Facebookvirus verschickt über meinen Account Links
 

Hallo Leute,

ich habe seit gestern das Problem, dass Facebook über meinen Account ständig Links an all meine Freunde verschickt. Ich habe wahrscheinlich dummerweise versehentlich auf soeinen Link geklickt und mich mit diesem Phorpiex Schädling infiziert (der heißt doch so oder?).

Die Links die versendet werden sehen so aus: ":D ahahahahhapkf!! :O hxxp:// ... " bzw. "Sie in das Bild??vyg_ hxxp://..."

Avira hat nichts gefunden auf meinem PC und habe mir dann Malwarebytes runtergeladen, einen Vollscan durchgeführt und die Einträge entfernt.

Bei Facebook habe ich alle informiert, dass sie den Link bloß nicht öffnen sollen.

Wie bekomme ich den Virus jetzt vollständig von meinem PC?
Ich mache zB auch Onlinebanking über meinen Laptop!

Die Logs von Malwarebytes sind alle nachzureichen

Malwarebytes' Anti-Malware 1.51.2.1300
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Datenbank Version: 8142

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19154

11.11.2011 22:56:38
mbam-log-2011-11-11 (22-56-38).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 324355
Laufzeit: 1 Stunde(n), 1 Minute(n), 17 Sekunde(n)

Infizierte Speicherprozesse: 3
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 3
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 29

Infizierte Speicherprozesse:
c:\Users\msi mobile\AppData\Roaming\regsrv64.exe (Worm.Ngrbot) -> 3012 -> Unloaded process successfully.
c:\Users\msi mobile\AppData\Roaming\A958.exe (Worm.Ngrbot) -> 4644 -> Unloaded process successfully.
c:\Users\msi mobile\AppData\Roaming\F3FF.exe (Spyware.Passwords.XGen) -> 4748 -> Unloaded process successfully.

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft DLL Registration (Worm.Ngrbot) -> Value: Microsoft DLL Registration -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Vkmmmh (Trojan.Agent) -> Value: Vkmmmh -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU (Backdoor.HMCPol.Gen) -> Value: HKCU -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Users\msi mobile\AppData\Roaming\regsrv64.exe (Worm.Ngrbot) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\A958.exe (Worm.Ngrbot) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\F3FF.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\Vkmmmh.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\2IDXKA2R\b3[1].dat (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\835O9HFI\b3[1].dat (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Local\Temp\install-1.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\DBFE.exe (Worm.Ngrbot) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\22FC.exe (Worm.Ngrbot) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\23EC.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\658.exe (Worm.Ngrbot) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\760.exe (Worm.Ngrbot) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\7C31.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\86BF.exe (Worm.Ngrbot) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\9730.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\B2FE.exe (Worm.Ngrbot) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\B990.exe (Worm.Ngrbot) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\BC2C.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\BD7.exe (Worm.Ngrbot) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\D1B2.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\D5F7.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\DC5D.exe (Worm.Ngrbot) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\EBD4.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\F29C.exe (Worm.Ngrbot) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\FF2C.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Roaming\logs.dat (Bifrose.Trace) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Local\Temp\IELOGIN.abc (Malware.Trace) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Local\Temp\UuU.uUu (Malware.Trace) -> Quarantined and deleted successfully.
c:\Users\msi mobile\AppData\Local\Temp\XxX.xXx (Malware.Trace) -> Quarantined and deleted successfully.

Kann mir denn hier niemand helfen? :(

Gibt es noch weitere Logs von Malwarebytes? Wenn ja bitte alle posten, die in Malwarebytes im Reiter Logdateien sichtbar sind.

Nein, habe nur die eine Logdatei! Woher weiß ich denn jetzt, ob mein System noch infiziert ist oder nicht?

Führ bitte auch ESET aus, danach sehen wir weiter:


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Hallo, ich habe ESET ausgeführt, hat ganz schön lange gedauert!

Hier die Logdaten:

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=722c9f04af97134ab210e502484a64b3
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-11-14 11:30:46
# local_time=2011-11-15 12:30:46 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1032 16777214 0 1 15651540 15651540 0 0
# compatibility_mode=1797 16775165 100 94 1491796 57847177 1506964 0
# compatibility_mode=5892 16776574 100 100 23279031 158843084 0 0
# compatibility_mode=8192 67108863 100 0 3909 3909 0 0
# scanned=24453
# found=0
# cleaned=0
# scan_time=3090
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=722c9f04af97134ab210e502484a64b3
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-11-15 10:16:07
# local_time=2011-11-15 11:16:07 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1032 16777214 0 1 15725181 15725181 0 0
# compatibility_mode=1797 16775165 100 94 3910 57920818 0 0
# compatibility_mode=5892 16776574 100 100 23352672 158916725 0 0
# compatibility_mode=8192 67108863 100 0 77550 77550 0 0
# scanned=169535
# found=3
# cleaned=0
# scan_time=11372
C:\Users\MSI Mobile\AppData\Local\Temp\MyBabylonTB.exe a variant of Win32/Toolbar.Babylon application (unable to clean) 00000000000000000000000000000000 I
C:\Users\MSI Mobile\Downloads\SoftonicDownloader_fuer_avira-antivir.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I
C:\Users\MSI Mobile\Downloads\SoftonicDownloader_fuer_nero-lite.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I

CustomScan mit OTL

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

• Starte bitte die OTL.exe.
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Kopiere nun den kompletten Inhalt aus der untenstehenden Codebox in die http://billy-oneal.com/Canned%20Spee.../customFix.png Textbox von OTL - wenn OTL auf deutsch ist wird sie mit http://larusso.trojaner-board.de/Images/otlfix.jpg beschriftet

• Schliesse bitte nun alle Programme. (Wichtig)
• Klicke nun bitte auf den Quick Scan Button.
• Klick auf http://billy-oneal.com/Canned%20Spee.../OTL/btnOK.png.
• Kopiere nun den Inhalt aus OTL.txt hier in Deinen Thread

