24 12:04:34 | 000,115,328 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2009.09.02 19:58:08 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/CQNOT/4 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/CQNOT/4 IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {376C65B3-8EAC-4788-BEAB-7FFD331EB081} IE:64bit: - HKLM\..\SearchScopes\{376C65B3-8EAC-4788-BEAB-7FFD331EB081}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/CQNOT/4 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/CQNOT/4 IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b} IE - HKLM\..\SearchScopes\{376C65B3-8EAC-4788-BEAB-7FFD331EB081}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.gmx.net/br/ie9_startpage IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.gmx.net/br/ie9_startpage IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes,DefaultScope = {376C65B3-8EAC-4788-BEAB-7FFD331EB081} IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{09038620-190C-402B-A92F-18864E6AB22F}: "URL" = hxxp://go.1und1.de/br/ie9_search_web/?su={searchTerms} IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{376C65B3-8EAC-4788-BEAB-7FFD331EB081}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{40064957-18EB-412d-9146-3F57E8D92EEC}: "URL" = hxxp://go.gmx.net/br/ie9_search_pic/?su={searchTerms} IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{5A817CF6-92D5-4DE5-AC38-82DF8A73EF28}: "URL" = hxxp://go.gmx.net/br/ie9_search_web/?su={searchTerms} IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = hxxp://go.web.de/br/ie9_search_web/?su={searchTerms} IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{8D27B32E-89EE-460e-82D2-5FC354078EAD}: "URL" = hxxp://go.gmx.net/br/ie9_search_produkte/?su={searchTerms} IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = hxxp://int.search-results.com/web?q={SEARCHTERMS}&o=15527&l=dis&prt=NIS&chn=retail&geo=DE&ver=18 IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{C4582145-42EF-40C4-BDB4-5103CF342A54}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10395&src=kw&q={searchTerms}&locale=&apn_ptnrs=^ABT&apn_dtid=^YYYYYY^YY^DE&apn_uid=c04e43a8-b64c-428b-879e-4621b0a00d20&apn_sauid=CD2E6E91-D021-48E4-A0C6-52426A70E2C8 IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{DCE59F23-A446-45a5-9459-E68FDC0DE38D}: "URL" = hxxp://go.gmx.net/br/ie9_search_maps/?su={searchTerms} IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local> ========== FireFox ========== FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..keyword.URL: "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-3&o=APN10395&locale=de_DE&apn_uid=c04e43a8-b64c-428b-879e-4621b0a00d20&apn_ptnrs=%5EABT&apn_sauid=CD2E6E91-D021-48E4-A0C6-52426A70E2C8&apn_dtid=%5EYYYYYY%5EYY%5EDE&&q=" FF - prefs.js..network.proxy.no_proxies_on: "localhost,127.0.0.1" FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.02.24 20:58:34 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.07.02 11:11:52 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.02.24 20:58:34 | 000,000,000 | ---D | M] [2012.03.26 22:17:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions [2012.07.21 22:13:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\ic6uc5s5.default\extensions [2012.07.21 22:13:23 | 000,000,000 | ---D | M] (Avira SearchFree Toolbar plus Web Protection) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\ic6uc5s5.default\extensions\toolbar@ask.com [2012.07.21 22:13:23 | 000,002,344 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\ic6uc5s5.default\searchplugins\askcom.xml [2012.07.02 12:08:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2012.07.02 11:11:52 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012.07.02 11:11:49 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2012.07.02 11:11:49 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2012.07.02 11:11:49 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2012.07.02 11:11:49 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2012.07.02 11:11:49 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2012.07.02 11:11:49 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2012.07.16 14:28:02 | 000,000,698 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found. O3 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O3 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\Toolbar\WebBrowser: (no name) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - No CLSID value found. O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\Mara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O7 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0 O7 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0 O7 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000019 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG) O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16:64bit: - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/sites/production/ieawsdc32.cab (Microsoft Office Template and Media Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.) O16 - DPF: {DF6504AC-3EFE-4287-B259-FB299B069C95} https://img.web.de/v/mail/activex/fa_os_mms/upload_1141.cab (WEBDE Fotoalbum Upload Control) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1019A5BE-9F4A-44E4-B266-BEEA3E14DA83}: DhcpNameServer = 192.168.178.1 O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{011119f0-d564-11df-8096-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{011119f0-d564-11df-8096-00269ec1a333}\Shell\AutoRun\command - "" = G:\AutoRun.exe O33 - MountPoints2\{2f040a78-d304-11df-9cab-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{2f040a78-d304-11df-9cab-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{2f040a89-d304-11df-9cab-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{2f040a89-d304-11df-9cab-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{2f040a8c-d304-11df-9cab-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{2f040a8c-d304-11df-9cab-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{7bea5eb8-f319-11e0-8f96-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{7bea5eb8-f319-11e0-8f96-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{7bea5ebc-f319-11e0-8f96-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{7bea5ebc-f319-11e0-8f96-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8b553269-f1c3-11e0-902c-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{8b553269-f1c3-11e0-902c-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8b553279-f1c3-11e0-902c-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{8b553279-f1c3-11e0-902c-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{b37e5b64-ccaa-11e0-8fe5-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{b37e5b64-ccaa-11e0-8fe5-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{b37e5b79-ccaa-11e0-8fe5-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{b37e5b79-ccaa-11e0-8fe5-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{c209f956-7c21-11e1-a9e6-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{c209f956-7c21-11e1-a9e6-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{c9692041-d143-11df-afa3-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{c9692041-d143-11df-afa3-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{c9692043-d143-11df-afa3-00269ec1a333}\Shell - "" = AutoRun O33 - MountPoints2\{c9692043-d143-11df-afa3-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\F\Shell - "" = AutoRun O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) NetSvcs: ezSharedSvc - C:\Windows\SysWOW64\ezsvc7.dll (EasyBits Sofware AS) SafeBootMin:64bit: AppMgmt - Service SafeBootMin:64bit: Base - Driver Group SafeBootMin:64bit: Boot Bus Extender - Driver Group SafeBootMin:64bit: Boot file system - Driver Group SafeBootMin:64bit: File system - Driver Group SafeBootMin:64bit: Filter - Driver Group SafeBootMin:64bit: HelpSvc - Service SafeBootMin:64bit: PCI Configuration - Driver Group SafeBootMin:64bit: PNP Filter - Driver Group SafeBootMin:64bit: Primary disk - Driver Group SafeBootMin:64bit: sacsvr - Service SafeBootMin:64bit: SCSI Class - Driver Group SafeBootMin:64bit: System Bus Extender - Driver Group SafeBootMin:64bit: vmms - Service SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:64bit: AppMgmt - Service SafeBootNet:64bit: Base - Driver Group SafeBootNet:64bit: Boot Bus Extender - Driver Group SafeBootNet:64bit: Boot file system - Driver Group SafeBootNet:64bit: File system - Driver Group SafeBootNet:64bit: Filter - Driver Group SafeBootNet:64bit: HelpSvc - Service SafeBootNet:64bit: Messenger - Service SafeBootNet:64bit: NDIS Wrapper - Driver Group SafeBootNet:64bit: NetBIOSGroup - Driver Group SafeBootNet:64bit: NetDDEGroup - Driver Group SafeBootNet:64bit: Network - Driver Group SafeBootNet:64bit: NetworkProvider - Driver Group SafeBootNet:64bit: PCI Configuration - Driver Group SafeBootNet:64bit: PNP Filter - Driver Group SafeBootNet:64bit: PNP_TDI - Driver Group SafeBootNet:64bit: Primary disk - Driver Group SafeBootNet:64bit: rdsessmgr - Service SafeBootNet:64bit: sacsvr - Service SafeBootNet:64bit: SCSI Class - Driver Group SafeBootNet:64bit: Streams Drivers - Driver Group SafeBootNet:64bit: System Bus Extender - Driver Group SafeBootNet:64bit: TDI - Driver Group SafeBootNet:64bit: vmms - Service SafeBootNet:64bit: WudfUsbccidDriver - Driver SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX:64bit: >{FA4C90A6-7213-410D-AADF-2F0507F55045} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe" ActiveX: {166B1BCA-3F9C-11CF-8075-444553540000} - Macromedia Shockwave Director 10.1 ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Macromedia Shockwave Director 10.1 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.) CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2012.07.23 22:22:59 | 000,000,000 | R--D | C] -- C:\Users\***\Documents\Scanned Documents [2012.07.23 22:22:58 | 000,000,000 | ---D | C] -- C:\Users\***\Documents\Fax [2012.07.23 