Trojaner-Board - Internet extrem langsam - an anderen Endgeräten problemlos -

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Internet extrem langsam - an anderen Endgeräten problemlos - (https://www.trojaner-board.de/120153-internet-extrem-langsam-anderen-endgeraeten-problemlos.html)

Internet extrem langsam - an anderen Endgeräten problemlos -

Hallo zusammen,

mein Problem in aller Kürze.

Vor ca. 3 Tagen war mein Laptop auf einmal nicht mehr im Wlan, ich musste das Passwort neu eingeben. Das Internet war danach sehr langsm, aber es ging noch so und ich war nicht misstrauisch. Am nächsten Tag nach dem Boot entdeckte der Laptop meinen Wirelass Controller neu und musste die Treiber neu installieren. Internet war mmer noch lahm. Seit heute geht das Internet fast gar nicht mehr.
Google.de lädt ca. 1 Minute, andere Seiten fast gar nicht. Der Browser zeigt nicht an das keine Verbindung hergestellt werden kann, er empfängt Daten, aber super lahm. Andere PCs / Tablets im gleichen Netzwerk laufen normal. Wenn ich den Laptop via tethering online schicke (also via Handy HSDPA) geht das Internet normal und schnell.

Hinweis: OTL hat nur die OTL.txt generiert, nicht die zweite oben angegebene?!

PS: Verzeiht mir bitte den lapidaren Ordnernamen „Viruszeugs“ :) &
ja, ich vermute der rechner ist ziemlich vollgemüllt :D

Hier die Logs:

OTL.txt

Zitat:

OTL.txt

OTL logfile created on: 22.07.2012 20:36:16 - Run 2
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\***\Desktop\viruszeugs
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,00 Gb Total Physical Memory | 1,96 Gb Available Physical Memory | 65,48% Memory free
6,00 Gb Paging File | 4,53 Gb Available in Paging File | 75,57% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,04 Gb Total Space | 0,79 Gb Free Space | 0,53% Space Free | Partition Type: NTFS
Drive D: | 137,33 Gb Total Space | 3,57 Gb Free Space | 2,60% Space Free | Partition Type: NTFS
Drive F: | 137,42 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.07.22 20:35:05 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\viruszeugs\OTL.exe
PRC - [2012.05.24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2012.05.11 23:03:15 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.05.11 23:03:15 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.05.11 23:03:15 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2012.05.11 23:03:15 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2012.04.04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.04.03 17:02:59 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvtray.exe
PRC - [2012.04.03 17:01:59 | 000,857,920 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2012.04.03 07:15:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011.12.20 14:32:00 | 000,634,880 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcUPCTLoader.exe
PRC - [2011.12.16 13:54:22 | 000,220,744 | ---- | M] (Geek Software GmbH) -- C:\Programme\PDF24\pdf24.exe
PRC - [2011.09.15 13:06:04 | 000,088,576 | ---- | M] () -- C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2011.08.02 09:33:30 | 004,910,912 | ---- | M] (DT Soft Ltd) -- C:\Programme\DAEMON Tools Lite\DTLite.exe
PRC - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe
PRC - [2011.06.24 06:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2011.03.28 20:31:16 | 000,193,920 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
PRC - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2010.11.20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009.10.06 01:56:00 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Programme\Common Files\Real\Update_OB\realsched.exe
PRC - [2009.02.26 19:36:46 | 000,030,040 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Office\Office12\GrooveMonitor.exe
PRC - [2009.02.26 03:52:22 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2009.01.09 19:46:32 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Programme\OpenOffice.org 3\program\soffice.bin
PRC - [2009.01.09 19:45:26 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Programme\OpenOffice.org 3\program\soffice.exe
PRC - [2008.11.25 19:22:10 | 000,170,552 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\HControl.exe
PRC - [2008.11.20 20:09:20 | 000,307,200 | -H-- | M] (DeviceVM) -- C:\ASUS.SYS\DVMExportService.exe
PRC - [2008.10.24 16:35:44 | 000,128,296 | ---- | M] () -- C:\Programme\AAVUpdateManager\aavus.exe
PRC - [2008.10.18 03:10:54 | 000,211,512 | ---- | M] (ATK) -- C:\Programme\P4G\BatteryLife.exe
PRC - [2008.09.03 03:11:04 | 008,105,984 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATKOSD2\ATKOSD2.exe
PRC - [2008.08.19 20:34:04 | 000,159,744 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Media\DMedia.exe
PRC - [2008.08.18 21:27:32 | 000,117,304 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\MsgTranAgt.exe
PRC - [2008.08.18 20:56:22 | 000,098,304 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\HControlUser.exe
PRC - [2008.08.14 07:00:16 | 000,158,264 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\WDC.exe
PRC - [2008.08.14 07:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\KBFiltr.exe
PRC - [2008.08.14 06:59:52 | 000,100,920 | ---- | M] () -- C:\Programme\ASUS\ATK Hotkey\AsLdrSrv.exe
PRC - [2008.08.14 02:21:56 | 002,482,176 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2008.07.19 05:52:16 | 000,104,936 | ---- | M] (CyberLink) -- C:\Programme\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2008.06.19 22:18:12 | 000,154,168 | ---- | M] (ASUS) -- C:\Programme\ASUS\ASUS CopyProtect\ASPG.exe
PRC - [2008.06.18 08:10:34 | 000,424,504 | ---- | M] (ASUS) -- C:\Programme\ASUS\SmartLogon\smartlogon.exe
PRC - [2008.06.18 08:10:24 | 000,297,528 | ---- | M] (ASUS) -- C:\Programme\ASUS\SmartLogon\sensorsrv.exe
PRC - [2008.06.04 03:29:08 | 000,851,968 | ---- | M] (ATK) -- C:\Programme\ASUS\Splendid\ACMON.exe
PRC - [2007.11.30 21:20:44 | 000,051,768 | ---- | M] () -- C:\Programme\ASUS\ASUS Live Update\ALU.exe
PRC - [2007.08.08 10:08:40 | 000,094,208 | ---- | M] () -- C:\Programme\ATKGFNEX\GFNEXSrv.exe
PRC - [2007.07.06 02:53:44 | 001,040,384 | ---- | M] () -- C:\Programme\Wireless Console 2\wcourier.exe
PRC - [2005.07.07 01:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\System32\ACEngSvr.exe

