Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Bundespolizei Trojaner selber entfernt? (https://www.trojaner-board.de/102402-bundespolizei-trojaner-selber-entfernt.html)

cody29 17.08.2011 22:42

MBR gefixed... hier das log

Code:

aswMBR version 0.9.8.978 Copyright(c) 2011 AVAST Software
Run date: 2011-08-17 23:38:08
-----------------------------
23:38:08.784    OS Version: Windows 6.0.6002 Service Pack 2
23:38:08.785    Number of processors: 2 586 0xE0C
23:38:08.786    ComputerName: LAPTOP  UserName: ***
23:38:10.086    Initialize success
23:38:16.475    AVAST engine defs: 11081701
23:39:47.833    Verifying
23:39:57.867    Disk 0 Windows 600 MBR fixed successfully
23:40:28.852    Disk 0 MBR has been saved successfully to "E:\***\Desktop\MBR.dat"
23:40:28.860    The log file has been saved successfully to "E:\***\Desktop\aswMBR.txt"


cosinus 17.08.2011 23:03

Ok, bitte zur Sicherheit ein neues Log mit aswmbr machen

cody29 17.08.2011 23:59

ok, neues Log nach neuem Scan:

Btw. der unbekannte MBR müßte vom Ubuntu Linux kommen, mein System lief über GRUB.
Jetzt startet nur noch Windows aber ich glaube dass kann ich dann später selber fixen.

Code:

aswMBR version 0.9.8.978 Copyright(c) 2011 AVAST Software
Run date: 2011-08-18 00:43:54
-----------------------------
00:43:54.035    OS Version: Windows 6.0.6002 Service Pack 2
00:43:54.050    Number of processors: 2 586 0xE0C
00:43:54.050    ComputerName: LAPTOP  UserName: ***
00:43:58.013    Initialize success
00:44:16.171    AVAST engine defs: 11081701
00:44:32.270    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
00:44:32.270    Disk 0 Vendor: FUJITSU_MHW2160BH 0085001C Size: 152627MB BusType: 3
00:44:34.298    Disk 0 MBR read successfully
00:44:34.298    Disk 0 MBR scan
00:44:34.298    Disk 0 Windows VISTA default MBR code
00:44:34.314    Disk 0 scanning sectors +312576705
00:44:34.392    Disk 0 scanning C:\Windows\system32\drivers
00:44:49.696    Service scanning
00:44:51.256    Service Vsdatant C:\Windows\system32\DRIVERS\vsdatant.sys **LOCKED** 32
00:44:51.833    Modules scanning
00:44:58.744    Disk 0 trace - called modules:
00:44:58.759    ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys
00:44:58.759    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85b1a1e0]
00:44:59.274    3 CLASSPNP.SYS[889ac8b3] -> nt!IofCallDriver -> [0x85402c48]
00:44:59.274    5 acpi.sys[8829e6bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x85408b98]
00:44:59.742    AVAST engine scan C:\Windows
00:45:02.550    AVAST engine scan C:\Windows\system32
00:48:05.242    AVAST engine scan C:\Windows\system32\drivers
00:48:20.998    AVAST engine scan C:\Users\***
00:53:41.858    AVAST engine scan C:\ProgramData
00:55:12.775    Scan finished successfully
00:55:39.139    Disk 0 MBR has been saved successfully to "E:\***\Desktop\MBR.dat"
00:55:39.139    The log file has been saved successfully to "E:\***\Desktop\aswMBR.txt"


cosinus 18.08.2011 00:00

Zitat:

00:44:34.298 Disk 0 Windows VISTA default MBR code
Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!


Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


cody29 19.08.2011 06:44

malwarebytes:

Code:

Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Database version: 7499

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19120

18.08.2011 19:28:34
mbam-log-2011-08-18 (19-28-33).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|)
Objects scanned: 421022
Time elapsed: 1 hour(s), 46 minute(s), 28 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

SASW
Die Loader.exe gehört zu einem mir bekanntem Programm...

