Trojaner-Board
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Searchcompletion hat Firefoxsuche übernommen (https://www.trojaner-board.de/110446-searchcompletion-hat-firefoxsuche-uebernommen.html)

c_w 28.02.2012 20:45
Ok, genau das war mein Problem.

c_w 28.02.2012 20:57
Code:
aswMBR version 0.9.9.1649 Copyright(c) 2011 AVAST Software
Run date: 2012-02-28 20:51:55
-----------------------------
20:51:55.115    OS Version: Windows 6.1.7601 Service Pack 1
20:51:55.115    Number of processors: 2 586 0x1706
20:51:55.115    ComputerName: THOMAS-SONY  UserName: Thomas
20:52:19.139    Initialize success
20:52:25.831    AVAST engine defs: 12022801
20:52:29.217    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
20:52:29.232    Disk 0 Vendor: TOSHIBA_ LB01 Size: 190782MB BusType: 3
20:52:29.232    Disk 1  \Device\Harddisk1\DR1 -> \Device\00000086
20:52:29.248    Disk 1 Vendor: RICOH 01 Size: 190782MB BusType: 0
20:52:29.248    Disk 2  \Device\Harddisk2\DR2 -> \Device\00000087
20:52:29.248    Disk 2 Vendor: RICOH 02 Size: 190782MB BusType: 0
20:52:29.264    Disk 0 MBR read successfully
20:52:29.279    Disk 0 MBR scan
20:52:29.279    Disk 0 Windows 7 default MBR code
20:52:29.295    Disk 0 Partition 1 00    27 Hidden NTFS WinRE NTFS        6984 MB offset 2048
20:52:29.326    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS      183796 MB offset 14305280
20:52:29.326    Disk 0 scanning sectors +390719920
20:52:29.357    Disk 0 malicious Win32:MBRoot code @ sector 390719923 !
20:52:29.404    Disk 0 scanning C:\Windows\system32\drivers
20:52:50.604    Service scanning
20:53:47.638    Modules scanning
20:54:36.622    Disk 0 trace - called modules:
20:54:36.653    ntkrnlpa.exe CLASSPNP.SYS disk.sys shpf.sys ACPI.sys halmacpi.dll iaStor.sys
20:54:36.669    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x870b6030]
20:54:36.685    3 CLASSPNP.SYS[8b99f59e] -> nt!IofCallDriver -> [0x870b41c8]
20:54:36.700    5 shpf.sys[8bbeed03] -> nt!IofCallDriver -> [0x86649840]
20:54:36.700    7 ACPI.sys[8b2323d4] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0x86681028]
20:54:36.716    Scan finished successfully
20:55:21.113    Disk 0 MBR has been saved successfully to "C:\Users\Thomas\Desktop\MBR.dat"
20:55:21.113    The log file has been saved successfully to "C:\Users\Thomas\Desktop\aswMBR.txt"

cosinus 28.02.2012 22:34
Zitat:
20:52:29.357 Disk 0 malicious Win32:MBRoot code @ sector 390719923 !
Live-System PartedMagic / GParted

1. Lade Dir das ISO-Image von PartedMagic herunter, müssten ca. 180 MB sein
2. Brenn es per Imagebrennfunktion auf CD, geht zB mit ImgBurn unter Windows
3. Boote von der gebrannten CD, im Bootmenü von Option 1 starten und warten bis der Linux-Desktop oben ist

http://partedmagic.com/lib/exe/fetch...ia=desktop.png

4. Du müsstest ein Symbol PartitionEditor auf dem Desktop finden, das doppelklicken
5. Wenn das Tool die Partitionen aufgelistet hat, bitte einen Screenshot mit Hilfe der Taste DRUCK auf der Tastatur erstellen, diesen Screenshot hier posten (idR hast du einen Internetzugang mit PartedMagic, wenn nicht einfach den Screenshot auf einem Stick abspeichern und unter Windows hier posten)

c_w 28.02.2012 22:53
Liste der Anhänge anzeigen (Anzahl: 1)
Siehe Anhang.

cosinus 28.02.2012 22:57
Klick mal bitte den unzugeordenten 1 MB ganz unten mit Rdchts an => Information
Davon bitte wieder einen Screenshot erstellen

c_w 28.02.2012 23:00
Liste der Anhänge anzeigen (Anzahl: 1)
Bitte schön.

cosinus 28.02.2012 23:34
Zitat:
20:52:29.357 Disk 0 malicious Win32:MBRoot code @ sector 390719923 !
Es wird noch ein böser Code in diesem unzugeordnenten Bereich gefunden. Möchtest du den überschreiben lassen? Wenn ja, dann gebe ich gleich ne Anleitung dazu

c_w 29.02.2012 07:51
Du bist der Experte. Wenn man das Ding da wegbekommen kann, dann bin ich dafür! Oder gibt's Alternativen?

cosinus 29.02.2012 14:41
Na ich sags nur, unbedingt nötig wird es nicht sein, aber wenn man diesen Makel weghaben will muss man da ganz vorsichtig rangehen ;)

Code:
Disk 0 malicious Win32:MBRoot code @ sector 390719923 !
Möchtest du den Bereich überschreiben lassen?