========== Modules (No Company Name) ==========

MOD - [2012.05.13 01:29:31 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\f3814b488d9e083cbbc623e01b389f09\System.Data.ni.dll
MOD - [2012.05.13 01:27:59 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012.05.13 01:27:53 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012.05.13 01:27:52 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012.05.13 01:27:36 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2011.12.20 14:32:00 | 001,515,520 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\Maps\R66Api.dll
MOD - [2011.12.20 14:32:00 | 000,634,880 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcUPCTLoader.exe
MOD - [2011.12.20 14:32:00 | 000,559,244 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\sqlite3.7.dll
MOD - [2011.12.20 14:32:00 | 000,516,599 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\sqlite3.dll
MOD - [2011.12.20 14:32:00 | 000,389,120 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcDetect.dll
MOD - [2011.12.20 14:32:00 | 000,172,032 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcDetectLegend.dll
MOD - [2011.12.20 14:32:00 | 000,143,360 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcDisk.dll
MOD - [2011.12.20 14:32:00 | 000,103,936 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\OutputLog.dll
MOD - [2011.12.20 14:32:00 | 000,094,208 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\fdHttpd.dll
MOD - [2011.07.29 01:09:42 | 000,096,112 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe
MOD - [2010.11.13 02:02:21 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.11.05 03:59:41 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_de_b77a5c561934e089\System.resources.dll
MOD - [2010.11.05 03:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2008.10.17 02:45:20 | 000,014,848 | ---- | M] () -- C:\Programme\P4G\OvrClk.dll
MOD - [2008.09.16 20:18:06 | 000,132,608 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll
MOD - [2008.08.21 01:49:56 | 000,016,384 | ---- | M] () -- C:\Programme\P4G\DevMng.dll
MOD - [2008.07.29 13:55:14 | 000,969,728 | ---- | M] () -- C:\Programme\OpenOffice.org 3\program\libxml2.dll
MOD - [2008.07.19 05:52:08 | 000,649,704 | ---- | M] () -- C:\Programme\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2008.06.09 19:55:08 | 000,013,096 | ---- | M] () -- C:\Programme\CyberLink\Power2Go\CLMLSvcPS.dll
MOD - [2007.11.30 21:20:44 | 000,051,768 | ---- | M] () -- C:\Programme\ASUS\ASUS Live Update\ALU.exe
MOD - [2007.11.13 01:41:50 | 000,106,496 | ---- | M] () -- C:\Programme\ASUS\ATK Hotkey\MsgTran.dll
MOD - [2007.08.14 23:59:54 | 006,365,184 | ---- | M] () -- C:\Programme\Common Files\LightScribe\QtGui4.dll
MOD - [2007.07.12 23:55:52 | 000,131,072 | ---- | M] () -- C:\Programme\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
MOD - [2007.07.12 23:55:28 | 001,581,056 | ---- | M] () -- C:\Programme\Common Files\LightScribe\QtCore4.dll
MOD - [2007.03.10 02:16:52 | 000,106,496 | ---- | M] () -- C:\Programme\ATKGFNEX\AGFNEX.dll