Code:

SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 08/18/2011 at 11:21 PM

Application Version : 5.0.1118

Core Rules Database Version : 7574
Trace Rules Database Version: 5386

Scan type      : Complete Scan
Total Scan Time : 03:34:23

Operating System Information
Windows Vista Home Premium 32-bit, Service Pack 2 (Build 6.00.6002)
UAC On - Limited User (Administrator User)

Memory items scanned      : 621
Memory threats detected  : 0
Registry items scanned    : 35938
Registry threats detected : 0
File items scanned        : 218178
File threats detected    : 639

Adware.Tracking Cookie
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@2o7[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@ad.yieldmanager[2].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@ad.yieldmanager[3].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@adfarm1.adition[2].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@adtech[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@advertising[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@advertising[2].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@adx.chip[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@apmebf[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@apmebf[2].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@apmebf[3].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@at.atwola[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@atdmt[2].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@atwola[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@content.yieldmanager[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@content.yieldmanager[3].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@de.at.atwola[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@doubleclick[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@doubleclick[2].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@doubleclick[3].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@doubleclick[4].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@doubleclick[5].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@mediaplex[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@mediaplex[2].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@mediaplex[4].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@r1-ads.ace.advertising[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@smartadserver[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@smartadserver[2].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@smartadserver[4].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@tacoda.at.atwola[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@tacoda[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@tradedoubler[2].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@traffictrack[1].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@weborama[2].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@zanox-affiliate[2].txt
        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@zanox[1].txt
        2mdn.net [ D:\USERS\*****\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\3MWKS8SP ]
        cdn5.specificclick.net [ D:\USERS\*****\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\3MWKS8SP ]
        ia.media-imdb.com [ D:\USERS\*****\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\3MWKS8SP ]
        media01.kyte.tv [ D:\USERS\*****\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\3MWKS8SP ]
        mediadb.kicker.de [ D:\USERS\*****\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\3MWKS8SP ]
        www.ardmediathek.de [ D:\USERS\*****\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\3MWKS8SP ]
        www.sexkiste.com [ D:\USERS\*****\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\3MWKS8SP ]
        D:\USERS\*****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\*****@BS.SERVING-SYS[1].TXT
        D:\USERS\*****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\*****@SERVING-SYS[1].TXT
        .adtech.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .bluestreak.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        statse.webtrendslive.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        rotator.adjuggler.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        rotator.adjuggler.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        adsrv.admediate.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        adsrv.admediate.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        www6.addfreestats.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .de.at.atwola.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        zbox.zanox.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .divx.112.2o7.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .tacoda.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .tacoda.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .tacoda.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        banner.slashcam.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        stats.ilsemedia.nl [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .ipcmedia.122.2o7.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        cdn5.specificclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        cdn5.specificclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        tracking.dc-storm.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .vodafonegroup.122.2o7.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .tracker.adtaily.pl [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .chitika.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .kontera.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .kontera.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .kontera.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        ad.adserver01.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .media-convert.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .media-convert.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .adecn.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .microsoftsto.112.2o7.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .revenue.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .moviepilot.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .moviepilot.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        www.moviepilot.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        adserver.wolterskluwer.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .himedia.individuad.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        user.lucidmedia.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .adxpose.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        rgadvert.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .sexkiste.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .sexkiste.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        adserver.itsfogo.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        in.getclicky.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .bt.ilsemedia.nl [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ D:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\0AGPOQQ7.DEFAULT\COOKIES.SQLITE ]
        adserver.new-directions.de [ C:\USERS\****\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\3MU4UL64 ]
        spe.atdmt.com [ C:\USERS\****\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\3MU4UL64 ]
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@MEDIAPLEX[2].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@WWW.ETRACKER[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@SERVING-SYS[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@TRAFFIC.MPNRS[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@AD.ZANOX[2].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@STAT.DEALTIME[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@ATDMT[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@INDEXTOOLS[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@ADTECH[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@TRADEDOUBLER[2].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@TRACK.WEBTREKK[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@ZBOX.ZANOX[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@DOUBLECLICK[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@ADVIVA[2].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@ADFARM1.ADITION[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@BS.SERVING-SYS[2].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@AS1.FALKAG[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@ALLESKLARCOMAG.112.2O7[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@WWW.NEWSCLICK[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@STATSE.WEBTRENDSLIVE[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@DEALTIME[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@2O7[2].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@E-2DJ6WCLIOJD5GEO.STATS.ESOMNITURE[2].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@ADVERTISING[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@ADS.HEIAS[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@BAADSERVE.BAPLC[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@AD.YIELDMANAGER[2].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@WWW.GOOGLEADSERVICES[2].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@WWW.GOOGLEADSERVICES[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@EAS.APM.EMEDIATE[2].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@APMEBF[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\****@MSNPORTAL.112.2O7[1].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\****@DIVX.ADBUREAU[2].TXT
        C:\USERS\****\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\****@2O7[1].TXT
        .adopt.euroclick.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        www6.addfreestats.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        stat.onestat.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        stat.onestat.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        rotator.adjuggler.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        rotator.adjuggler.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .s0.2mdn.net [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        ad.adserver01.de [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RMZSAGHJ.DEFAULT\COOKIES.SQLITE ]