Wenn ja dann bitte jetzt sorgfältig lesen und zuerst eine Sicherung aller Daten machen! Wenn die Sicherung erfolgte alle Sicherungsmedien vom Computer physikalisch trennen!

Wie gesagt was jetzt folgt und du hast Datenverluste seist du jetzt nochmal ausdrücklich gewarnt, alles richtig umzusetzen und vorher alles wichtige auf externe Platten zu sichern. Wenn du sicher bist, dass alle wichtige Daten in Sicherheit sind und die externen Datenträger auch nicht mehr am Rechner angeschlossen sind, dann fahre fort wir folgt:

Öffne das Terminal in PartedMagic. Ist unten in der Quicklaunch der schwarze Monitor. Eine schwarze Konsole öffnet sich. Tipp dort ein (du solltest root@partedmagic in der Zeile lesen können)

WARNUNG: Folgender Befehl auf eigene Gefahr! Für Datenverluste nicht rumheulen und wer das mitliest soll den Befehl ebenfalls nicht so ausführen!!

Bitte lieber eher 3x als 2x prüfen ob du alles so richtig eingetippt hast NACH der Datensicherung:

Code:
dd if=/dev/zero of=/dev/sda seek=390719921 bs=512
Wenn du dir sicher bist das genau so eingetippt zu haben wie es da bei mir steht, dann drücke die Eingabetaste. Es dauert nicht lange, dann hast du wieder die Zeile und sinngemäß so etwas wie

2048+0 Datensätze ein
2048+0 Datensätze aus

Wenn das so rauskaum (können auch 2047 statt 2048 sein) wurden die letzten 2048 Sekoren (und damit auch der bösartige Code in diesem unzugeordneten Bereich) auf der Platte mit Nullen überschrieben; starte den Rechner neu und boote Windows.
Mach dort einen neuen scan mit aswMBR und poste wieder das Log.

c_w 29.02.2012 15:49
root@PartedMagic:~# dd if=/dev/zero of=/dev/sda seek=390719921 bs=512
dd: writing `/dev/sda': No space left on device
2048+0 records in
2047+0 records out
1048064 bytes (1.0 MB) copied, 0.410296 s, 2.6 MB/s

Scan folgt.

cosinus 29.02.2012 15:57
Ok, sieht so schonmal gut aus :)

c_w 29.02.2012 16:01
Code:
aswMBR version 0.9.9.1649 Copyright(c) 2011 AVAST Software
Run date: 2012-02-29 15:53:11
-----------------------------
15:53:11.380    OS Version: Windows 6.1.7601 Service Pack 1
15:53:11.380    Number of processors: 2 586 0x1706
15:53:11.380    ComputerName: THOMAS-SONY  UserName: Thomas
15:53:12.378    Initialize success
15:53:19.710    AVAST engine defs: 12022801
15:53:26.309    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
15:53:26.325    Disk 0 Vendor: TOSHIBA_ LB01 Size: 190782MB BusType: 3
15:53:26.325    Disk 1  \Device\Harddisk1\DR1 -> \Device\00000084
15:53:26.325    Disk 1 Vendor: RICOH 01 Size: 190782MB BusType: 0
15:53:26.325    Disk 2  \Device\Harddisk2\DR2 -> \Device\00000085
15:53:26.340    Disk 2 Vendor: RICOH 02 Size: 190782MB BusType: 0
15:53:26.356    Disk 0 MBR read successfully
15:53:26.356    Disk 0 MBR scan
15:53:26.371    Disk 0 Windows 7 default MBR code
15:53:26.403    Disk 0 Partition 1 00    27 Hidden NTFS WinRE NTFS        6984 MB offset 2048
15:53:26.418    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS      183796 MB offset 14305280
15:53:26.434    Disk 0 scanning sectors +390719920
15:53:26.496    Disk 0 scanning C:\Windows\system32\drivers
15:53:58.476    Service scanning
15:55:16.523    Modules scanning
15:55:53.838    Disk 0 trace - called modules:
15:55:53.870    ntkrnlpa.exe CLASSPNP.SYS disk.sys shpf.sys ACPI.sys halmacpi.dll iaStor.sys
15:55:53.870    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x870b5030]
15:55:53.870    3 CLASSPNP.SYS[8b99559e] -> nt!IofCallDriver -> [0x870b44e8]
15:55:53.885    5 shpf.sys[8bbead03] -> nt!IofCallDriver -> [0x86656930]
15:55:53.916    7 ACPI.sys[8b2993d4] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0x86680028]
15:55:53.932    Scan finished successfully
15:59:26.654    Disk 0 MBR has been saved successfully to "C:\Users\Thomas\Desktop\MBR.dat"
15:59:26.654    The log file has been saved successfully to "C:\Users\Thomas\Desktop\aswMBR2.txt"

cosinus 29.02.2012 16:02
Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

c_w 29.02.2012 23:19
Malwarebytes hat schonmal nichts mehr gefunden...:

Code:
Malwarebytes Anti-Malware (Test) 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.02.29.03

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Thomas :: THOMAS-SONY [Administrator]

Schutz: Deaktiviert

29.02.2012 16:14:42
mbam-log-2012-02-29 (16-14-42).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 431632
Laufzeit: 3 Stunde(n), 57 Minute(n), 29 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

c_w 01.03.2012 07:23
Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 03/01/2012 at 02:50 AM

Application Version : 5.0.1144

Core Rules Database Version : 8291
Trace Rules Database Version: 6103

Scan type      : Complete Scan
Total Scan Time : 03:30:07

Operating System Information
Windows 7 Professional 32-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned      : 866
Memory threats detected  : 0
Registry items scanned    : 35433
Registry threats detected : 0
File items scanned        : 309633
File threats detected    : 290

Adware.Tracking Cookie
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@ad.yieldmanager[2].txt [ /ad.yieldmanager ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@adtech[1].txt [ /adtech ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@adviva[1].txt [ /adviva ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@adx.chip[2].txt [ /adx.chip ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@adx.chip[3].txt [ /adx.chip ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@apmebf[1].txt [ /apmebf ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@bs.serving-sys[1].txt [ /bs.serving-sys ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@content.yieldmanager[1].txt [ /content.yieldmanager ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@content.yieldmanager[2].txt [ /content.yieldmanager ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@doubleclick[1].txt [ /doubleclick ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@eas.apm.emediate[1].txt [ /eas.apm.emediate ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@mediaplex[2].txt [ /mediaplex ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@serving-sys[1].txt [ /serving-sys ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@smartadserver[1].txt [ /smartadserver ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@specificclick[2].txt [ /specificclick ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\thomas@webmasterplan[2].txt [ /webmasterplan ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\8VVBN600.txt [ /c.atdmt.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\NFD1Q11C.txt [ /doubleclick.net ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\CIXMSF3U.txt [ /ru4.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\HJ3CWWU1.txt [ /mediaplex.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\956O78NQ.txt [ /media6degrees.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\8CAE8P2W.txt [ /smartadserver.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\G5IHTYRZ.txt [ /clickdownloadsoftware.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\NMXF68IE.txt [ /serving-sys.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\ZLEHZ1XT.txt [ /apmebf.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\OYMGWC6B.txt [ /adbrite.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\994D1NV1.txt [ /ads.adk2.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\1GRST3XT.txt [ /lucidmedia.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\EPYXMEZY.txt [ /atdmt.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\AQW44UDH.txt [ /ad.yieldmanager.com ]
        C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Cookies\D8XPCJCO.txt [ /invitemedia.com ]
        C:\USERS\THOMAS\AppData\Roaming\Microsoft\Windows\Cookies\Low\thomas@yadro[2].txt [ Cookie:thomas@yadro.ru/ ]
        C:\USERS\THOMAS\AppData\Roaming\Microsoft\Windows\Cookies\Low\thomas@doubleclick[1].txt [ Cookie:thomas@doubleclick.net/ ]
        C:\USERS\THOMAS\AppData\Roaming\Microsoft\Windows\Cookies\Low\thomas@rambler[1].txt [ Cookie:thomas@rambler.ru/ ]
        C:\USERS\THOMAS\AppData\Roaming\Microsoft\Windows\Cookies\Low\thomas@2o7[1].txt [ Cookie:thomas@2o7.net/ ]
        C:\USERS\THOMAS\AppData\Roaming\Microsoft\Windows\Cookies\Low\thomas@ww251.smartadserver[2].txt [ Cookie:thomas@ww251.smartadserver.com/ ]
        C:\USERS\THOMAS\AppData\Roaming\Microsoft\Windows\Cookies\Low\thomas@atdmt[2].txt [ Cookie:thomas@atdmt.com/ ]
        C:\USERS\THOMAS\Cookies\8VVBN600.txt [ Cookie:thomas@c.atdmt.com/ ]
        C:\USERS\THOMAS\Cookies\NFD1Q11C.txt [ Cookie:thomas@doubleclick.net/ ]
        C:\USERS\THOMAS\Cookies\CIXMSF3U.txt [ Cookie:thomas@ru4.com/ ]
        C:\USERS\THOMAS\Cookies\HJ3CWWU1.txt [ Cookie:thomas@mediaplex.com/ ]
        C:\USERS\THOMAS\Cookies\956O78NQ.txt [ Cookie:thomas@media6degrees.com/ ]
        C:\USERS\THOMAS\Cookies\8CAE8P2W.txt [ Cookie:thomas@smartadserver.com/ ]
        C:\USERS\THOMAS\Cookies\thomas@adtech[1].txt [ Cookie:thomas@adtech.de/ ]
        C:\USERS\THOMAS\Cookies\thomas@webmasterplan[2].txt [ Cookie:thomas@webmasterplan.com/ ]
        C:\USERS\THOMAS\Cookies\ZLEHZ1XT.txt [ Cookie:thomas@apmebf.com/ ]
        C:\USERS\THOMAS\Cookies\OYMGWC6B.txt [ Cookie:thomas@adbrite.com/ ]
        C:\USERS\THOMAS\Cookies\thomas@content.yieldmanager[2].txt [ Cookie:thomas@content.yieldmanager.com/ ]
        C:\USERS\THOMAS\Cookies\EPYXMEZY.txt [ Cookie:thomas@atdmt.com/ ]
        C:\USERS\THOMAS\Cookies\AQW44UDH.txt [ Cookie:thomas@ad.yieldmanager.com/ ]
        C:\USERS\THOMAS\Cookies\D8XPCJCO.txt [ Cookie:thomas@invitemedia.com/ ]
        C:\USERS\THOMAS\Cookies\thomas@adx.chip[3].txt [ Cookie:thomas@adx.chip.de/ ]
        .doubleclick.net [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .im.banner.t-online.de [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        ad2.adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .revsci.net [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .revsci.net [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .olympiaverlag.122.2o7.net [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .tradedoubler.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .tradedoubler.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .tradedoubler.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .apmebf.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .mediaplex.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .mediaplex.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .revsci.net [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .revsci.net [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        ad4.adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .tracking.quisma.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .doubleclick.net [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .accounts.google.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .accounts.google.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        accounts.google.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        accounts.google.com [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .revsci.net [ C:\USERS\THOMAS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .tvtv.122.