========== Win32 Services (SafeList) ==========

SRV - [2012.05.11 23:03:15 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.05.11 23:03:15 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.04.04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.04.03 19:16:00 | 001,262,912 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012.04.03 07:15:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012.03.08 18:32:24 | 001,492,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2011.09.15 13:06:04 | 000,088,576 | ---- | M] () [Auto | Running] -- C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2011.07.20 06:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009.02.26 19:36:22 | 000,064,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2008.11.20 20:09:20 | 000,307,200 | -H-- | M] (DeviceVM) [Auto | Running] -- C:\ASUS.SYS\DVMExportService.exe -- (DvmMDES)
SRV - [2008.10.24 16:35:44 | 000,128,296 | ---- | M] () [Auto | Running] -- C:\Programme\AAVUpdateManager\aavus.exe -- (AAV UpdateService)
SRV - [2008.08.14 06:59:52 | 000,100,920 | ---- | M] () [Auto | Running] -- C:\Programme\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2007.08.08 10:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Programme\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2007.05.31 09:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007.05.31 09:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2006.10.26 23:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)

========== Driver Services (SafeList) ==========

DRV - [2012.05.11 23:03:16 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.05.11 23:03:16 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2012.04.03 19:16:00 | 011,348,288 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011.11.09 22:12:31 | 000,232,512 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2011.10.11 15:00:01 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011.04.30 14:00:18 | 000,039,064 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2011.04.30 14:00:06 | 000,041,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WINUSB)
DRV - [2010.06.23 11:24:56 | 000,023,040 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\htcnprot.sys -- (htcnprot)
DRV - [2010.06.17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.05.07 06:50:55 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2010.05.07 06:50:54 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009.11.09 23:39:14 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2009.10.26 09:54:24 | 000,025,088 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ANDROIDUSB.sys -- (HTCAND32)
DRV - [2009.07.14 00:02:53 | 000,048,128 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SiSGB6.sys -- (SiSGbeLH)
DRV - [2009.07.14 00:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008.12.10 05:20:56 | 001,772,544 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV - [2008.11.16 18:39:44 | 000,131,984 | ---- | M] (Deterministic Networks, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\dne2000.sys -- (DNE)
DRV - [2008.06.03 08:41:51 | 000,015,928 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2008.05.29 20:21:04 | 000,015,416 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\System32\drivers\lullaby.sys -- (lullaby)
DRV - [2007.07.24 21:09:04 | 000,013,880 | ---- | M] () [Kernel | Auto | Running] -- C:\Programme\ATKGFNEX\ASMMAP.sys -- (ASMMAP)
DRV - [2007.01.18 20:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CVirtA.sys -- (CVirtA)
DRV - [2006.12.14 09:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2005.11.03 16:40:07 | 000,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x)
DRV - [2005.08.10 14:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2005.05.16 15:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUS

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{53C30388-824D-4D09-AA65-87FD20D67DA1}: "URL" = hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search={SearchTerms}
IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUS
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search="
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "hxxp://start.icq.com/"
FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.5
FF - prefs.js..extensions.enabledItems: zotero@chnm.gmu.edu:2.0.4
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906
FF - prefs.js..extensions.enabledItems: {02B06ED9-2E6A-48B2-9EB1-8C3BDB23353A}:1.9.1
FF - prefs.js..extensions.enabledItems: facepad@lazyrussian.com:0.8.2
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q="
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 50370
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_257.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.448: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\***\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\***\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\***\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.11.04 04:32:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.01.30 19:10:21 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.11.04 04:32:13 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{02B06ED9-2E6A-48B2-9EB1-8C3BDB23353A}: C:\Users\***\AppData\Local\{02B06ED9-2E6A-48B2-9EB1-8C3BDB23353A} [2010.11.04 04:49:54 | 000,000,000 | ---D | M]

[2011.11.27 21:52:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\vvi9ogvm.default\extensions
[2011.11.27 21:52:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\vvi9ogvm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2011.11.27 21:52:58 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.02.11 18:01:16 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011.11.03 19:53:49 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2011.10.03 06:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll

========== Chrome ==========

CHR - homepage: hxxp://www.google.com
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie= {inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: hxxp://www.google.com
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\Application\20.0.1132.57\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\Application\20.0.1132.57\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\***\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Java(TM) Platform SE 7 U4 (Enabled) = C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 7.0.40.255 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa2.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: QUAKE LIVE (Enabled) = C:\ProgramData\id Software\QuakeLive\npquakezero.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\***\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Google Update (Enabled) = C:\Users\***\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Facebook Plugin (Enabled) = C:\Users\***\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll
CHR - plugin: Move Media Player 7 (Enabled) = C:\Users\***\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - Extension: YouTube = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Skype Click to Call = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\
CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
CHR - Extension: Google Mail = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (no name) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - No CLSID value found.
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe ()
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe (ASUS)
O4 - HKLM..\Run: [ATKMEDIA] C:\Programme\ASUS\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Programme\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [HControlUser] C:\Programme\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [HTC Sync Loader] C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [P2Go_Menu] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [PDFPrint] C:\Programme\PDF24\pdf24.exe (Geek Software GmbH)
O4 - HKLM..\Run: [Skytel] C:\Programme\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [OscarEditor] "C:\Program Files\MOUSE Editor\\MouseEditor.exe" Minimum File not found
O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O13 - gopher Prefix: missing
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.de/common/asusTek_sys_ctrl.cab (asusTek_sysctrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F3AEA16B-1611-4632-8548-634EC3598CBA}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Programme\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O24 - Desktop WallPaper: C:\Users\***\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\***\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [1999.09.21 16:44:22 | 000,000,027 | R--- | M] () - F:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell - "" = AutoRun
O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell\AutoRun\command - "" = F:\Setup.exe -- [1999.01.12 14:42:20 | 000,073,728 | R--- | M] (InstallShield Software Corporation)
O33 - MountPoints2\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\Shell\dinstall\command - "" = F:\directx\dxsetup.exe -- [1999.01.08 20:10:00 | 000,096,768 | R--- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012.07.22 20:30:19 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\viruszeugs
[2012.07.22 20:22:39 | 000,000,000 | -H-D | C] -- C:\dvmexp
[2012.07.21 14:35:23 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{E61564EC-BA2E-4A7F-A0AC-BBE988D70A32}
[2012.07.21 14:34:45 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{EE462F51-646A-4232-8116-F40D5B89AD8C}
[2012.07.20 23:49:48 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7F73E387-C28F-408F-AA79-AFFAE0F9A3FD}
[2012.07.20 23:49:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{D57486E4-CC3E-4F0C-83AF-DF5A4180E7A5}
[2012.07.20 23:43:49 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3457CA14-B8CD-4A90-AD7E-105067D3C458}
[2012.07.20 23:43:32 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A60D35AC-7358-4245-8DC7-6C10B0EE4D6A}
[2012.07.19 01:12:57 | 000,000,000 | ---D | C] -- C:\Users\***\Documents\theHunter
[2012.07.19 01:12:54 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\theHunter
[2012.07.19 01:10:23 | 000,000,000 | ---D | C] -- C:\Windows\System32\directx
[2012.07.19 01:04:55 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\CyberLink
[2012.07.17 00:11:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carnivores 2
[2012.07.15 20:36:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carnivores
[2012.07.15 20:02:25 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0ABC2912-0253-41A7-A288-0C75AECA11B1}
[2012.07.15 20:02:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BE3F9F09-A7B7-4693-9670-B4F4E24825F2}
[2012.07.08 20:29:33 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{78C72B40-BF69-467F-A8EC-3A908FCA4F36}
[2012.07.08 20:29:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C92AE0D9-92DC-421F-B815-4F2B5C4FFF5B}
[2012.07.08 20:26:39 | 000,000,000 | ---D | C] -- C:\Windows\de
[2012.07.08 20:14:52 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{6335CED3-14E3-4B26-9D3F-750A5AED10A5}
[2012.07.08 20:14:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{17DCA90B-2287-4FFB-BD6D-A39D928E9BBB}
[2012.07.07 00:10:24 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2AFCDE61-8680-46D2-92D2-FF74FA5653B9}
[2012.07.07 00:10:01 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{05109273-94C2-4D50-B76D-FDB373E9C22D}