        bc.youporn.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        cdn5.specificclick.net [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        ch.mediaplanet.streamingbolaget.se [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        clicksor.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        content.oddcast.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        enterotracker.de [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        flashplayer.e-media.de [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        googleads.g.doubleclick.net [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        ia.media-imdb.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        m.de.2mdn.net [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        m1.emea.2mdn.net [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        media.fliptrack.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        media.movieweb.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        media.mtvnservices.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        media.scanscout.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        media.tattomedia.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        media01.kyte.tv [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        media1.break.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        mediadb.kicker.de [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        objects.tremormedia.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        pagead2.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        secure-us.imrworldwide.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        sftrack.searchforce.net [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        spe.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        static.youporn.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        track.webgains.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        www.adservercentral.info [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        www.ardmediathek.de [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        www.c-webstats.de [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        www.eccemedia.tv [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        www2.satzmedia-catalog.com [ C:\USERS\***\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\XW4V8WLC ]
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@TTO2.TRAFFICTRACK[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@SERVING-SYS[2].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@AD.ZANOX[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@ATDMT[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@DOUBLECLICK[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@ADTECH[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@ZBOX.ZANOX[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@AD2.ADFARM1.ADITION[2].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@AD3.ADFARM1.ADITION[2].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@ADSERVER.71I[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@ZANOX-AFFILIATE[2].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@STATCOUNTER[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@WWW.ETRACKER[2].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@DATA.COREMETRICS[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@ADFARM1.ADITION[2].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@ZANOX[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@TRACK.WEBTREKK[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@MSNPORTAL.112.2O7[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@PARSHIP.122.2O7[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@BS.SERVING-SYS[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@TRADEDOUBLER[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@ADSERVER.JUGENDHERBERGE[2].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@ADS.HEIAS[1].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@TRAFFICTRACK[2].TXT
        C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@SEVENONEINTERMEDIA.112.2O7[1].TXT
        .mediaconverter.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.mediaconverter.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .mediaconverter.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        in.getclicky.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .tribalfusion.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        stat.onestat.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        stat.onestat.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        stat.dealtime.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .rambler.ru [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .secmedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        fr.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        fr.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        de.si*****at.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .clickandbuy.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .clickandbuy.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .xxxlmoebelhaeuser.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .xxxlmoebelhaeuser.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .pumpendiscounter.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .pumpendiscounter.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .track.webgains.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6wjlyskdjebo.stats.esomniture.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6wjlocic5clq.stats.esomniture.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6wclosjazsgq.stats.esomniture.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6aekysgczogo.stats.esomniture.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .stats.paypal.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        wstat.wibiya.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        s3.trafficmaxx.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        tracking.tchibo.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .dmtracker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        medianac.nacamar.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .estat.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adcentriconline.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .komtrack.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .komtrack.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        tracking.klicktel.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        tracking.klicktel.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        stats.hudora.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.trafficrank.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        s04.flagcounter.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        s03.flagcounter.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .a.revenuemax.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .yadro.ru [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        vb.mol.vs.bluedotmedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        vb.mol.vs.bluedotmedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        stats.ilsemedia.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .bt.ilsemedia.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .country-garden.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        track.webtrekk.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .movitex.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .skydeutschland.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .deutschepostag.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .ice.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .ipcmedia.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .sevenoneintermedia.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .opodo.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .blau.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .comvelgmbh.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .budgetcarhire.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .hertz.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .olympiaverlag.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .tjx.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .paypal.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .divx.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .wlw.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .loyaltypartner.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .myhammer.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .travidia.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .guj.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .libri.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .starzmedia.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .stepstone.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .conrad.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .philips.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .warnerbros.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .moviepilot.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .moviepilot.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        s09.flagcounter.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www9.addfreestats.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .4stats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .4stats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .4stats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .4stats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .4stats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .4stats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .content.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        adservercentral.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        track.neckermann.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        track.neckermann.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        track.neckermann.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad.adserver01.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .4stats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .4stats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .newsclick.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .newsclick.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        adserver.dnworker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .xm.xtendmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .j2global.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        zbox.zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .sundiscount.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .sundiscount.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .komtrack.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .komtrack.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .myroitracking.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .bravenet.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www6.addfreestats.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ww251.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        www.moviepilot.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .moviepilot.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .moviepilot.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        track.webtrekk.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        statse.webtrendslive.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .stats.canalblog.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .wetterstationen.meteomedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .wetterstationen.meteomedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]
        .wetterstationen.meteomedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AZQGCGKW.DEFAULT\COOKIES.SQLITE ]