22:18:38 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\InstallShield [2012.07.21 22:13:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira [2012.07.21 22:13:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ask.com [2012.07.18 19:03:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET [2012.07.18 19:03:09 | 002,322,184 | ---- | C] (ESET) -- C:\Users\***\Desktop\esetsmartinstaller_enu.exe [2012.07.16 17:31:25 | 000,259,584 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTH.scr [2012.07.16 13:52:41 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\HostsXpert [2012.07.15 18:21:54 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe [2012.07.14 21:50:04 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Malwarebytes [2012.07.14 21:49:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012.07.14 21:49:57 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2012.07.14 21:49:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2012.07.14 21:49:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012.07.14 21:47:28 | 010,652,120 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\***\mbam-setup-1.62.0.1300.exe [2012.07.02 12:13:51 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\Macromedia [2012.07.02 11:11:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service [2012.07.02 11:11:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla [2012.06.28 18:52:09 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012.07.26 16:02:08 | 000,023,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.07.26 16:02:08 | 000,023,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.07.26 15:59:57 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe [2012.07.26 15:53:29 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl [2012.07.26 15:53:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012.07.26 15:52:59 | 3195,211,776 | -HS- | M] () -- C:\hiberfil.sys [2012.07.23 22:38:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012.07.21 22:13:26 | 000,002,026 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk [2012.07.20 15:27:53 | 001,498,742 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012.07.20 15:27:53 | 000,654,400 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2012.07.20 15:27:53 | 000,616,242 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012.07.20 15:27:53 | 000,130,240 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2012.07.20 15:27:53 | 000,106,622 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012.07.20 15:19:36 | 000,632,023 | ---- | M] () -- C:\Users\***\Desktop\adwcleaner.exe [2012.07.18 19:03:10 | 002,322,184 | ---- | M] (ESET) -- C:\Users\***\Desktop\esetsmartinstaller_enu.exe [2012.07.16 17:31:28 | 000,259,584 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTH.scr [2012.07.16 14:54:27 | 413,882,694 | ---- | M] () -- C:\Windows\MEMORY.DMP [2012.07.16 13:52:13 | 000,357,766 | ---- | M] () -- C:\Users\***\Desktop\HostsXpert.zip [2012.07.16 13:10:40 | 001,012,656 | ---- | M] () -- C:\Users\***\Desktop\rkill.com [2012.07.15 18:18:10 | 000,000,000 | ---- | M] () -- C:\Users\***\defogger_reenable [2012.07.15 18:16:00 | 000,050,477 | ---- | M] () -- C:\Users\***\Desktop\Defogger.exe [2012.07.14 21:49:58 | 000,001,069 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2012.07.14 21:47:32 | 010,652,120 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\***\mbam-setup-1.62.0.1300.exe [2012.07.12 15:12:51 | 000,378,976 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012.07.03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2012.07.20 15:19:34 | 000,632,023 | ---- | C] () -- C:\Users\***\Desktop\adwcleaner.exe [2012.07.16 13:52:09 | 000,357,766 | ---- | C] () -- C:\Users\***\Desktop\HostsXpert.zip [2012.07.16 13:10:35 | 001,012,656 | ---- | C] () -- C:\Users\***\Desktop\rkill.com [2012.07.15 18:18:10 | 000,000,000 | ---- | C] () -- C:\Users\***\defogger_reenable [2012.07.15 18:15:55 | 000,050,477 | ---- | C] () -- C:\Users\***\Desktop\Defogger.exe [2012.07.14 21:49:58 | 000,001,069 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2012.07.02 12:10:28 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2011.03.25 11:07:17 | 000,015,602 | ---- | C] () -- C:\Windows\SysWow64\SELF32.INI [2010.09.17 21:40:23 | 000,164,864 | ---- | C] () -- C:\Windows\UNWISE.EXE [2010.09.17 21:40:23 | 000,006,836 | ---- | C] () -- C:\Windows\UNWISE.INI [2010.06.29 15:26:03 | 000,000,232 | ---- | C] () -- C:\Users\***\AppData\Roaming\wklnhst.dat [2010.05.07 16:43:11 | 000,000,680 | RHS- | C] () -- C:\Users\***\ntuser.pol ========== LOP Check ========== [2010.04.04 19:32:49 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Amazon [2011.04.14 16:17:28 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Aquamarin Haushaltsbuch [2011.09.15 16:00:45 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Cornelsen [2010.11.12 17:13:16 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GetRightToGo [2012.05.13 22:38:08 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GLS Vereinsmeister [2011.03.18 00:02:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\OpenOffice.org [2010.06.29 15:26:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Template [2010.03.19 11:10:58 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Tific [2011.12.01 22:50:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TuneUp Software [2011.03.09 23:12:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\WEBDE [2010.01.31 15:04:06 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\WildTangent [2010.02.24 21:45:08 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\_MDLogs [2011.01.23 17:00:08 | 000,000,000 | ---D | M] -- C:\Users\Gabi1\AppData\Roaming\_MDLogs [2010.07.02 20:40:21 | 000,000,000 | ---D | M] -- C:\Users\Mara\AppData\Roaming\Amazon [2011.11.22 22:05:23 | 000,000,000 | ---D | M] -- C:\Users\Mara\AppData\Roaming\OpenOffice.org [2010.02.05 18:32:09 | 000,000,000 | ---D | M] -- C:\Users\Mara\AppData\Roaming\WildTangent [2010.01.31 17:30:43 | 000,000,000 | ---D | M] -- C:\Users\Mara\AppData\Roaming\_MDLogs [2012.06.04 11:53:16 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %ALLUSERSPROFILE%\Application Data\*. > < %ALLUSERSPROFILE%\Application Data\*.exe /s > < %APPDATA%\*. > [2012.07.23 22:08:17 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Adobe [2010.04.04 19:32:49 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Amazon [2011.04.14 16:17:28 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Aquamarin Haushaltsbuch [2011.10.14 17:04:31 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Avira [2011.09.15 16:00:45 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Cornelsen [2012.07.23 22:14:19 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\CyberLink [2010.11.12 17:13:16 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GetRightToGo [2012.05.13 22:38:08 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GLS Vereinsmeister [2010.02.01 16:09:29 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Hewlett-Packard [2011.08.02 01:22:13 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HP Support Assistant [2010.01.30 21:51:35 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\hpqlog [2011.08.02 01:22:13 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HpUpdate [2010.01.30 21:51:53 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Identities [2012.07.23 22:18:38 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\InstallShield [2010.01.31 00:05:27 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Macromedia [2012.07.14 21:50:04 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Malwarebytes [2009.11.05 11:18:41 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Media Center Programs [2012.07.02 12:13:51 | 000,000,000 | --SD | M] -- C:\Users\***\AppData\Roaming\Microsoft [2012.03.26 22:17:33 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mozilla [2011.03.18 00:02:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\OpenOffice.org [2012.02.27 17:40:19 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Skype [2010.06.29 15:26:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Template [2010.03.19 11:10:58 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Tific [2011.12.01 22:50:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TuneUp Software [2011.03.09 23:12:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\WEBDE [2010.01.31 15:04:06 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\WildTangent [2010.02.24 20:58:45 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Yahoo! [2010.02.24 21:45:08 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\_MDLogs < %APPDATA%\*.exe /s > [2009.11.09 14:37:39 | 000,038,200 | ---- | M] () -- C:\Users\***\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe < %SYSTEMDRIVE%\*.exe > < MD5 for: AGP440.SYS > [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys < MD5 for: ATAPI.SYS > [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys < MD5 for: CNGAUDIT.DLL > [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll [2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll [2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll < MD5 for: EVENTLOG.DLL > [2007.05.17 22:34:04 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files (x86)\CyberLink\PowerDirector\EventLog.dll < MD5 for: IASTORV.SYS > [2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys [2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys [2011.03.11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys [2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys [2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys [2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys [2011.03.11 08:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys [2011.03.11 08:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys [2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys < MD5 for: NETLOGON.DLL > [2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll [2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll [2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll [2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll [2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll [2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll < MD5 for: NVSTOR.SYS > [2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys [2011.03.11 08:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys [2011.03.11 08:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys [2011.03.11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys [2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys [2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys [2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys [2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys [2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys < MD5 for: SCECLI.DLL > [2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll [2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll [2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll [2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll [2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll [2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll < MD5 for: USER32.DLL > [2010.11.20 14:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll [2010.11.20 14:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll [2009.07.14 03:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll [2009.07.14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll [2010.11.20 15:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll [2010.11.20 15:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll < MD5 for: USERINIT.EXE > [2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe [2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe [2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe [2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX0\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX1\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX2\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX3\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX4\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX5\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX6\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX7\userinit.exe [2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe [2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe < MD5 for: WININIT.EXE > [2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe [2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe [2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe [2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe < MD5 for: WINLOGON.EXE > [2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe [2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe [2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2012.07.03 13:46:42 | 000,217,672 | ---- | M] () MD5=8A7F34F0BBD076EC3815680A7309114F -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe [2009.10.28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX0\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX1\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX2\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX3\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX4\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX5\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX6\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\***\AppData\Local\Temp\RarSFX7\winlogon.exe [2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe < MD5 for: WS2IFSL.SYS > [2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys [2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > < > < End of report > Gruß, Gabi |
|
26.07.2012, 21:59
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!) Code:
ATTFilter :OTL
IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.gmx.net/br/ie9_startpage
IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.gmx.net/br/ie9_startpage
IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes,DefaultScope = {376C65B3-8EAC-4788-BEAB-7FFD331EB081}
IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{09038620-190C-402B-A92F-18864E6AB22F}: "URL" = http://go.1und1.de/br/ie9_search_web/?su={searchTerms}
IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{40064957-18EB-412d-9146-3F57E8D92EEC}: "URL" = http://go.gmx.net/br/ie9_search_pic/?su={searchTerms}
IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{5A817CF6-92D5-4DE5-AC38-82DF8A73EF28}: "URL" = http://go.gmx.net/br/ie9_search_web/?su={searchTerms}
IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}: "URL" = http://go.web.de/br/ie9_search_web/?su={searchTerms}
IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{8D27B32E-89EE-460e-82D2-5FC354078EAD}: "URL" = http://go.gmx.net/br/ie9_search_produkte/?su={searchTerms}
IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = http://int.search-results.com/web?q={SEARCHTERMS}&o=15527&l=dis&prt=NIS&chn=retail&geo=DE&ver=18
IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{C4582145-42EF-40C4-BDB4-5103CF342A54}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10395&src=kw&q={searchTerms}&locale=&apn_ptnrs=^ABT&apn_dtid=^YYYYYY^YY^DE&apn_uid=c04e43a8-b64c-428b-879e-4621b0a00d20&apn_sauid=CD2E6E91-D021-48E4-A0C6-52426A70E2C8
IE - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\SearchScopes\{DCE59F23-A446-45a5-9459-E68FDC0DE38D}: "URL" = http://go.gmx.net/br/ie9_search_maps/?su={searchTerms}
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-3&o=APN10395&locale=de_DE&apn_uid=c04e43a8-b64c-428b-879e-4621b0a00d20&apn_ptnrs=%5EABT&apn_sauid=CD2E6E91-D021-48E4-A0C6-52426A70E2C8&apn_dtid=%5EYYYYYY%5EYY%5EDE&&q="
FF - prefs.js..network.proxy.no_proxies_on: "localhost,127.0.0.1"
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
[2012.07.21 22:13:23 | 000,000,000 | ---D | M] (Avira SearchFree Toolbar plus Web Protection) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\ic6uc5s5.default\extensions\toolbar@ask.com
[2012.07.21 22:13:23 | 000,002,344 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\ic6uc5s5.default\searchplugins\askcom.xml
O2 - BHO: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\..\Toolbar\WebBrowser: (no name) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O7 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O7 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{011119f0-d564-11df-8096-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{011119f0-d564-11df-8096-00269ec1a333}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{2f040a78-d304-11df-9cab-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{2f040a78-d304-11df-9cab-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{2f040a89-d304-11df-9cab-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{2f040a89-d304-11df-9cab-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{2f040a8c-d304-11df-9cab-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{2f040a8c-d304-11df-9cab-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7bea5eb8-f319-11e0-8f96-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{7bea5eb8-f319-11e0-8f96-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7bea5ebc-f319-11e0-8f96-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{7bea5ebc-f319-11e0-8f96-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{8b553269-f1c3-11e0-902c-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{8b553269-f1c3-11e0-902c-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{8b553279-f1c3-11e0-902c-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{8b553279-f1c3-11e0-902c-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{b37e5b64-ccaa-11e0-8fe5-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{b37e5b64-ccaa-11e0-8fe5-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{b37e5b79-ccaa-11e0-8fe5-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{b37e5b79-ccaa-11e0-8fe5-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c209f956-7c21-11e1-a9e6-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{c209f956-7c21-11e1-a9e6-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c9692041-d143-11df-afa3-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{c9692041-d143-11df-afa3-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c9692043-d143-11df-afa3-00269ec1a333}\Shell - "" = AutoRun
O33 - MountPoints2\{c9692043-d143-11df-afa3-00269ec1a333}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
:Files
C:\Program Files (x86)\Ask.com
:Commands
[purity]
[emptytemp]
[emptyflash]
[resethosts]
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet. Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt. Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
28.07.2012, 15:15
| #15 |
| | Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? Bitteschön: Code:
ATTFilter All processes killed
========== OTL ==========
HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKU\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ deleted successfully.
C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll moved successfully.
HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\SearchScopes\{09038620-190C-402B-A92F-18864E6AB22F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09038620-190C-402B-A92F-18864E6AB22F}\ not found.
Registry key HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\SearchScopes\{40064957-18EB-412d-9146-3F57E8D92EEC}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{40064957-18EB-412d-9146-3F57E8D92EEC}\ not found.
Registry key HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5A817CF6-92D5-4DE5-AC38-82DF8A73EF28}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5A817CF6-92D5-4DE5-AC38-82DF8A73EF28}\ not found.
Registry key HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}\ not found.