OTL Logfile:
--- --- ---

Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

All processes killed
========== OTL ==========
No active process named Updater.exe was found!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Search_URL| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache AcceptLangs| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search\\Default_Search_URL| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: toolbar@ask.com:3.11.3.15590 removed from extensions.enabledItems
Prefs.js: avg@igeared:6.103.018.001 removed from extensions.enabledItems
Prefs.js: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.3&q=" removed from keyword.URL
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\META-INF folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\lib folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\preferences folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\custombuttons folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\contenthandling folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\components folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\searchplugins folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\logs folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\defaults\preferences folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\defaults folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\datastore folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Wed-09-Nov-2011-13-21-59-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Wed-09-Nov-2011-13-21-54-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Wed-01-Jun-2011-11-09-53-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Tue-08-Nov-2011-14-53-55-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Thu-22-Sep-2011-16-28-27-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Thu-10-Nov-2011-16-50-15-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Thu-04-Nov-2010-17-42-03-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Sun-24-Oct-2010-10-01-41-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Sun-20-Mar-2011-21-16-32-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Sun-07-Nov-2010-14-22-04-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Sat-06-Aug-2011-10-45-51-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Mon-07-Nov-2011-17-17-39-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Fri-11-Nov-2011-14-10-31-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Fri-11-Nov-2011-14-06-08-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Fri-11-Nov-2011-14-03-59-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Fri-11-Nov-2011-14-02-03-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Fri-11-Nov-2011-13-56-27-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Fri-11-Nov-2011-13-54-32-GMT folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\temp folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\skin folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome\content folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com\chrome folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\mozilla\Firefox\Profiles\vtjotpbd.default\extensions\toolbar@ask.com folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-1.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-10.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-11.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-12.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-13.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-14.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-15.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-2.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-3.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-4.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-5.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-6.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-7.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-8.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin-9.xml moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\Mozilla\Firefox\Profiles\vtjotpbd.default\searchplugins\icqplugin.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}\ deleted successfully.
C:\Programme\Microsoft\BingBar\BingExt.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
C:\Programme\Ask.com\GenericAskToolbar.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f}\ deleted successfully.
File C:\Program Files\Microsoft\BingBar\BingExt.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Programme\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Programme\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ApnUpdater deleted successfully.
C:\Programme\Ask.com\Updater\Updater.exe moved successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\SpybotSD TeaTimer deleted successfully.
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe moved successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Vkmmmh deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
C:\autoexec.bat moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3166b86d-c25b-11df-8dea-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3166b86d-c25b-11df-8dea-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3166b86d-c25b-11df-8dea-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3166b86d-c25b-11df-8dea-806e6f6e6963}\ not found.
File E:\CDSetup.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{35f09913-ef6a-11df-a37b-002185bb7981}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{35f09913-ef6a-11df-a37b-002185bb7981}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{35f09913-ef6a-11df-a37b-002185bb7981}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{35f09913-ef6a-11df-a37b-002185bb7981}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5efbf702-261e-11e0-a13b-002185e13cb9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5efbf702-261e-11e0-a13b-002185e13cb9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5efbf702-261e-11e0-a13b-002185e13cb9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5efbf702-261e-11e0-a13b-002185e13cb9}\ not found.
File C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\DVR/AutoRun.exe start.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6353bb64-f0c4-11df-925a-002185e13cb9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6353bb64-f0c4-11df-925a-002185e13cb9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6353bb64-f0c4-11df-925a-002185e13cb9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6353bb64-f0c4-11df-925a-002185e13cb9}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{755b3009-04ae-11e1-9d39-002185e13cb9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{755b3009-04ae-11e1-9d39-002185e13cb9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{755b3009-04ae-11e1-9d39-002185e13cb9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{755b3009-04ae-11e1-9d39-002185e13cb9}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7a536951-c332-11df-b4f7-002185bb7981}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7a536951-c332-11df-b4f7-002185bb7981}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7a536951-c332-11df-b4f7-002185bb7981}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7a536951-c332-11df-b4f7-002185bb7981}\ not found.
File F:\LaunchU3.exe -a not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{965824b7-ef24-11df-9f48-002185e13cb9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{965824b7-ef24-11df-9f48-002185e13cb9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{965824b7-ef24-11df-9f48-002185e13cb9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{965824b7-ef24-11df-9f48-002185e13cb9}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{965824ca-ef24-11df-9f48-002185e13cb9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{965824ca-ef24-11df-9f48-002185e13cb9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{965824ca-ef24-11df-9f48-002185e13cb9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{965824ca-ef24-11df-9f48-002185e13cb9}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a6b957ef-dd3d-11df-a5de-002185e13cb9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a6b957ef-dd3d-11df-a5de-002185e13cb9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a6b957ef-dd3d-11df-a5de-002185e13cb9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a6b957ef-dd3d-11df-a5de-002185e13cb9}\ not found.
File H:\setup.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dfa4424b-0513-11e0-8c94-002185e13cb9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{dfa4424b-0513-11e0-8c94-002185e13cb9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dfa4424b-0513-11e0-8c94-002185e13cb9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{dfa4424b-0513-11e0-8c94-002185e13cb9}\ not found.
File F:\VTP_Manager.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ not found.
File F:\LaunchU3.exe -a not found.
C:\Users\MSI Mobile\AppData\Roaming\AVG10\cfgall folder moved successfully.
C:\Users\MSI Mobile\AppData\Roaming\AVG10 folder moved successfully.
========== FILES ==========
File\Folder C:\Programme\Ask.com not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: MSI Mobile
->Temp folder emptied: 114338741 bytes
->Temporary Internet Files folder emptied: 55206301 bytes
->Java cache emptied: 10591130 bytes
->FireFox cache emptied: 216142322 bytes
->Flash cache emptied: 20532 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 156381070 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 527,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.31.0 log created on 11182011_144718

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg


Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, Verknüpfungen auf dem Desktop oder im Startmenü unter "alle Programme" fehlen, bitte unhide ausführen:
Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop.
Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )
http://www.trojaner-board.de/images/icons/icon4.gif Windows-Vista und Windows-7-User müssen das Tool per Rechtsklick als Administrator ausführen! http://www.trojaner-board.de/images/icons/icon4.gif

