Win32.Agent.fbx - TrojansC gefunden

 
Scan type : Complete Scan
Total Scan Time : 02:29:34
 
Memory items scanned : 454
Memory threats detected : 2
Registry items scanned : 8720
Registry threats detected : 7
File items scanned : 153514
File threats detected : 308
 
Adware.Vundo/Variant-X32[Header]
    C:\WINDOWS\SYSTEM32\CERTENROLLUI32.DLL
    C:\WINDOWS\SYSTEM32\CERTENROLLUI32.DLL
    HKLM\Software\Classes\CLSID\{02AC876D-EDCD-4323-8A6A-3C34D179411a}
    HKCR\CLSID\{02AC876D-EDCD-4323-8A6A-3C34D179411A}
    HKCR\CLSID\{02AC876D-EDCD-4323-8A6A-3C34D179411A}\InprocServer32
    HKCR\CLSID\{02AC876D-EDCD-4323-8A6A-3C34D179411A}\InprocServer32#ThreadingModel
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02AC876D-EDCD-4323-8A6A-3C34D179411a}
    HKU\S-1-5-21-3395950427-1089180542-3055491895-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02AC876D-EDCD-4323-8A6A-3C34D179411A}
    C:\PROGRAMDATA\CABINET32.DLL
    C:\PROGRAMDATA\CATSRVPS32.DLL
    C:\PROGRAMDATA\CLBCATQ32.DLL
    C:\PROGRAMDATA\CMICRYPTINSTALL32.DLL
    C:\PROGRAMDATA\CNGAUDIT32.DLL
    C:\PROGRAMDATA\CTL3D3232.DLL
    C:\PROGRAMDATA\DDRAW32.DLL
    C:\PROGRAMDATA\DIAGPERF32.DLL
    C:\PROGRAMDATA\DINPUT32.DLL
    C:\PROGRAMDATA\DMDSKRES32.DLL
    C:\PROGRAMDATA\DMSCRIPT32.DLL
    C:\PROGRAMDATA\DMVDSITF32.DLL
    C:\PROGRAMDATA\DOT3GPUI32.DLL
    C:\PROGRAMDATA\DPS32.DLL
    C:\PROGRAMDATA\DRMMGRTN32.DLL
    C:\PROGRAMDATA\DXTMSFT32.DLL
    C:\PROGRAMDATA\FDWSD32.DLL
    C:\PROGRAMDATA\FM2032.DLL
    C:\PROGRAMDATA\FRAMEDYNOS32.DLL
    C:\PROGRAMDATA\FWCFG32.DLL
    C:\PROGRAMDATA\GPTEXT32.DLL
    C:\WINDOWS\SYSTEM32\BLACKBOX32.DLL
    C:\WINDOWS\SYSTEM32\BTHMTPCONTEXTHANDLER32.DLL
    C:\WINDOWS\SYSTEM32\CEWMDM32.DLL
    C:\WINDOWS\SYSTEM32\COMCAT32.DLL
 
Trojan.Downloader-CREW
    C:\PROGRAMDATA\DFSHIM32.DLL
    C:\PROGRAMDATA\DFSHIM32.DLL
 
Trojan.Dropper/ADR-WV
    [RTHDBPL] C:\USERS\JüRGEN\APPDATA\ROAMING\SYSTEMPROC\LSASS.EXE
    C:\USERS\JüRGEN\APPDATA\ROAMING\SYSTEMPROC\LSASS.EXE
 