Registry key HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\SearchScopes\{8D27B32E-89EE-460e-82D2-5FC354078EAD}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8D27B32E-89EE-460e-82D2-5FC354078EAD}\ not found.
Registry key HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}\ not found.
Registry key HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\SearchScopes\{C4582145-42EF-40C4-BDB4-5103CF342A54}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C4582145-42EF-40C4-BDB4-5103CF342A54}\ not found.
Registry key HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\SearchScopes\{DCE59F23-A446-45a5-9459-E68FDC0DE38D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DCE59F23-A446-45a5-9459-E68FDC0DE38D}\ not found.
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-3&o=APN10395&locale=de_DE&apn_uid=c04e43a8-b64c-428b-879e-4621b0a00d20&apn_ptnrs=%5EABT&apn_sauid=CD2E6E91-D021-48E4-A0C6-52426A70E2C8&apn_dtid=%5EYYYYYY%5EYY%5EDE&&q=" removed from keyword.URL
Prefs.js: "localhost,127.0.0.1" removed from network.proxy.no_proxies_on
Prefs.js: 0 removed from network.proxy.type
Folder C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\ic6uc5s5.default\extensions\toolbar@ask.com\ not found.
File C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\ic6uc5s5.default\searchplugins\askcom.xml not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
File C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.
Registry value HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found.
Registry value HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C424171E-592A-415A-9EB1-DFD6D95D3530} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C424171E-592A-415A-9EB1-DFD6D95D3530}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ApnUpdater deleted successfully.
C:\Program Files (x86)\Ask.com\Updater\Updater.exe moved successfully.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\HideFastUserSwitching deleted successfully.
Registry value HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\LogonHoursAction deleted successfully.
Registry value HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DontDisplayLogonHoursWarnings deleted successfully.
Registry value HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun not found.
Registry value HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\LogonHoursAction not found.
Registry value HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DontDisplayLogonHoursWarnings not found.
Registry value HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableLockWorkstation deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableChangePassword deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\LogonHoursAction deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3798623819-136893597-2259508141-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DontDisplayLogonHoursWarnings deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{011119f0-d564-11df-8096-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{011119f0-d564-11df-8096-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{011119f0-d564-11df-8096-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{011119f0-d564-11df-8096-00269ec1a333}\ not found.
File G:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2f040a78-d304-11df-9cab-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2f040a78-d304-11df-9cab-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2f040a78-d304-11df-9cab-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2f040a78-d304-11df-9cab-00269ec1a333}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2f040a89-d304-11df-9cab-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2f040a89-d304-11df-9cab-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2f040a89-d304-11df-9cab-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2f040a89-d304-11df-9cab-00269ec1a333}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2f040a8c-d304-11df-9cab-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2f040a8c-d304-11df-9cab-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2f040a8c-d304-11df-9cab-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2f040a8c-d304-11df-9cab-00269ec1a333}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7bea5eb8-f319-11e0-8f96-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7bea5eb8-f319-11e0-8f96-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7bea5eb8-f319-11e0-8f96-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7bea5eb8-f319-11e0-8f96-00269ec1a333}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7bea5ebc-f319-11e0-8f96-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7bea5ebc-f319-11e0-8f96-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7bea5ebc-f319-11e0-8f96-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7bea5ebc-f319-11e0-8f96-00269ec1a333}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8b553269-f1c3-11e0-902c-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8b553269-f1c3-11e0-902c-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8b553269-f1c3-11e0-902c-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8b553269-f1c3-11e0-902c-00269ec1a333}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8b553279-f1c3-11e0-902c-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8b553279-f1c3-11e0-902c-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8b553279-f1c3-11e0-902c-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8b553279-f1c3-11e0-902c-00269ec1a333}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b37e5b64-ccaa-11e0-8fe5-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b37e5b64-ccaa-11e0-8fe5-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b37e5b64-ccaa-11e0-8fe5-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b37e5b64-ccaa-11e0-8fe5-00269ec1a333}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b37e5b79-ccaa-11e0-8fe5-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b37e5b79-ccaa-11e0-8fe5-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b37e5b79-ccaa-11e0-8fe5-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b37e5b79-ccaa-11e0-8fe5-00269ec1a333}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c209f956-7c21-11e1-a9e6-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c209f956-7c21-11e1-a9e6-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c209f956-7c21-11e1-a9e6-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c209f956-7c21-11e1-a9e6-00269ec1a333}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c9692041-d143-11df-afa3-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c9692041-d143-11df-afa3-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c9692041-d143-11df-afa3-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c9692041-d143-11df-afa3-00269ec1a333}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c9692043-d143-11df-afa3-00269ec1a333}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c9692043-d143-11df-afa3-00269ec1a333}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c9692043-d143-11df-afa3-00269ec1a333}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c9692043-d143-11df-afa3-00269ec1a333}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ not found.
File F:\AutoRun.exe not found.
========== FILES ==========
C:\Program Files (x86)\Ask.com\Updater folder moved successfully.
C:\Program Files (x86)\Ask.com\assets\oobe folder moved successfully.
C:\Program Files (x86)\Ask.com\assets folder moved successfully.
C:\Program Files (x86)\Ask.com folder moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 80055 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Gabi Lerch
->Temp folder emptied: 109352312 bytes
->Temporary Internet Files folder emptied: 693485148 bytes
->Java cache emptied: 37542186 bytes
->FireFox cache emptied: 81968460 bytes
->Flash cache emptied: 44549 bytes
User: Gabi1
->Temp folder emptied: 29906386 bytes
->Temporary Internet Files folder emptied: 23233632 bytes
->Java cache emptied: 7140 bytes
->Flash cache emptied: 671 bytes
User: Mara
->Temp folder emptied: 45101546 bytes
->Temporary Internet Files folder emptied: 199059853 bytes
->Java cache emptied: 17041469 bytes
->Flash cache emptied: 25101 bytes
User: Public
User: TEMP
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 189245577 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67765 bytes
RecycleBin emptied: 451202113 bytes
Total Files Cleaned = 1.790,00 mb
[EMPTYFLASH]
User: All Users
User: Default
User: Default User
User: Gabi Lerch
->Flash cache emptied: 0 bytes
User: Gabi1
->Flash cache emptied: 0 bytes
User: Mara
->Flash cache emptied: 0 bytes
User: Public
User: TEMP
Total Flash Files Cleaned = 0,00 mb
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
OTL by OldTimer - Version 3.2.54.1 log created on 07282012_155759
Files\Folders moved on Reboot...