18:01:20.0448 3476 TDSS rootkit removing tool 2.6.19.0 Nov 16 2011 12:18:50
18:01:20.0873 3476 ============================================================
18:01:20.0873 3476 Current date / time: 2011/11/18 18:01:20.0873
18:01:20.0873 3476 SystemInfo:
18:01:20.0873 3476
18:01:20.0874 3476 OS Version: 6.0.6002 ServicePack: 2.0
18:01:20.0874 3476 Product type: Workstation
18:01:20.0874 3476 ComputerName: MSIMOBILE-PC
18:01:20.0874 3476 UserName: MSI Mobile
18:01:20.0874 3476 Windows directory: C:\Windows
18:01:20.0874 3476 System windows directory: C:\Windows
18:01:20.0874 3476 Processor architecture: Intel x86
18:01:20.0874 3476 Number of processors: 2
18:01:20.0874 3476 Page size: 0x1000
18:01:20.0874 3476 Boot type: Normal boot
18:01:20.0875 3476 ============================================================
18:01:21.0543 3476 Initialize success
18:01:43.0842 5832 ============================================================
18:01:43.0842 5832 Scan started
18:01:43.0842 5832 Mode: Manual; SigCheck; TDLFS;
18:01:43.0842 5832 ============================================================
18:01:44.0288 5832 acedrv11 (e6f53d6c0dea3d375362265e175ca638) C:\Windows\system32\drivers\acedrv11.sys
18:01:44.0622 5832 acedrv11 - ok
18:01:44.0672 5832 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
18:01:44.0705 5832 ACPI - ok
18:01:44.0780 5832 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
18:01:44.0845 5832 adp94xx - ok
18:01:44.0869 5832 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
18:01:44.0919 5832 adpahci - ok
18:01:44.0955 5832 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
18:01:44.0990 5832 adpu160m - ok
18:01:45.0037 5832 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
18:01:45.0086 5832 adpu320 - ok
18:01:45.0204 5832 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
18:01:45.0309 5832 AFD - ok
18:01:45.0469 5832 AgereSoftModem (5d97943c128ed756d1b0a08302c1b1f8) C:\Windows\system32\DRIVERS\AGRSM.sys
18:01:45.0885 5832 AgereSoftModem - ok
18:01:45.0941 5832 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
18:01:45.0975 5832 agp440 - ok
18:01:45.0992 5832 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
18:01:46.0024 5832 aic78xx - ok
18:01:46.0052 5832 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
18:01:46.0073 5832 aliide - ok
18:01:46.0088 5832 ALIWEHCD - ok
18:01:46.0123 5832 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
18:01:46.0154 5832 amdagp - ok
18:01:46.0173 5832 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
18:01:46.0201 5832 amdide - ok
18:01:46.0228 5832 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
18:01:46.0342 5832 AmdK7 - ok
18:01:46.0366 5832 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
18:01:46.0435 5832 AmdK8 - ok
18:01:46.0513 5832 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
18:01:46.0551 5832 arc - ok
18:01:46.0569 5832 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
18:01:46.0606 5832 arcsas - ok
18:01:46.0637 5832 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
18:01:46.0709 5832 AsyncMac - ok
18:01:46.0742 5832 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
18:01:46.0765 5832 atapi - ok
18:01:46.0808 5832 AVGIDSShim - ok
18:01:46.0847 5832 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) C:\Windows\system32\DRIVERS\avgntflt.sys
18:01:46.0890 5832 avgntflt - ok
18:01:46.0916 5832 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) C:\Windows\system32\DRIVERS\avipbb.sys
18:01:46.0952 5832 avipbb - ok
18:01:46.0994 5832 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
18:01:47.0154 5832 Beep - ok
18:01:47.0206 5832 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
18:01:47.0299 5832 blbdrive - ok
18:01:47.0351 5832 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
18:01:47.0470 5832 bowser - ok
18:01:47.0510 5832 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
18:01:47.0666 5832 BrFiltLo - ok
18:01:47.0696 5832 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
18:01:47.0790 5832 BrFiltUp - ok
18:01:47.0825 5832 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
18:01:48.0006 5832 Brserid - ok
18:01:48.0031 5832 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
18:01:48.0141 5832 BrSerWdm - ok
18:01:48.0165 5832 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
18:01:48.0281 5832 BrUsbMdm - ok
18:01:48.0303 5832 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
18:01:48.0412 5832 BrUsbSer - ok
18:01:48.0446 5832 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
18:01:48.0560 5832 BTHMODEM - ok
18:01:48.0640 5832 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
18:01:48.0742 5832 cdfs - ok
18:01:48.0771 5832 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
18:01:48.0818 5832 cdrom - ok
18:01:48.0856 5832 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\DRIVERS\circlass.sys
18:01:48.0972 5832 circlass - ok
18:01:49.0032 5832 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
18:01:49.0098 5832 CLFS - ok
18:01:49.0203 5832 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
18:01:49.0268 5832 CmBatt - ok
18:01:49.0291 5832 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
18:01:49.0334 5832 cmdide - ok
18:01:49.0361 5832 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
18:01:49.0384 5832 Compbatt - ok
18:01:49.0413 5832 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
18:01:49.0442 5832 crcdisk - ok
18:01:49.0461 5832 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
18:01:49.0534 5832 Crusoe - ok
18:01:49.0642 5832 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
18:01:49.0716 5832 DfsC - ok
18:01:49.0754 5832 dgderdrv - ok
18:01:49.0802 5832 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
18:01:49.0826 5832 disk - ok
18:01:49.0925 5832 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
18:01:49.0996 5832 drmkaud - ok
18:01:50.0155 5832 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
18:01:50.0199 5832 DXGKrnl - ok
18:01:50.0218 5832 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
18:01:50.0275 5832 E1G60 - ok
18:01:50.0315 5832 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
18:01:50.0359 5832 Ecache - ok
18:01:50.0402 5832 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
18:01:50.0447 5832 elxstor - ok
18:01:50.0486 5832 enecir (6c74035909b31f873d85b25e00beb984) C:\Windows\system32\DRIVERS\enecir.sys
18:01:50.0524 5832 enecir - ok
18:01:50.0545 5832 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
18:01:50.0607 5832 ErrDev - ok
18:01:50.0658 5832 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
18:01:50.0712 5832 exfat - ok
18:01:50.0744 5832 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
18:01:50.0807 5832 fastfat - ok
18:01:50.0824 5832 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
18:01:50.0902 5832 fdc - ok
18:01:50.0925 5832 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
18:01:50.0957 5832 FileInfo - ok
18:01:50.0974 5832 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