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .ice.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.122.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        in.getclicky.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .vodafonegroup.122.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .guj.122.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .blau.122.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .rambler.ru [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .olympiaverlag.122.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .premiumtv.122.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .mediafire.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .twittercounter.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .rambler.ru [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .1way2sex.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        dfb.stats.yum.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        nl.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        nl.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        fr.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        fr.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .c.gigcount.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        www.unitymedia.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        www.unitymedia.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .medienelite.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .sonyeurope.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .lenovo.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .asknetag.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .getclicky.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .static.getclicky.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .xxxmama17.blogspot.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .mediaforge.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .mediaforge.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .trafficmp.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .trafficmp.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .trafficmp.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .msnportal.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .s.clickability.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .s.clickability.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .lego.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .paypal.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .e-questions.info [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .mediafire.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .mediafire.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .microsoftsto.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        tracking.sim-technik.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .sevenoneintermedia.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        www.count24.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        www.count24.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        www.count24.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        tracking.klicktel.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        tracking.klicktel.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        www.unitymedia.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .unitymediaforum.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .unitymediaforum.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .unitymediaforum.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .unitymediaforum.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .unitymediaforum.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .unitymediaforum.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        stats.twittwoch.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        int.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        int.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        www.belstat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .tns-counter.ru [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .openstat.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .findmespot.eu [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .findmespot.eu [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .newsquestdigitalmedia.122.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        ad.adserver01.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .ad.yieldmanager.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .ad.yieldmanager.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .eaeacom.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .sexlist.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .stats.paypal.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .webstats4u.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .philips.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .trackmyrace.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .trackmyrace.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .hearstmagazines.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .estat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        auth.breakmedia.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .secur.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .yadro.ru [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        www.mediamarkt.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .microsoftgamestudio.112.2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .accounts.google.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .accounts.google.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        accounts.youtube.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        www.searchenginetracking.nl [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .rambler.ru [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .moviepilot.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .moviepilot.de [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .hotclick2see.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .hotclick2see.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .hotclick2see.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .hotxxxarea.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .hotxxxarea.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .hotxxxarea.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        nl.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        nl.sitestat.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        accounts.youtube.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        statse.webtrendslive.com [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .toplist.cz [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]
        .toplist.eu [ C:\USERS\THOMAS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YY3DG203.DEFAULT\COOKIES.SQLITE ]

Trojan.Agent/Gen-FakeAV
        C:\PROGRAM FILES\WINRAR\DEFAULT.SFX


Alle Zeitangaben in WEZ +1. Es ist jetzt 02:38 Uhr.
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131