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[3].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[4].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[5].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[6].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[7].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[8].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\=CNC&poshigh=true&keyword=Kriminalitaet&keyword=Segeln&adsize=300x250&adsize=600x250&tile=897526947951010290272990297120&transactionID=897526947951010290272990297120[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\=true&keyword=Frankreich&keyword=PraesidentKinderLeute&adsize=300x250&adsize=300x600&tile=176017866600174823024461217624&transactionID=176017866600174823024461217624[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=170734361782895367663653381038&transactionID=170734361782895367663653381038[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=757458157400821902884874373487&transactionID=757458157400821902884874373487[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=858252065494199393421312787878&transactionID=858252065494199393421312787878[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=545565007011361674729573269596&transactionID=545565007011361674729573269596[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\RX1XP8NE\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\RX1XP8NE\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\RX1XP8NE\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[3].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\RX1XP8NE\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[4].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\RX1XP8NE\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[5].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\QZEB3NQR\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\QZEB3NQR\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\QZEB3NQR\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[3].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\QZEB3NQR\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[4].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\QZEB3NQR\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[5].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\QZEB3NQR\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[6].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\60x600;ord=1301337287167;u=i_8060303095503341171%7Cm_156603;dcopt=ist;tile=1;um=6;us=13;eb_trk=156603;pr=30;xp=30;np=30;uz=63571;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[10].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[11].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[3].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[4].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[5].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[6].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[7].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[8].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[9].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\93;sz=160x600;ord=1301336975884;u=i_8060219709250436184_m_145789;dcopt=ist;tile=1;um=0;us=13;eb_trk=145789;pr=20;xp=20;np=20;uz=;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\AZZGrrMlQ9uyBLmg9-Qf0uA6gojk8m3wxbOFvL-YvEaVrwUNhKrW_982bAqBSJ3w7d_hJA4nkjJfXh9Ty6gQ9daANEVWpzwy_9Vq_Njw6exywjgjFb2qD0xZ3dRs-yVyIwNi1yRkR6IgW_C3YQ&callback=google.LU[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\cial=rectangle&tagID=rectangle&ngserious=CNC&pagetab=8&adsize=300x250&adsize=300x600&tile=122320714572377366037088959725&transactionID=122320714572377366037088959725[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\CNC&pagetab=8&adsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&tile=122320714572377366037088959725&transactionID=122320714572377366037088959725[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=925703336099439276795415243102&transactionID=925703336099439276795415243102[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\eg=AdvGL3rdP;sz=300x250;ord=1301336946865;u=i_8060211925695151208_m_167599;tile=2;um=0;us=13;eb_trk=167599;pr=20;xp=20;np=20;uz=;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\ial=popup&tagID=ambient&ngserious=CNC&keyword=Unwetter&keyword=KaribikUSA&adsize=1x1&tile=920765533503678433832416123366&transactionID=920765533503678433832416123366[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\ype=&conpartner=12443&concategory=nachrichten&ngserious=®ion=de&pg=w&pp=DE_63571&pa=-1&cc=DE&concategory=nachrichten&contype=PR&conpartner=9280110&resId=13526118[1].xml not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\ype=&conpartner=12443&concategory=nachrichten&ngserious=®ion=de&pg=w&pp=DE_63571&pa=-1&cc=DE&concategory=nachrichten&contype=PR&conpartner=9280110&resId=13526118[2].xml not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\ype=&conpartner=12443&concategory=nachrichten&ngserious=®ion=de&pg=w&pp=DE_63571&pa=-1&cc=DE&concategory=nachrichten&contype=PR&conpartner=9280110&resId=13526118[3].xml not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\JFPPTI95\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\JFPPTI95\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\JFPPTI95\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[3].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\JFPPTI95\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[4].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\4&richmedia=false&posName=popup&special=popup&tagID=ambient&ngserious=CNC&adsize=1x1&tile=925703336099439276795415243102&transactionID=925703336099439276795415243102[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[10].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[11].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[3].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[4].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[5].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[6].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[7].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[8].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[9].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\93;sz=160x600;ord=1301336975884;u=i_8060240045114605604_m_145789;dcopt=ist;tile=1;um=0;us=13;eb_trk=145789;pr=20;xp=20;np=20;uz=;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\c8fd7684746;ord=174M1E7VFDN4RHZ2F1A4;s=i0;s=i2;s=i3;s=i4;s=i5;s=i6;s=i7;s=i8;s=i9;s=20;s=40;s=718;s=602;s=388;s=389;s=57;s=u9;s=u17;s=m4;s=u6;s=u5;s=m1;z=64;z=37;tile=1[1] not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\fcmYa--iFLcAJIwqkSAZZGrrMlQ9uyBLmg9-Qf0uA6gojk8m3wxbOFvL-YvEaVrwUNhKrW_982bAqBSJ3w7d_hJA4nkjJfXh9Ty6gQ9daANEVWpzwy_9Vq_Njw6exywjgjFb2qD0xZ3dRs-yVyIwNi1yRkR6IgW_C3YQ[1].gif not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\ichmedia=false&posName=sky&special=sky&tagID=sky_right&ngserious=CNC&adsize=160x600&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\ngserious=CNC&adsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&tile=925703336099439276795415243102&transactionID=925703336099439276795415243102[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\rd=KaribikUSA&adsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&tile=920765533503678433832416123366&transactionID=920765533503678433832416123366[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\297,2309,2340,2342,2343,2359,2367,4760,4765,6474,6512,6611,6672,7920,9109&RawValues=USERID%252Ca1c4b1d-21036-1513841695-1309185446&Redirect=;ord=bmAweRw,bharfniccviK[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[10].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[11].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[3].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[4].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[5].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[6].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[7].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[8].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[9].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\93;sz=160x600;ord=1301336975884;u=i_8060280971322147437_m_145789;dcopt=ist;tile=1;um=0;us=13;eb_trk=145789;pr=20;xp=20;np=20;uz=;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\=4&richmedia=true&posName=popup&special=popup&tagID=ambient&ngserious=CNC&adsize=1x1&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\al=rectangle&adsize=619x60&category=mail&pageview=ng_outer§ion=&pp=DE_63571&pa=54&pg=w&pageview=natlang_&pageview=employstat_AN&pageview=gmx_ulevel0&pageview=top[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\ayerskin&tile=265746&site=gmx§ion=nachrichten&resrc=13526118&contype=&conpartner=12443&concategory=nachrichten&ngserious=®ion=de&pg=w&pp=DE_63571&pa=-1&cc=DE[1].xml not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\dP;sz=300x250;ord=1301336946865;u=i_8060211925695151196_m_167588;dcopt=ist;tile=1;um=0;us=13;eb_trk=167588;pr=20;xp=20;np=20;uz=;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\ichmedia=false&posName=sky&special=sky&tagID=sky_right&ngserious=CNC&adsize=160x600&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\ms=21;sz=160x600;ord=1301337287167;u=i_8060303099529873022%7Cm_145789;tile=2;um=6;us=13;eb_trk=145789;pr=30;xp=30;np=30;uz=63571;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\ntad&ngserious=CNC&keyword=Unwetter&keyword=KaribikUSA&adsize=300x250&adsize=600x250&tile=920765533503678433832416123366&transactionID=920765533503678433832416123366[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\tangle&special=rectangle&tagID=rectangle&ngserious=CNC&adsize=300x250&adsize=300x600&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\tangle&special=rectangle&tagID=rectangle&ngserious=CNC&adsize=300x250&adsize=300x600&tile=925703336099439276795415243102&transactionID=925703336099439276795415243102[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\ype=&conpartner=12443&concategory=nachrichten&ngserious=®ion=de&pg=w&pp=DE_63571&pa=-1&cc=DE&concategory=nachrichten&contype=PR&conpartner=9280110&resId=13526118[1].xml not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[3].