18:01:51.0033 5832 Filetrace - ok
18:01:51.0052 5832 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
18:01:51.0115 5832 flpydisk - ok
18:01:51.0148 5832 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
18:01:51.0190 5832 FltMgr - ok
18:01:51.0249 5832 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
18:01:51.0305 5832 Fs_Rec - ok
18:01:51.0338 5832 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
18:01:51.0371 5832 gagp30kx - ok
18:01:51.0400 5832 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
18:01:51.0424 5832 GEARAspiWDM - ok
18:01:51.0501 5832 HdAudAddService (3f90e001369a07243763bd5a523d8722) C:\Windows\system32\drivers\HdAudio.sys
18:01:51.0560 5832 HdAudAddService - ok
18:01:51.0620 5832 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
18:01:51.0713 5832 HDAudBus - ok
18:01:51.0742 5832 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
18:01:51.0853 5832 HidBth - ok
18:01:51.0886 5832 HidIr (d8df3722d5e961baa1292aa2f12827e2) C:\Windows\system32\DRIVERS\hidir.sys
18:01:51.0941 5832 HidIr - ok
18:01:51.0990 5832 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
18:01:52.0041 5832 HidUsb - ok
18:01:52.0076 5832 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
18:01:52.0108 5832 HpCISSs - ok
18:01:52.0177 5832 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
18:01:52.0305 5832 HTTP - ok
18:01:52.0339 5832 hwdatacard (1720966d9c7ea5e2d78b6db92d2f9171) C:\Windows\system32\DRIVERS\ewusbmdm.sys
18:01:52.0368 5832 hwdatacard - ok
18:01:52.0388 5832 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
18:01:52.0438 5832 i2omp - ok
18:01:52.0476 5832 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
18:01:52.0532 5832 i8042prt - ok
18:01:52.0583 5832 iaStor (707c1692214b1c290271067197f075f6) C:\Windows\system32\DRIVERS\iaStor.sys
18:01:52.0609 5832 iaStor - ok
18:01:52.0632 5832 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
18:01:52.0681 5832 iaStorV - ok
18:01:52.0722 5832 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
18:01:52.0751 5832 iirsp - ok
18:01:52.0918 5832 IntcAzAudAddService (f4ec36c333ac09011ab1931ce9582c56) C:\Windows\system32\drivers\RTKVHDA.sys
18:01:53.0030 5832 IntcAzAudAddService - ok
18:01:53.0105 5832 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
18:01:53.0134 5832 intelide - ok
18:01:53.0159 5832 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
18:01:53.0225 5832 intelppm - ok
18:01:53.0255 5832 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:01:53.0329 5832 IpFilterDriver - ok
18:01:53.0347 5832 IpInIp - ok
18:01:53.0376 5832 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
18:01:53.0463 5832 IPMIDRV - ok
18:01:53.0497 5832 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
18:01:53.0564 5832 IPNAT - ok
18:01:53.0591 5832 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
18:01:53.0658 5832 IRENUM - ok
18:01:53.0686 5832 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
18:01:53.0718 5832 isapnp - ok
18:01:53.0756 5832 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
18:01:53.0785 5832 iScsiPrt - ok
18:01:53.0807 5832 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
18:01:53.0835 5832 iteatapi - ok
18:01:53.0874 5832 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
18:01:53.0901 5832 iteraid - ok
18:01:53.0914 5832 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
18:01:53.0945 5832 kbdclass - ok
18:01:53.0976 5832 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
18:01:54.0022 5832 kbdhid - ok
18:01:54.0062 5832 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
18:01:54.0123 5832 KSecDD - ok
18:01:54.0163 5832 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
18:01:54.0237 5832 lltdio - ok
18:01:54.0285 5832 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
18:01:54.0321 5832 LSI_FC - ok
18:01:54.0343 5832 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
18:01:54.0385 5832 LSI_SAS - ok
18:01:54.0419 5832 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
18:01:54.0457 5832 LSI_SCSI - ok
18:01:54.0474 5832 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
18:01:54.0565 5832 luafv - ok
18:01:54.0586 5832 MBAMSwissArmy - ok
18:01:54.0623 5832 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
18:01:54.0653 5832 megasas - ok
18:01:54.0699 5832 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
18:01:54.0775 5832 MegaSR - ok
18:01:54.0837 5832 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
18:01:54.0895 5832 Modem - ok
18:01:54.0916 5832 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
18:01:54.0968 5832 monitor - ok
18:01:54.0985 5832 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
18:01:55.0014 5832 mouclass - ok
18:01:55.0032 5832 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
18:01:55.0096 5832 mouhid - ok
18:01:55.0112 5832 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
18:01:55.0148 5832 MountMgr - ok
18:01:55.0173 5832 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
18:01:55.0207 5832 mpio - ok
18:01:55.0227 5832 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
18:01:55.0283 5832 mpsdrv - ok
18:01:55.0316 5832 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
18:01:55.0351 5832 Mraid35x - ok
18:01:55.0377 5832 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
18:01:55.0438 5832 MRxDAV - ok
18:01:55.0477 5832 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
18:01:55.0542 5832 mrxsmb - ok
18:01:55.0633 5832 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:01:55.0690 5832 mrxsmb10 - ok
18:01:55.0709 5832 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:01:55.0763 5832 mrxsmb20 - ok
18:01:55.0798 5832 msahci (5457dcfa7c0da43522f4d9d4049c1472) C:\Windows\system32\drivers\msahci.sys
18:01:55.0829 5832 msahci - ok
18:01:55.0856 5832 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
18:01:55.0879 5832 msdsm - ok
18:01:55.0920 5832 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
18:01:56.0002 5832 Msfs - ok
18:01:56.0028 5832 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
18:01:56.0056 5832 msisadrv - ok
18:01:56.0089 5832 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
18:01:56.0152 5832 MSKSSRV - ok
18:01:56.0198 5832 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
18:01:56.0255 5832 MSPCLOCK - ok
18:01:56.0282 5832 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
18:01:56.0339 5832 MSPQM - ok
18:01:56.0388 5832 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
18:01:56.0416 5832 MsRPC - ok
18:01:56.0451 5832 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
18:01:56.0473 5832 mssmbios - ok
18:01:56.0504 5832 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
18:01:56.0577 5832 MSTEE - ok
18:01:56.0607 5832 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
18:01:56.0691 5832 Mup - ok
18:01:56.0733 5832 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
18:01:56.0782 5832 NativeWifiP - ok
18:01:56.0827 5832 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
18:01:56.0872 5832 NDIS - ok