Adware.Tracking Cookie
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@bs.serving-sys[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@himedia.individuad[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@windowsmedia[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@ad.zanox[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@adfarm1.adition[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@serving-sys[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@www.windowsmedia[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@cdn5.specificclick[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@sonyeurope.112.2o7[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@zanox[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@tracking.quisma[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@www6.addfreestats[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@specificclick[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@unitymedia[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\jürgen@adtech[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@1.sharkadnetwork[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@2o7[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@4stats[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@99counters[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@a.findarticles[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@a2.adserver01[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@a3.adserver01[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@a6.adserver01[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@a7.adserver01[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.ad-srv[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.adc-serv[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.adnet[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.adserver01[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.boreus[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.ebook30[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.i-zone[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.salebroker[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.trackbar[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.tuttoscuola[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.yieldmanager[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.youporngay.videoboxmen[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad.zanox[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad1.chefkoch[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad1.clickhype[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad1.emediate[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ad2.doublepimp[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@adbrite[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@adcentriconline[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@adinterax[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@admarketplace[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads-dev.youporn[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.ad4game[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.adultadvertising[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.ak.facebook[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.cliquemusica.com[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.crowda[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.csn[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.cuisine[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.efm[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.enalquiler[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.esmadrid[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.esmas[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.famdirekt[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.foodbuzz[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.fulldls[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.glispa[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.h1351109.stratoserver[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.heias[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.hitsquad[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.medienhaus[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.mikinimedia[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.planetactive[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.prisacom[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.quartermedia[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.salir[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.shorttail[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.tcmdb[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.thesmokinggun[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.us.e-planning[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.whaleads[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads.youporn[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads1.adultadvertising[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads2.adultadvertising[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads2.infosystems[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ads2.weblogssl[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@adserver.boobfrog[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@adserver.easyadult[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@adserving.favorit-network[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@adsrv.admediate[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@advertise[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@adx.bixee[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@adx.chip[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@alphamalefuckers[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@atdmt[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@axelspringer.122.2o7[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@bd.bigmusclemedia[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@beacon.dmsinsights[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@bookfinder[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@bridge2.admarketplace[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@bs.serving-sys[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@chitika[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@click.mediadome[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@click.orgycash[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@click.superpaysys[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@click.yottacash[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@clicks.falconstudios[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@clicksor[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@collective-media[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@content.yieldmanager[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@content.yieldmanager[3].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@counter.sexsuche[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@countomat[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@cpx.mediascale[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@d.kaizentraffic[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@dc.tremormedia[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@delivery.ads.coupling-media[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@dev.gallerytrafficservice[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@dhdmedia[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@discount24[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@diximedia[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@doubleclick[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@eas.apm.emediate[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@eas4.emediate[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@ecnext.advertserve[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@elintermedio.lasexta[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@epochstats[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@epp.eurostat.ec.europa[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@euros4click[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@eyewonder[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@find.galegroup.com.proxy.queensu[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@findarticles[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@findarticles[3].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@fortunecity[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@freeporngiants[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@fuckovermyex[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@fucktube[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@gayfuckbook[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@gaysexer[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@gaysex[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@gaytrafficbroker[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@gayvodpornos[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@gotgayporn[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@grupogod.112.2o7[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@guj.122.2o7[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@hairyboyz[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@hairystudsvideo[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@hbxtracking.sueddeutsche[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@himedia.individuad[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@hotfuckbook[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@im.banner.t-online[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@imrworldwide[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@in.getclicky[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@interclick[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@invitemedia[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@komtrack[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@komtrack[3].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@komtrack[4].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@loadxl.exelator[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@media.mtvnservices[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@media.photobucket[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@media6degrees[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@mediafiles-express[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@mediametrics.mpsa[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@microsoftmachinetranslation.112.2o7[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@nakedkombat[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@nakedsword[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@oneclickfiles[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@openx.sexsearchcom[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@openxxx.viragemedia[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@pointroll[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@pornorawa[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@porntube[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@prisacom.112.2o7[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@pro-advertise[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@revsci[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@richmedia.yahoo[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@roitracking[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@rts.pgmediaserve[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@secure-media-sf2p.facebook[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@segittur.122.2o7[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@serving-sys[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@sex2ube.dvdtube[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@sex2ube[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@sexgaymes[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@sexo.videosyonkis[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@sonyeurope.112.2o7[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@soundtrackcollector[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@specificmedia[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@stat.novopress[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@stats.paypal[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@terra.112.2o7[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@theclickcheck[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@timeoutcommunications.122.2o7[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@track.effiliation[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@track.effiliation[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@track.webtrekk[10].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@track.webtrekk[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@track.webtrekk[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@track.webtrekk[3].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@track.webtrekk[4].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@track.webtrekk[5].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@track.webtrekk[6].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@track.webtrekk[7].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@track.webtrekk[8].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@track.webtrekk[9].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@tracking.mindshare[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@tracking.quisma[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@tradedoubler[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@traffictrack[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@triptosex[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@tto2.traffictrack[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@uknakedmen[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@unitymedia[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@vodchannels.maleflixxx[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@webmasterplan[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@wrestleandfuck[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@wunderloop.zanox[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.active-tracking[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.ad-track[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.adultadvertising[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.alphamalefuckers[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.exgfsextapes[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.gayfuckbook[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.googleadservices[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.gotgayporn[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.himmedia[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.hornysilver[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.nakedkombat[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.soundtrackcollector[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.traffictrack[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.uknakedmen[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.usenext[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www.zanox-affiliate[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@www9.discount24[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@xm.xtendmedia[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@xxx.falconstudios[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@youporncams[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@youporncocks[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@youporngay.videoboxmen[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@youporngay[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@youporn[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@zanox-affiliate[1].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@zanox[2].txt
    C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Cookies\Low\jürgen@zbox.zanox[2].txt
 