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[4].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[5].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\=i7;s=i8;s=i9;s=40;s=1066;s=1158;s=718;s=440;s=1092;s=762;s=562;s=20;s=363;s=1140;s=770;s=772;s=182;s=602;s=388;s=389;s=u17;s=u5;s=u6;s=m4;s=u9;s=m1;z=77;z=37;tile=2[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\=i7;s=i8;s=i9;s=40;s=1066;s=1158;s=718;s=440;s=1092;s=762;s=562;s=20;s=363;s=1140;s=770;s=772;s=182;s=602;s=388;s=389;s=u5;s=m4;s=u17;s=m1;s=u9;s=u6;z=77;z=37;tile=1[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\=true&keyword=Frankreich&keyword=PraesidentKinderLeute&adsize=300x250&adsize=600x250&tile=176017866600174823024461217624&transactionID=176017866600174823024461217624[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\h=true&keyword=Notfaelle&keyword=FrankreichDeutschland&adsize=300x250&adsize=300x600&tile=757458157400821902884874373487&transactionID=757458157400821902884874373487[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\ious=CNC&poshigh=true&keyword=Leute&keyword=Frankreich&adsize=300x250&adsize=600x250&tile=545565007011361674729573269596&transactionID=545565007011361674729573269596[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\true&posName=popup&special=popup&tagID=ambient&ngserious=CNC&poshigh=true&adsize=1x1&tile=858252065494199393421312787878&transactionID=858252065494199393421312787878[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[3].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[4].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[5].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[6].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[7].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[8].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\=CNC&poshigh=true&keyword=Kriminalitaet&keyword=Segeln&adsize=300x250&adsize=300x600&tile=897526947951010290272990297120&transactionID=897526947951010290272990297120[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\=CNC&poshigh=true&keyword=Kriminalitaet&keyword=Segeln&adsize=300x250&adsize=600x250&tile=170734361782895367663653381038&transactionID=170734361782895367663653381038[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\=i7;s=i8;s=i9;s=40;s=1066;s=1158;s=718;s=440;s=1092;s=762;s=562;s=20;s=363;s=1140;s=770;s=772;s=182;s=602;s=388;s=389;s=u9;s=m1;s=m4;s=u5;s=u6;s=u17;z=77;z=37;tile=1[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=176017866600174823024461217624&transactionID=176017866600174823024461217624[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=757458157400821902884874373487&transactionID=757458157400821902884874373487[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\h=true&keyword=Notfaelle&keyword=FrankreichDeutschland&adsize=300x250&adsize=600x250&tile=757458157400821902884874373487&transactionID=757458157400821902884874373487[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\ious=CNC&poshigh=true&keyword=Leute&keyword=Frankreich&adsize=300x250&adsize=300x600&tile=545565007011361674729573269596&transactionID=545565007011361674729573269596[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\l=rectangle&tagID=rectangle&ngserious=CNC&poshigh=true&adsize=300x250&adsize=300x600&tile=305807186280840970393184635677&transactionID=305807186280840970393184635677[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\l=rectangle&tagID=rectangle&ngserious=CNC&poshigh=true&adsize=300x250&adsize=300x600&tile=858252065494199393421312787878&transactionID=858252065494199393421312787878[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\0nMBP5DhB1O4ZFwlHKN-pm0UnOWtuU5PhQ-oTNo-u7p9It2gPOtInMyXPi9j2_ufjc40Uu02ttq1VmzN7CySpfoSCWDpotnuJptNTPOhhFNcYCBbZoeW79FvA9TcKoQaE3lApXRRfwk2bkxGlfHWqOY_HOMp30WGA_Cw[1].gif not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[10].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[11].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[3].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[4].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[5].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[6].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[7].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[8].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[9].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=122320714572377366037088959725&transactionID=122320714572377366037088959725[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=920765533503678433832416123366&transactionID=920765533503678433832416123366[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\ia=true&posName=popup&special=popup&tagID=ambient&ngserious=CNC&pagetab=8&adsize=1x1&tile=122320714572377366037088959725&transactionID=122320714572377366037088959725[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\ichmedia=false&posName=sky&special=sky&tagID=sky_right&ngserious=CNC&adsize=160x600&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\ichmedia=false&posName=sky&special=sky&tagID=sky_right&ngserious=CNC&adsize=160x600&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\ngle&ngserious=CNC&keyword=Unwetter&keyword=KaribikUSA&adsize=300x250&adsize=300x600&tile=920765533503678433832416123366&transactionID=920765533503678433832416123366[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\ngserious=CNC&adsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[3].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[4].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[5].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[6].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[7].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[8].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[9].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\24;s=52;s=384;s=106;s=775;s=425;s=388;s=602;s=178;s=40;s=216;s=1083;s=347;s=621;s=1066;s=218;s=m1;s=u6;s=u5;s=u9;s=u17;z=64;z=37;z=66;z=1974;z=1972;z=1945;z=3;tile=2[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\24;s=52;s=384;s=106;s=775;s=425;s=388;s=602;s=178;s=40;s=216;s=1083;s=347;s=621;s=1066;s=218;s=m1;s=u6;s=u5;s=u9;s=u17;z=66;z=64;z=37;z=1974;z=1972;z=1945;z=3;tile=1[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[10].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[11].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[1].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[2].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[3].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[4].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[5].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[6].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[7].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[8].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[9].htm not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\=CNC&poshigh=true&keyword=Kriminalitaet&keyword=Segeln&adsize=300x250&adsize=300x600&tile=170734361782895367663653381038&transactionID=170734361782895367663653381038[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\=i7;s=i8;s=i9;s=40;s=1066;s=1158;s=718;s=440;s=1092;s=762;s=562;s=20;s=363;s=1140;s=770;s=772;s=182;s=602;s=388;s=389;s=m1;s=u9;s=u5;s=u6;s=m4;s=u17;z=77;z=37;tile=2[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=305807186280840970393184635677&transactionID=305807186280840970393184635677[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=545565007011361674729573269596&transactionID=545565007011361674729573269596[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=897526947951010290272990297120&transactionID=897526947951010290272990297120[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=858252065494199393421312787878&transactionID=858252065494199393421312787878[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\gserious=CNC&poshigh=true&keyword=Notfaelle&keyword=FrankreichDeutschland&adsize=1x1&tile=757458157400821902884874373487&transactionID=757458157400821902884874373487[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\l=rectangle&tagID=contentad&ngserious=CNC&poshigh=true&adsize=300x250&adsize=600x250&tile=305807186280840970393184635677&transactionID=305807186280840970393184635677[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\l=rectangle&tagID=contentad&ngserious=CNC&poshigh=true&adsize=300x250&adsize=600x250&tile=858252065494199393421312787878&transactionID=858252065494199393421312787878[1].js not found!
File\Folder C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\tagID=ambient&ngserious=CNC&poshigh=true&keyword=Leute&keyword=Frankreich&adsize=1x1&tile=545565007011361674729573269596&transactionID=545565007011361674729573269596[1].js not found!
C:\Users\Gabi Lerch\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
PendingFileRenameOperations files...