18:01:56.0909 5832 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
18:01:56.0971 5832 NdisTapi - ok
18:01:56.0995 5832 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
18:01:57.0059 5832 Ndisuio - ok
18:01:57.0079 5832 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
18:01:57.0143 5832 NdisWan - ok
18:01:57.0170 5832 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
18:01:57.0213 5832 NDProxy - ok
18:01:57.0256 5832 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
18:01:57.0313 5832 NetBIOS - ok
18:01:57.0344 5832 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
18:01:57.0411 5832 netbt - ok
18:01:57.0556 5832 netr28 (3f540b257442cc1a2220dd8f73ac1c77) C:\Windows\system32\DRIVERS\netr28.sys
18:01:57.0631 5832 netr28 - ok
18:01:57.0668 5832 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
18:01:57.0700 5832 nfrd960 - ok
18:01:57.0716 5832 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
18:01:57.0781 5832 Npfs - ok
18:01:57.0812 5832 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
18:01:57.0884 5832 nsiproxy - ok
18:01:57.0938 5832 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
18:01:58.0064 5832 Ntfs - ok
18:01:58.0094 5832 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
18:01:58.0191 5832 ntrigdigi - ok
18:01:58.0203 5832 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
18:01:58.0266 5832 Null - ok
18:01:58.0496 5832 nvlddmkm (e8651dce7db8094d06d2d2622df98982) C:\Windows\system32\DRIVERS\nvlddmkm.sys
18:01:59.0006 5832 nvlddmkm - ok
18:01:59.0036 5832 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
18:01:59.0076 5832 nvraid - ok
18:01:59.0107 5832 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
18:01:59.0137 5832 nvstor - ok
18:01:59.0160 5832 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
18:01:59.0197 5832 nv_agp - ok
18:01:59.0208 5832 NwlnkFlt - ok
18:01:59.0222 5832 NwlnkFwd - ok
18:01:59.0265 5832 ohci1394 (be32da025a0be1878f0ee8d6d9386cd5) C:\Windows\system32\drivers\ohci1394.sys
18:01:59.0374 5832 ohci1394 - ok
18:01:59.0410 5832 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
18:01:59.0531 5832 Parport - ok
18:01:59.0544 5832 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
18:01:59.0579 5832 partmgr - ok
18:01:59.0605 5832 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
18:01:59.0697 5832 Parvdm - ok
18:01:59.0732 5832 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
18:01:59.0777 5832 pci - ok
18:01:59.0807 5832 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys
18:01:59.0844 5832 pciide - ok
18:01:59.0893 5832 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
18:01:59.0965 5832 pcmcia - ok
18:02:00.0033 5832 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
18:02:00.0186 5832 PEAUTH - ok
18:02:00.0294 5832 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
18:02:00.0367 5832 PptpMiniport - ok
18:02:00.0406 5832 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
18:02:00.0489 5832 Processor - ok
18:02:00.0526 5832 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
18:02:00.0577 5832 PSched - ok
18:02:00.0639 5832 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
18:02:00.0774 5832 ql2300 - ok
18:02:00.0808 5832 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
18:02:00.0850 5832 ql40xx - ok
18:02:00.0868 5832 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
18:02:00.0932 5832 QWAVEdrv - ok
18:02:00.0993 5832 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
18:02:01.0055 5832 RasAcd - ok
18:02:01.0080 5832 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
18:02:01.0136 5832 Rasl2tp - ok
18:02:01.0175 5832 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
18:02:01.0238 5832 RasPppoe - ok
18:02:01.0267 5832 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
18:02:01.0306 5832 RasSstp - ok
18:02:01.0328 5832 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
18:02:01.0388 5832 rdbss - ok
18:02:01.0402 5832 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
18:02:01.0462 5832 RDPCDD - ok
18:02:01.0493 5832 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys
18:02:01.0568 5832 rdpdr - ok
18:02:01.0580 5832 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
18:02:01.0634 5832 RDPENCDD - ok
18:02:01.0661 5832 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
18:02:01.0731 5832 RDPWD - ok
18:02:01.0765 5832 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
18:02:01.0823 5832 rspndr - ok
18:02:01.0853 5832 RTL8169 (17b1d7ce7af11fb24db1def9621c033b) C:\Windows\system32\DRIVERS\Rtlh86.sys
18:02:01.0884 5832 RTL8169 - ok
18:02:01.0917 5832 RTSTOR (b0538dea03e088b80482ca939f4e8740) C:\Windows\system32\drivers\RTSTOR.SYS
18:02:01.0959 5832 RTSTOR - ok
18:02:01.0994 5832 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
18:02:02.0027 5832 sbp2port - ok
18:02:02.0079 5832 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
18:02:02.0181 5832 secdrv - ok
18:02:02.0224 5832 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
18:02:02.0315 5832 Serenum - ok
18:02:02.0340 5832 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
18:02:02.0437 5832 Serial - ok
18:02:02.0463 5832 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
18:02:02.0534 5832 sermouse - ok
18:02:02.0576 5832 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
18:02:02.0620 5832 sffdisk - ok
18:02:02.0650 5832 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
18:02:02.0706 5832 sffp_mmc - ok
18:02:02.0723 5832 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
18:02:02.0777 5832 sffp_sd - ok
18:02:02.0800 5832 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
18:02:02.0905 5832 sfloppy - ok
18:02:02.0945 5832 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
18:02:02.0976 5832 sisagp - ok
18:02:02.0997 5832 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
18:02:03.0032 5832 SiSRaid2 - ok
18:02:03.0057 5832 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
18:02:03.0089 5832 SiSRaid4 - ok
18:02:03.0151 5832 SLEE_16_DRIVER (4723512c035a3a880db4657705466240) C:\Windows\system32\drivers\Sleen16.sys
18:02:03.0182 5832 SLEE_16_DRIVER - ok
18:02:03.0223 5832 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
18:02:03.0273 5832 Smb - ok
18:02:03.0298 5832 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
18:02:03.0326 5832 spldr - ok
18:02:03.0377 5832 sptd (cdddec541bc3c96f91ecb48759673505) C:\Windows\system32\Drivers\sptd.sys
18:02:03.0377 5832 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505
18:02:03.0380 5832 sptd ( LockedFile.Multi.Generic ) - warning
18:02:03.0381 5832 sptd - detected LockedFile.Multi.Generic (1)
18:02:03.0412 5832 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
18:02:03.0493 5832 srv - ok
18:02:03.0526 5832 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
18:02:03.0576 5832 srv2 - ok
18:02:03.0607 5832 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
18:02:03.0655 5832 srvnet - ok
18:02:03.0687 5832 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys
18:02:03.0712 5832 ssmdrv - ok
18:02:03.0748 5832 ss_bbus (3f0164fbc0bd1adbd02df9759181451a) C:\Windows\system32\DRIVERS\ss_bbus.sys
18:02:03.0781 5832 ss_bbus - ok
18:02:03.0805 5832 ss_bmdfl (b89d62206034e5fe573c80a24dd55675) C:\Windows\system32\DRIVERS\ss_bmdfl.sys
18:02:03.0827 5832 ss_bmdfl - ok
18:02:03.0867 5832 ss_bmdm (1ed0fcea586fe2a416ee15196e5631dd) C:\Windows\system32\DRIVERS\ss_bmdm.sys
18:02:03.0898 5832 ss_bmdm - ok
18:02:03.0921 5832 ss_bserd (994d2e5378cc337ec7dd73c1e04fcaa4) C:\Windows\system32\DRIVERS\ss_bserd.sys
18:02:03.0952 5832 ss_bserd - ok
18:02:03.0996 5832 StillCam (ef70b3d22b4bffda6ea851ecb063efaa) C:\Windows\system32\DRIVERS\serscan.sys
18:02:04.0037 5832 StillCam - ok
18:02:04.0065 5832 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
18:02:04.0094 5832 swenum - ok
18:02:04.0129 5832 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
18:02:04.0157 5832 Symc8xx - ok
18:02:04.0176 5832 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
18:02:04.0205 5832 Sym_hi - ok
18:02:04.0226 5832 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
18:02:04.0254 5832 Sym_u3 - ok
18:02:04.0334 5832 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys
18:02:04.0467 5832 Tcpip - ok
18:02:04.0495 5832 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys
18:02:04.0564 5832 Tcpip6 - ok
18:02:04.0604 5832 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
18:02:04.0649 5832 tcpipreg - ok
18:02:04.0689 5832 TcUsb (55fe712f574da1a726ad74b20886a529) C:\Windows\system32\Drivers\tcusb.sys
18:02:04.0718 5832 TcUsb - ok
18:02:04.0743 5832 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
18:02:04.0807 5832 TDPIPE - ok
18:02:04.0834 5832 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
18:02:04.0895 5832 TDTCP - ok
18:02:04.0941 5832 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
18:02:04.0997 5832 tdx - ok
18:02:05.0034 5832 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
18:02:05.0071 5832 TermDD - ok
18:02:05.0124 5832 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
18:02:05.0191 5832 tssecsrv - ok
18:02:05.0225 5832 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
18:02:05.0279 5832 tunmp - ok
18:02:05.0308 5832 tunnel (119b8184e106baedc83fce5ddf3950da) C:\Windows\system32\DRIVERS\tunnel.sys
18:02:05.0368 5832 tunnel - ok
18:02:05.0387 5832 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
18:02:05.0418 5832 uagp35 - ok
18:02:05.0446 5832 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
18:02:05.0517 5832 udfs - ok
18:02:05.0559 5832 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
18:02:05.0590 5832 uliagpkx - ok
18:02:05.0620 5832 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
18:02:05.0670 5832 uliahci - ok
18:02:05.0699 5832 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
18:02:05.0734 5832 UlSata - ok
18:02:05.0768 5832 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
18:02:05.0792 5832 ulsata2 - ok
18:02:05.0813 5832 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
18:02:05.0870 5832 umbus - ok
18:02:05.0918 5832 USBAAPL (d4fb6ecc60a428564ba8768b0e23c0fc) C:\Windows\system32\Drivers\usbaapl.sys
18:02:05.0977 5832 USBAAPL - ok
18:02:06.0013 5832 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
18:02:06.0078 5832 usbccgp - ok
18:02:06.0131 5832 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
18:02:06.0253 5832 usbcir - ok
18:02:06.0303 5832 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
18:02:06.0362 5832 usbehci - ok
18:02:06.0397 5832 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
18:02:06.0462 5832 usbhub - ok
18:02:06.0486 5832 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
18:02:06.0603 5832 usbohci - ok
18:02:06.0638 5832 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
18:02:06.0695 5832 usbprint - ok
18:02:06.0725 5832 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
18:02:06.0788 5832 usbscan - ok
18:02:06.0806 5832 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:02:06.0858 5832 USBSTOR - ok
18:02:06.0899 5832 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
18:02:06.0946 5832 usbuhci - ok
18:02:06.0987 5832 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
18:02:07.0062 5832 usbvideo - ok
18:02:07.0104 5832 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
18:02:07.0162 5832 vga - ok
18:02:07.0191 5832 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
18:02:07.0259 5832 VgaSave - ok
18:02:07.0286 5832 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
18:02:07.0318 5832 viaagp - ok
18:02:07.0339 5832 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
18:02:07.0413 5832 ViaC7 - ok
18:02:07.0442 5832 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
18:02:07.0470 5832 viaide - ok
18:02:07.0492 5832 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
18:02:07.0531 5832 volmgr - ok
18:02:07.0595 5832 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
18:02:07.0647 5832 volmgrx - ok
18:02:07.0668 5832 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
18:02:07.0722 5832 volsnap - ok
18:02:07.0771 5832 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
18:02:07.0807 5832 vsmraid - ok
18:02:07.0871 5832 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
18:02:07.0983 5832 WacomPen - ok
18:02:08.0012 5832 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
18:02:08.0061 5832 Wanarp - ok
18:02:08.0086 5832 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
18:02:08.0128 5832 Wanarpv6 - ok
18:02:08.0173 5832 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
18:02:08.0209 5832 Wd - ok
18:02:08.0247 5832 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
18:02:08.0321 5832 Wdf01000 - ok
18:02:08.0468 5832 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys
18:02:08.0521 5832 WmiAcpi - ok
18:02:08.0595 5832 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
18:02:08.0656 5832 WpdUsb - ok
18:02:08.0696 5832 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
18:02:08.0762 5832 ws2ifsl - ok
18:02:08.0827 5832 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
18:02:08.0907 5832 WUDFRd - ok
18:02:08.0937 5832 WUSBVBus - ok
18:02:08.0986 5832 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
18:02:09.0080 5832 \Device\Harddisk0\DR0 - ok
18:02:09.0087 5832 Boot (0x1200) (c589ca9f7dbccaf858765734b012aa64) \Device\Harddisk0\DR0\Partition0
18:02:09.0089 5832 \Device\Harddisk0\DR0\Partition0 - ok
18:02:09.0118 5832 Boot (0x1200) (80aa40493704716c9c3c694be4db57b5) \Device\Harddisk0\DR0\Partition1
18:02:09.0120 5832 \Device\Harddisk0\DR0\Partition1 - ok
18:02:09.0121 5832 ============================================================
18:02:09.0121 5832 Scan finished
18:02:09.0121 5832 ============================================================
18:02:09.0142 3800 Detected object count: 1
18:02:09.0142 3800 Actual detected object count: 1
18:02:49.0413 3800 sptd ( LockedFile.Multi.Generic ) - skipped by user
18:02:49.0414 3800 sptd ( LockedFile.Multi.Generic ) - User select action: Skip