Trojan.Dropper/Sys-NV
    C:\PROGRAMDATA\BITSPRX332.DLL
    C:\PROGRAMDATA\BLACKBOX32.DLL
    C:\PROGRAMDATA\BTHMTPCONTEXTHANDLER32.DLL
    C:\PROGRAMDATA\CDDBCLEANROXIO32.DLL
    C:\PROGRAMDATA\CDOSYS32.DLL
    C:\PROGRAMDATA\CFGMGR3232.DLL
    C:\PROGRAMDATA\CMDIAL3232.DLL
    C:\PROGRAMDATA\CMUTIL32.DLL
    C:\PROGRAMDATA\COMSVCS32.DLL
    C:\PROGRAMDATA\CRTDLL32.DLL
    C:\PROGRAMDATA\CRYPTEXT32.DLL
    C:\PROGRAMDATA\CSCAPI32.DLL
    C:\PROGRAMDATA\D3D1032.DLL
    C:\PROGRAMDATA\D3D10_132.DLL
    C:\PROGRAMDATA\D3D832.DLL
    C:\PROGRAMDATA\D3DIM32.DLL
    C:\PROGRAMDATA\D3DX9_2732.DLL
    C:\PROGRAMDATA\DCIMAN3232.DLL
    C:\PROGRAMDATA\DESKADP32.DLL
    C:\PROGRAMDATA\DEVICEPAIRING32.DLL
    C:\PROGRAMDATA\DISPEX32.DLL
    C:\PROGRAMDATA\DMDLGS32.DLL
    C:\PROGRAMDATA\DMLOADER32.DLL
    C:\PROGRAMDATA\DNSRSLVR32.DLL
    C:\PROGRAMDATA\DOT3UI32.DLL
    C:\PROGRAMDATA\DPMODEMX32.DLL
    C:\PROGRAMDATA\DPNET32.DLL
    C:\PROGRAMDATA\DSAUTH32.DLL
    C:\PROGRAMDATA\DSOUND32.DLL
    C:\PROGRAMDATA\DSSEC32.DLL
    C:\PROGRAMDATA\DSWAVE32.DLL
    C:\PROGRAMDATA\DWMAPI32.DLL
    C:\PROGRAMDATA\DXGI32.DLL
    C:\PROGRAMDATA\EAPPCFG32.DLL
    C:\PROGRAMDATA\EAPQEC32.DLL
    C:\PROGRAMDATA\EHSTORAPI32.DLL
    C:\PROGRAMDATA\EHSTORSHELL32.DLL
    C:\PROGRAMDATA\EXPSRV32.DLL
    C:\PROGRAMDATA\FONTSUB32.DLL
    C:\PROGRAMDATA\GCDEF32.DLL
    C:\PROGRAMDATA\GETUNAME32.DLL