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[3].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[4].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[5].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[6].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[7].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[8].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\=CNC&poshigh=true&keyword=Kriminalitaet&keyword=Segeln&adsize=300x250&adsize=600x250&tile=897526947951010290272990297120&transactionID=897526947951010290272990297120[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\=true&keyword=Frankreich&keyword=PraesidentKinderLeute&adsize=300x250&adsize=300x600&tile=176017866600174823024461217624&transactionID=176017866600174823024461217624[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=170734361782895367663653381038&transactionID=170734361782895367663653381038[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=757458157400821902884874373487&transactionID=757458157400821902884874373487[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=858252065494199393421312787878&transactionID=858252065494199393421312787878[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\S1MMWAW7\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=545565007011361674729573269596&transactionID=545565007011361674729573269596[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\RX1XP8NE\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\RX1XP8NE\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\RX1XP8NE\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[3].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\RX1XP8NE\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[4].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\RX1XP8NE\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[5].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\QZEB3NQR\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\QZEB3NQR\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\QZEB3NQR\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[3].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\QZEB3NQR\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[4].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\QZEB3NQR\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[5].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\QZEB3NQR\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[6].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\60x600;ord=1301337287167;u=i_8060303095503341171%7Cm_156603;dcopt=ist;tile=1;um=6;us=13;eb_trk=156603;pr=30;xp=30;np=30;uz=63571;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[10].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[11].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[3].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[4].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[5].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[6].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[7].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[8].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[9].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\93;sz=160x600;ord=1301336975884;u=i_8060219709250436184_m_145789;dcopt=ist;tile=1;um=0;us=13;eb_trk=145789;pr=20;xp=20;np=20;uz=;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\AZZGrrMlQ9uyBLmg9-Qf0uA6gojk8m3wxbOFvL-YvEaVrwUNhKrW_982bAqBSJ3w7d_hJA4nkjJfXh9Ty6gQ9daANEVWpzwy_9Vq_Njw6exywjgjFb2qD0xZ3dRs-yVyIwNi1yRkR6IgW_C3YQ&callback=google.LU[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\cial=rectangle&tagID=rectangle&ngserious=CNC&pagetab=8&adsize=300x250&adsize=300x600&tile=122320714572377366037088959725&transactionID=122320714572377366037088959725[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\CNC&pagetab=8&adsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&tile=122320714572377366037088959725&transactionID=122320714572377366037088959725[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=925703336099439276795415243102&transactionID=925703336099439276795415243102[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\eg=AdvGL3rdP;sz=300x250;ord=1301336946865;u=i_8060211925695151208_m_167599;tile=2;um=0;us=13;eb_trk=167599;pr=20;xp=20;np=20;uz=;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\ial=popup&tagID=ambient&ngserious=CNC&keyword=Unwetter&keyword=KaribikUSA&adsize=1x1&tile=920765533503678433832416123366&transactionID=920765533503678433832416123366[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\ype=&conpartner=12443&concategory=nachrichten&ngserious=®ion=de&pg=w&pp=DE_63571&pa=-1&cc=DE&concategory=nachrichten&contype=PR&conpartner=9280110&resId=13526118[1].xml not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\ype=&conpartner=12443&concategory=nachrichten&ngserious=®ion=de&pg=w&pp=DE_63571&pa=-1&cc=DE&concategory=nachrichten&contype=PR&conpartner=9280110&resId=13526118[2].xml not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\LP8LNX68\ype=&conpartner=12443&concategory=nachrichten&ngserious=®ion=de&pg=w&pp=DE_63571&pa=-1&cc=DE&concategory=nachrichten&contype=PR&conpartner=9280110&resId=13526118[3].xml not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\JFPPTI95\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\JFPPTI95\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\JFPPTI95\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[3].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\JFPPTI95\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[4].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\4&richmedia=false&posName=popup&special=popup&tagID=ambient&ngserious=CNC&adsize=1x1&tile=925703336099439276795415243102&transactionID=925703336099439276795415243102[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[10].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[11].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[3].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[4].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[5].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[6].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[7].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[8].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[9].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\93;sz=160x600;ord=1301336975884;u=i_8060240045114605604_m_145789;dcopt=ist;tile=1;um=0;us=13;eb_trk=145789;pr=20;xp=20;np=20;uz=;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\c8fd7684746;ord=174M1E7VFDN4RHZ2F1A4;s=i0;s=i2;s=i3;s=i4;s=i5;s=i6;s=i7;s=i8;s=i9;s=20;s=40;s=718;s=602;s=388;s=389;s=57;s=u9;s=u17;s=m4;s=u6;s=u5;s=m1;z=64;z=37;tile=1[1] not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\fcmYa--iFLcAJIwqkSAZZGrrMlQ9uyBLmg9-Qf0uA6gojk8m3wxbOFvL-YvEaVrwUNhKrW_982bAqBSJ3w7d_hJA4nkjJfXh9Ty6gQ9daANEVWpzwy_9Vq_Njw6exywjgjFb2qD0xZ3dRs-yVyIwNi1yRkR6IgW_C3YQ[1].gif not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\ichmedia=false&posName=sky&special=sky&tagID=sky_right&ngserious=CNC&adsize=160x600&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\ngserious=CNC&adsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&tile=925703336099439276795415243102&transactionID=925703336099439276795415243102[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IEM75LM6\rd=KaribikUSA&adsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&tile=920765533503678433832416123366&transactionID=920765533503678433832416123366[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\297,2309,2340,2342,2343,2359,2367,4760,4765,6474,6512,6611,6672,7920,9109&RawValues=USERID%252Ca1c4b1d-21036-1513841695-1309185446&Redirect=;ord=bmAweRw,bharfniccviK[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[10].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[11].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[3].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[4].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[5].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[6].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[7].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[8].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[9].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\93;sz=160x600;ord=1301336975884;u=i_8060280971322147437_m_145789;dcopt=ist;tile=1;um=0;us=13;eb_trk=145789;pr=20;xp=20;np=20;uz=;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\=4&richmedia=true&posName=popup&special=popup&tagID=ambient&ngserious=CNC&adsize=1x1&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\al=rectangle&adsize=619x60&category=mail&pageview=ng_outer§ion=&pp=DE_63571&pa=54&pg=w&pageview=natlang_&pageview=employstat_AN&pageview=gmx_ulevel0&pageview=top[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\ayerskin&tile=265746&site=gmx§ion=nachrichten&resrc=13526118&contype=&conpartner=12443&concategory=nachrichten&ngserious=®ion=de&pg=w&pp=DE_63571&pa=-1&cc=DE[1].xml not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\dP;sz=300x250;ord=1301336946865;u=i_8060211925695151196_m_167588;dcopt=ist;tile=1;um=0;us=13;eb_trk=167588;pr=20;xp=20;np=20;uz=;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\ichmedia=false&posName=sky&special=sky&tagID=sky_right&ngserious=CNC&adsize=160x600&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\ms=21;sz=160x600;ord=1301337287167;u=i_8060303099529873022%7Cm_145789;tile=2;um=6;us=13;eb_trk=145789;pr=30;xp=30;np=30;uz=63571;cg=1f9feb951270a0e203d6f696fd3ecb14[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\ntad&ngserious=CNC&keyword=Unwetter&keyword=KaribikUSA&adsize=300x250&adsize=600x250&tile=920765533503678433832416123366&transactionID=920765533503678433832416123366[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\tangle&special=rectangle&tagID=rectangle&ngserious=CNC&adsize=300x250&adsize=300x600&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\tangle&special=rectangle&tagID=rectangle&ngserious=CNC&adsize=300x250&adsize=300x600&tile=925703336099439276795415243102&transactionID=925703336099439276795415243102[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\I1KXVJMA\ype=&conpartner=12443&concategory=nachrichten&ngserious=®ion=de&pg=w&pp=DE_63571&pa=-1&cc=DE&concategory=nachrichten&contype=PR&conpartner=9280110&resId=13526118[1].xml not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[3].