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

• Lade dir ComboFix hier herunter auf deinen Desktop.

• Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

• Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
  Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

• Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

Combofix Logfile:
--- --- ---

Ok. Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

• Starte die aswMBR.exe - (aswMBR.exe Anleitung)
  Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
• Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
  Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  
• Klicke auf Scan.
• Warte bitte bis Scan finished successfully im DOS-Fenster steht.
• Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).

GMER:GMER Logfile:
--- --- ---

OSAM Logfile:
--- --- ---
If You have questions or want to get some help, You can visit Online Solutions :: Index

aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-11-20 16:30:44
-----------------------------
16:30:44.883 OS Version: Windows 6.0.6002 Service Pack 2
16:30:44.884 Number of processors: 2 586 0xF0D
16:30:44.886 ComputerName: MSIMOBILE-PC UserName: MSI Mobile
16:30:45.634 Initialize success
16:47:27.777 AVAST engine defs: 11112000
16:52:09.705 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
16:52:09.713 Disk 0 Vendor: WDC_WD32 01.0 Size: 305245MB BusType: 3
16:52:11.940 Disk 0 MBR read successfully
16:52:11.953 Disk 0 MBR scan
16:52:12.037 Disk 0 Windows VISTA default MBR code
16:52:12.075 Disk 0 scanning sectors +625139712
16:52:12.418 Disk 0 scanning C:\Windows\system32\drivers
16:53:29.109 Service scanning
16:53:30.358 Service sptd C:\Windows\System32\Drivers\sptd.sys **LOCKED** 32
16:53:30.998 Modules scanning
16:55:28.527 Disk 0 trace - called modules:
16:55:28.607 ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStor.sys spdv.sys hal.dll >>UNKNOWN [0x874db938]<<
16:55:28.619 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x880f30d8]
16:55:29.002 3 CLASSPNP.SYS[8c9ac8b3] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0x8756e028]
16:55:29.478 AVAST engine scan C:\Windows
16:56:19.383 AVAST engine scan C:\Windows\system32
17:05:10.203 AVAST engine scan C:\Windows\system32\drivers
17:05:26.550 AVAST engine scan C:\Users\MSI Mobile
17:23:15.636 AVAST engine scan C:\ProgramData
17:27:26.282 Scan finished successfully
17:27:56.752 Disk 0 MBR has been saved successfully to "C:\Users\MSI Mobile\Desktop\MBR.dat"
17:27:56.769 The log file has been saved successfully to "C:\Users\MSI Mobile\Desktop\aswMBR.txt"

Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!


Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Also hier schonmal die Logdatein von Malwarebytes, schaut gut aus, es wurden keine infizierten Dateien gefunden. Vielen Dank schonmal!
Den Rest kann ich erst am Freitag versuchen, Internetverbindung ist hier schlecht wo ich bin.

Malwarebytes' Anti-Malware 1.51.2.1300
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Datenbank Version: 8226

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19154

23.11.2011 20:40:52
mbam-log-2011-11-23 (20-40-52).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 328068
Laufzeit: 1 Stunde(n), 5 Minute(n), 54 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)


Lg Sarah

SUPERAntiSpyware Scan Log
SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Generated 11/25/2011 at 10:13 PM

Application Version : 5.0.1136

Core Rules Database Version : 7987
Trace Rules Database Version: 5799

Scan type : Quick Scan
Total Scan Time : 00:06:25

Operating System Information
Windows Vista Home Premium 32-bit, Service Pack 2 (Build 6.00.6002)
UAC On - Limited User (Administrator User)

Memory items scanned : 740
Memory threats detected : 0
Registry items scanned : 30279
Registry threats detected : 0
File items scanned : 7275
File threats detected : 382

Adware.Tracking Cookie
C:\Users\MSI Mobile\AppData\Roaming\Microsoft\Windows\Cookies\msi_mobile@adx.chip[2].txt [ /adx.chip ]
C:\Users\MSI Mobile\AppData\Roaming\Microsoft\Windows\Cookies\msi_mobile@atwola[1].txt [ /atwola ]
C:\Users\MSI Mobile\AppData\Roaming\Microsoft\Windows\Cookies\msi_mobile@avgtechnologies.112.2o7[1].txt [ /avgtechnologies.112.2o7 ]
C:\Users\MSI Mobile\AppData\Roaming\Microsoft\Windows\Cookies\msi_mobile@serving-sys[2].txt [ /serving-sys ]
C:\Users\MSI Mobile\AppData\Roaming\Microsoft\Windows\Cookies\msi_mobile@smartadserver[1].txt [ /smartadserver ]
C:\Users\MSI Mobile\AppData\Roaming\Microsoft\Windows\Cookies\msi_mobile@tracking.quisma[1].txt [ /tracking.quisma ]
C:\Users\MSI Mobile\AppData\Roaming\Microsoft\Windows\Cookies\AFVJYE12.txt [ /atdmt.com ]
.lfstmedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
C:\USERS\MSI MOBILE\AppData\Roaming\Microsoft\Windows\Cookies\Low\P39FH2S4.txt [ Cookie:msi mobile@yadro.ru/ ]
C:\USERS\MSI MOBILE\Cookies\AFVJYE12.txt [ Cookie:msi mobile@atdmt.com/ ]
.adxpose.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.vodafonegroup.122.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
C:\USERS\MSI MOBILE\Cookies\msi_mobile@tracking.quisma[1].txt [ Cookie:msi mobile@tracking.quisma.com/ ]
.msnportal.112.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
C:\USERS\MSI MOBILE\Cookies\msi_mobile@smartadserver[1].txt [ Cookie:msi mobile@smartadserver.com/ ]
.weborama.fr [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
C:\USERS\MSI MOBILE\Cookies\msi_mobile@avgtechnologies.112.2o7[1].txt [ Cookie:msi mobile@avgtechnologies.112.2o7.net/ ]
.liveperson.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.xiti.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.komtrack.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.komtrack.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.guj.122.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.avgtechnologies.112.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
adserver1.mokono.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adviva.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
adsrv1.admediate.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.pointroll.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.pointroll.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.sevenoneintermedia.112.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adcentriconline.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adserver.gs [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
upvalue1.easymedia-adserver.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.wissende.122.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
zbox.zanox.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
wstat.wibiya.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.porn.drei.to [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.porn.drei.to [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.overture.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.overture.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.nextag.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.nextag.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.estat.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.mediabrandsww.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.e-2dj6aeliciczwfp.stats.esomniture.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.e-2dj6aelyomc5skp.stats.esomniture.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.profilbanner.me [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.azjmp.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.profilbanner.me [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad.adition.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad.adition.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.findix.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.findix.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.stepstone.112.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.cheaptickets.122.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wmliuid5cco.stats.esomniture.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.nail-discount-24.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.nail-discount-24.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.advert-layer.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.advert-layer.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.traffictrack.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
data.coremetrics.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.cyonix.to [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.cyonix.to [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.a.revenuemax.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
tracking.sandstein.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
adserver.kino-zeit.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wjl4apd5ifp.stats.esomniture.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
www.zanox-affiliate.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ads2.bartime.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ibanner.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
new.portal-banner.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.paypal.112.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.247realmedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.wlw.122.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
fr.sitestat.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
fr.sitestat.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
pornrush.org [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
pornrush.org [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.matratzendiscount.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.matratzendiscount.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.countomat.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
adservercentral.info [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.sexgeschichten.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.sexgeschichten.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ads.adxvalue.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
adserver.gb5.motorpresse.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.pumaonlinestorede.112.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.lfstmedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
s4.trafficmaxx.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.snapfish.112.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
counter.search.bg [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.aok.122.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.lfstmedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.track.webgains.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.gostats.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.dealtime.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
stat.dealtime.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.sexshop-dildo-king.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.sexshop-dildo-king.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wmloumdpoep.stats.esomniture.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.overture.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.linksynergy.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.linksynergy.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.linksynergy.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.bizrate.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.druckdiscount24.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.druckdiscount24.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.bs.serving-sys.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.deutschepostag.112.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adinterax.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adinterax.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.yadro.ru [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.mm.chitika.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.sexgeschichten.tv [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.sexgeschichten.tv [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.sexvideos01.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.sexvideos01.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
track.adform.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
vidasco.rotator.hadj7.adjuggler.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
vidasco.rotator.hadj7.adjuggler.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
adserv.chirurgie-portal.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
NETTO Reifen-Räder-Discount - billig, schnell, kompetent [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.reifendiscount.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
NETTO Reifen-Räder-Discount - billig, schnell, kompetent [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.amazon-adsystem.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
track.adform.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adform.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.nextag.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.frontlinegmbh.122.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.amazon-adsystem.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adviva.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.uk.at.atwola.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.BurstMedia [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.bs.serving-sys.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad.adserver01.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.lfstmedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.lfstmedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.en.profilbanner.me [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.en.profilbanner.me [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.mediafire.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.mediafire.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.mediafire.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.hightraffic.hugoboss.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.hightraffic.hugoboss.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
statse.webtrendslive.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.traffictrack.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
www.zanox-affiliate.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.tracking.mindshare.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
tracking.sim-technik.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
TLDAdserv.com - Ihr Partner für seriöse Auszahlungen [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
adserver2.clipkit.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.kursfinder.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.kursfinder.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
Finden Sie auf kursfinder.de die passende Weiterbildung! [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.uk.at.atwola.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.uk.at.atwola.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad1.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
studivz.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
studivz.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.zanox-affiliate.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.zanox.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad4.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
s1.trafficmaxx.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad2.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.elitepartner.ch [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.elitepartner.ch [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.elitepartner.ch [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adxvalue.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adxvalue.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ww251.smartadserver.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.clickfuse.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad3.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]