Trojan.Unclassified/Loader-Suspicious
        E:\****\DOCUMENTS\SCHULE\GESCHICHTE\WELT ZEIT GESELLSCHAFT\WELT ZEIT GESELLSCHAFT 2\LOADER.EXE

ESET:

Code:

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=0e0c1f9599e982428545a8677e9ff642
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-08-19 01:41:24
# local_time=2011-08-19 03:41:24 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1797 16775165 100 100 6079 88605449 0 0
# compatibility_mode=5892 16776637 100 100 108343 151241613 0 0
# compatibility_mode=8192 67108863 100 0 118 118 0 0
# compatibility_mode=9217 16777214 75 66 107762561 109162993 0 0
# scanned=273565
# found=4
# cleaned=0
# scan_time=9199
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\7bb99554-37eb1ea6        probably a variant of Win32/Agent.DYXWUMY trojan (unable to clean)        00000000000000000000000000000000        I
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\556445eb-681b57ab        probably a variant of Win32/Agent.DYXWUMY trojan (unable to clean)        00000000000000000000000000000000        I
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\fa8f07a-6afcb2cf        probably a variant of Win32/Agent.DYXWUMY trojan (unable to clean)        00000000000000000000000000000000        I
D:\Program Files\Hotspot Shield\bin\openvpnas.exe        a variant of Win32/HotSpotShield application (unable to clean)        00000000000000000000000000000000        I


cosinus 19.08.2011 16:11

Zitat:

E:\****\DOCUMENTS\SCHULE\GESCHICHTE\WELT ZEIT GESELLSCHAFT\WELT ZEIT GESELLSCHAFT 2\LOADER.EXE
Was soll das sein?

Zitat:

D:\Program Files\Hotspot Shield\bin\openvpnas.exe
Scheint wohl eher ein Fehlalarm zu sein. Benötigst du dieses Programm überhaupt?
Ansonsten nur harmlose Cookies. Rechner soweit wieder im Lot?

cody29 19.08.2011 20:23

Den HotspotShield brauche ich nicht mehr, könnte also weg.
Das andere Programm braucht meine Frau, sie ist Lehrerin. Bin auch der Überzeugung, dass das ein Fehlalarm ist.

Der Rechner sieht soweit ok aus. Sind wir dann damit durch?

cosinus 19.08.2011 21:05

Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. CF kann über Start, Ausführen mit combofix /uninstall entfernt werden. Melde dich falls es da Fehlermeldungen zu gibt.
Malwarebytes zu behalten ist kein Fehler. Kannst ja 1x im Monat damit scannen, aber immer vorher ans Update denken.

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers, hier der direkte Downloadlink:

Mozilla und andere Browser => http://filepony.de/?q=Flash+Player
Internet Explorer => http://fpdownload.adobe.com/get/flas..._player_ax.exe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.

cody29 22.08.2011 09:39

OK, super dass wir damit durch sind.

Vielen Dank für Deine Hilfe.


Alle Zeitangaben in WEZ +1. Es ist jetzt 20:53 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19