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[4].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[5].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\=i7;s=i8;s=i9;s=40;s=1066;s=1158;s=718;s=440;s=1092;s=762;s=562;s=20;s=363;s=1140;s=770;s=772;s=182;s=602;s=388;s=389;s=u17;s=u5;s=u6;s=m4;s=u9;s=m1;z=77;z=37;tile=2[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\=i7;s=i8;s=i9;s=40;s=1066;s=1158;s=718;s=440;s=1092;s=762;s=562;s=20;s=363;s=1140;s=770;s=772;s=182;s=602;s=388;s=389;s=u5;s=m4;s=u17;s=m1;s=u9;s=u6;z=77;z=37;tile=1[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\=true&keyword=Frankreich&keyword=PraesidentKinderLeute&adsize=300x250&adsize=600x250&tile=176017866600174823024461217624&transactionID=176017866600174823024461217624[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\h=true&keyword=Notfaelle&keyword=FrankreichDeutschland&adsize=300x250&adsize=300x600&tile=757458157400821902884874373487&transactionID=757458157400821902884874373487[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\ious=CNC&poshigh=true&keyword=Leute&keyword=Frankreich&adsize=300x250&adsize=600x250&tile=545565007011361674729573269596&transactionID=545565007011361674729573269596[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\H18GFPQU\true&posName=popup&special=popup&tagID=ambient&ngserious=CNC&poshigh=true&adsize=1x1&tile=858252065494199393421312787878&transactionID=858252065494199393421312787878[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[3].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[4].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[5].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[6].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[7].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[8].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\=CNC&poshigh=true&keyword=Kriminalitaet&keyword=Segeln&adsize=300x250&adsize=300x600&tile=897526947951010290272990297120&transactionID=897526947951010290272990297120[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\=CNC&poshigh=true&keyword=Kriminalitaet&keyword=Segeln&adsize=300x250&adsize=600x250&tile=170734361782895367663653381038&transactionID=170734361782895367663653381038[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\=i7;s=i8;s=i9;s=40;s=1066;s=1158;s=718;s=440;s=1092;s=762;s=562;s=20;s=363;s=1140;s=770;s=772;s=182;s=602;s=388;s=389;s=u9;s=m1;s=m4;s=u5;s=u6;s=u17;z=77;z=37;tile=1[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=176017866600174823024461217624&transactionID=176017866600174823024461217624[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=757458157400821902884874373487&transactionID=757458157400821902884874373487[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\h=true&keyword=Notfaelle&keyword=FrankreichDeutschland&adsize=300x250&adsize=600x250&tile=757458157400821902884874373487&transactionID=757458157400821902884874373487[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\ious=CNC&poshigh=true&keyword=Leute&keyword=Frankreich&adsize=300x250&adsize=300x600&tile=545565007011361674729573269596&transactionID=545565007011361674729573269596[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\l=rectangle&tagID=rectangle&ngserious=CNC&poshigh=true&adsize=300x250&adsize=300x600&tile=305807186280840970393184635677&transactionID=305807186280840970393184635677[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\EYM2A3T0\l=rectangle&tagID=rectangle&ngserious=CNC&poshigh=true&adsize=300x250&adsize=300x600&tile=858252065494199393421312787878&transactionID=858252065494199393421312787878[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\0nMBP5DhB1O4ZFwlHKN-pm0UnOWtuU5PhQ-oTNo-u7p9It2gPOtInMyXPi9j2_ufjc40Uu02ttq1VmzN7CySpfoSCWDpotnuJptNTPOhhFNcYCBbZoeW79FvA9TcKoQaE3lApXRRfwk2bkxGlfHWqOY_HOMp30WGA_Cw[1].gif not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[10].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[11].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[3].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[4].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[5].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[6].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[7].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[8].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\7.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4[9].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=122320714572377366037088959725&transactionID=122320714572377366037088959725[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=920765533503678433832416123366&transactionID=920765533503678433832416123366[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\ia=true&posName=popup&special=popup&tagID=ambient&ngserious=CNC&pagetab=8&adsize=1x1&tile=122320714572377366037088959725&transactionID=122320714572377366037088959725[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\ichmedia=false&posName=sky&special=sky&tagID=sky_right&ngserious=CNC&adsize=160x600&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\ichmedia=false&posName=sky&special=sky&tagID=sky_right&ngserious=CNC&adsize=160x600&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\ngle&ngserious=CNC&keyword=Unwetter&keyword=KaribikUSA&adsize=300x250&adsize=300x600&tile=920765533503678433832416123366&transactionID=920765533503678433832416123366[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\DBHFF1K4\ngserious=CNC&adsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&tile=803365347144461153133915017276&transactionID=803365347144461153133915017276[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[3].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[4].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[5].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[6].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[7].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[8].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7GT5GYUU\2105548527.1333110154.887015e9&freemailuseragent=Mozilla%2F5.0+(compatible%3B+MSIE+9.0%3B+Windows+NT+6.1%3B+WOW64%3B+Trident%2F5.0%3B+tb-gmx%2F1.7.2%3B+(gmx%2F1.0.0[9].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\24;s=52;s=384;s=106;s=775;s=425;s=388;s=602;s=178;s=40;s=216;s=1083;s=347;s=621;s=1066;s=218;s=m1;s=u6;s=u5;s=u9;s=u17;z=64;z=37;z=66;z=1974;z=1972;z=1945;z=3;tile=2[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\24;s=52;s=384;s=106;s=775;s=425;s=388;s=602;s=178;s=40;s=216;s=1083;s=347;s=621;s=1066;s=218;s=m1;s=u6;s=u5;s=u9;s=u17;z=66;z=64;z=37;z=1974;z=1972;z=1945;z=3;tile=1[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[10].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[11].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[1].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[2].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[3].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[4].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[5].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[6].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[7].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[8].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\64%3B+Trident%2F5.0%3B+SLCC2%3B+.NET+CLR+2.0.50727%3B+.NET+CLR+3.5.30729%3B+.NET+CLR+3.0.30729%3B+Media+Center+PC+6.0%3B+CPNTDF%3B+.NET4.0C%3B+AskTbAVR-IDW%2F5.12.5[9].htm not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\=CNC&poshigh=true&keyword=Kriminalitaet&keyword=Segeln&adsize=300x250&adsize=300x600&tile=170734361782895367663653381038&transactionID=170734361782895367663653381038[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\=i7;s=i8;s=i9;s=40;s=1066;s=1158;s=718;s=440;s=1092;s=762;s=562;s=20;s=363;s=1140;s=770;s=772;s=182;s=602;s=388;s=389;s=m1;s=u9;s=u5;s=u6;s=m4;s=u17;z=77;z=37;tile=2[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=305807186280840970393184635677&transactionID=305807186280840970393184635677[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=545565007011361674729573269596&transactionID=545565007011361674729573269596[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\dsize=728x90&adsize=468x60&adsize=234x60&adsize=778x90&adsize=810x250&adsize=970x250&tile=897526947951010290272990297120&transactionID=897526947951010290272990297120[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\e=120x600&adsize=160x600&adsize=300x600&adsize=320x600&adsize=120x835&adsize=160x835&tile=858252065494199393421312787878&transactionID=858252065494199393421312787878[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\gserious=CNC&poshigh=true&keyword=Notfaelle&keyword=FrankreichDeutschland&adsize=1x1&tile=757458157400821902884874373487&transactionID=757458157400821902884874373487[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\l=rectangle&tagID=contentad&ngserious=CNC&poshigh=true&adsize=300x250&adsize=600x250&tile=305807186280840970393184635677&transactionID=305807186280840970393184635677[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\l=rectangle&tagID=contentad&ngserious=CNC&poshigh=true&adsize=300x250&adsize=600x250&tile=858252065494199393421312787878&transactionID=858252065494199393421312787878[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\1G9PA95E\tagID=ambient&ngserious=CNC&poshigh=true&keyword=Leute&keyword=Frankreich&adsize=1x1&tile=545565007011361674729573269596&transactionID=545565007011361674729573269596[1].js not found!
File C:\Users\Gabi Lerch\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!
Registry entries deleted on Reboot...
Gabi |
|
| Themen zu Security Shield ganz weg nach Entfernen durch Malwarebytes Antimalware???? |
| ahnung, anti-malware, antimalware, beiträge, betriebssystem, dokumente, entfernen, euren, fenster, festgestellt, googeln, hallo zusammen, hilfe!, laptop, malware, malwarebytes, malwarebytes antimalware, rechner, schnell, security, security shield, seite, shield, trojaner lameshield, windows, zusammen |
Button.
Textbox von OTL - wenn OTL auf deutsch ist wird sie mit 
beschriftet
.
Linear-Darstellung