Ich hab extzra geschrieben VOLLSCANS auch mit SASW!

SUPERAntiSpyware Scan Log
SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Generated 11/29/2011 at 06:28 PM

Application Version : 5.0.1136

Core Rules Database Version : 7996
Trace Rules Database Version: 5808

Scan type : Complete Scan
Total Scan Time : 00:43:32

Operating System Information
Windows Vista Home Premium 32-bit, Service Pack 2 (Build 6.00.6002)
UAC On - Limited User (Administrator User)

Memory items scanned : 723
Memory threats detected : 0
Registry items scanned : 38194
Registry threats detected : 0
File items scanned : 40926
File threats detected : 12

Adware.Tracking Cookie
delivery.ibanner.de [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\CYNNBZH5 ]
Google [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ww251.smartadserver.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
ad2.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\MSI MOBILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VTJOTPBD.DEFAULT\COOKIES.SQLITE ]

Trojan.Agent/Gen-SoftonicDownloader
C:\USERS\MSI MOBILE\DOWNLOADS\SOFTONICDOWNLOADER_FUER_AVIRA-ANTIVIR.EXE

Ok. Softonic-Müll und Cookies. Alles entfernen.
Kommt ESET noch?

Sorry es hat leider etwas gedauert...also hier Eset:

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=722c9f04af97134ab210e502484a64b3
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-11-14 11:30:46
# local_time=2011-11-15 12:30:46 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1032 16777214 0 1 15651540 15651540 0 0
# compatibility_mode=1797 16775165 100 94 1491796 57847177 1506964 0
# compatibility_mode=5892 16776574 100 100 23279031 158843084 0 0
# compatibility_mode=8192 67108863 100 0 3909 3909 0 0
# scanned=24453
# found=0
# cleaned=0
# scan_time=3090
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=722c9f04af97134ab210e502484a64b3
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-11-15 10:16:07
# local_time=2011-11-15 11:16:07 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1032 16777214 0 1 15725181 15725181 0 0
# compatibility_mode=1797 16775165 100 94 3910 57920818 0 0
# compatibility_mode=5892 16776574 100 100 23352672 158916725 0 0
# compatibility_mode=8192 67108863 100 0 77550 77550 0 0
# scanned=169535
# found=3
# cleaned=0
# scan_time=11372
C:\Users\MSI Mobile\AppData\Local\Temp\MyBabylonTB.exe a variant of Win32/Toolbar.Babylon application (unable to clean) 00000000000000000000000000000000 I
C:\Users\MSI Mobile\Downloads\SoftonicDownloader_fuer_avira-antivir.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I
C:\Users\MSI Mobile\Downloads\SoftonicDownloader_fuer_nero-lite.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=722c9f04af97134ab210e502484a64b3
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-12-03 12:47:09
# local_time=2011-12-03 01:47:09 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1032 16777214 0 1 17246480 17246480 0 0
# compatibility_mode=1797 16775165 100 94 1284505 59442117 1109286 0
# compatibility_mode=5892 16776574 100 100 24873971 160438024 0 0
# compatibility_mode=8192 67108863 100 0 1598849 1598849 0 0
# scanned=174782
# found=3
# cleaned=0
# scan_time=11133
C:\$RECYCLE.BIN\S-1-5-21-3700083461-3758754058-1150892198-1000\$RKBLFWF.exe Win32/InstallCore application (unable to clean) 00000000000000000000000000000000 I
C:\Users\MSI Mobile\AppData\Local\temp\ICReinstall_PDFCreatorSetup.exe Win32/InstallCore application (unable to clean) 00000000000000000000000000000000 I
C:\Users\MSI Mobile\Downloads\SoftonicDownloader_fuer_nero-lite.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I

Die Funde kannst du vernachlässigen. Evtl. mal den Papierkorb leeren.
Rechner soweit wieder im Lot?

Ja also ich merke nichts mehr, dürfte alles wieder ok sein! Vielen Dank!
Lg Sarah

Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. CF kann über Start, Ausführen mit combofix /uninstall entfernt werden. Melde dich falls es da Fehlermeldungen zu gibt.
Malwarebytes zu behalten ist kein Fehler. Kannst ja 1x im Monat damit scannen, aber immer vorher ans Update denken.

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate
Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.
Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.


Flashplayer
Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers => Adobe - Andere Version des Adobe Flash Player installieren
(Alternativ bei Chip => http://filepony.de/?q=Flash+Player)

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.