========== Files - Modified Within 30 Days ==========

[2012.07.22 20:34:31 | 000,000,176 | ---- | M] () -- C:\Users\***\defogger_reenable
[2012.07.22 20:32:00 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004UA.job
[2012.07.22 20:30:39 | 000,010,352 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.07.22 20:30:39 | 000,010,352 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.07.22 20:22:49 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2012.07.22 20:22:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.07.22 20:22:10 | 2415,394,816 | -HS- | M] () -- C:\hiberfil.sys
[2012.07.22 20:03:00 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000UA.job
[2012.07.22 20:00:31 | 000,001,078 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.07.22 17:03:01 | 000,001,072 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000Core.job
[2012.07.17 01:11:37 | 000,001,593 | ---- | M] () -- C:\Windows\VPNUnInstall.MIF
[2012.07.16 23:39:55 | 000,001,068 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004Core.job
[2012.07.15 03:29:34 | 000,428,056 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.07.14 23:16:43 | 000,002,415 | ---- | M] () -- C:\Users\***\Desktop\Google Chrome.lnk
[2012.07.06 13:59:34 | 000,838,258 | ---- | M] () -- C:\Users\***\Desktop\mieterfragebogen.jpg
[2012.07.03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.06.25 20:20:39 | 000,654,166 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.06.25 20:20:39 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.06.25 20:20:39 | 000,130,006 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.06.25 20:20:39 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.06.24 20:11:05 | 000,032,019 | ---- | M] () -- C:\Users\***\Desktop\Bild.jpg

========== Files Created - No Company Name ==========

[2012.07.22 20:34:10 | 000,000,176 | ---- | C] () -- C:\Users\***\defogger_reenable
[2012.07.22 20:00:31 | 000,001,078 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.07.17 01:10:19 | 000,001,593 | ---- | C] () -- C:\Windows\VPNUnInstall.MIF
[2012.07.06 13:29:13 | 000,838,258 | ---- | C] () -- C:\Users\***\Desktop\mieterfragebogen.jpg
[2012.06.24 20:11:30 | 000,032,019 | ---- | C] () -- C:\Users\***\Desktop\Bild.jpg
[2012.05.12 02:15:08 | 000,000,000 | ---- | C] () -- C:\Windows\PowerReg.dat
[2012.04.03 07:16:04 | 000,423,744 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2012.01.27 23:41:51 | 000,000,096 | ---- | C] () -- C:\Users\***\.asadminpass
[2011.11.10 19:33:05 | 000,000,001 | ---- | C] () -- C:\Windows\System32\SI.bin
[2011.11.06 16:48:31 | 000,410,942 | ---- | C] () -- C:\Windows\adb.exe
[2011.11.06 16:48:31 | 000,401,408 | ---- | C] () -- C:\Windows\wget.exe
[2011.11.06 16:48:31 | 000,356,009 | ---- | C] () -- C:\Windows\fastboot.exe
[2011.11.06 16:48:31 | 000,063,488 | ---- | C] () -- C:\Windows\md5sum.exe
[2011.11.04 22:47:29 | 000,032,256 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2011.03.03 22:36:38 | 000,007,168 | ---- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.06.29 20:44:07 | 000,001,418 | ---- | C] () -- C:\Users\***\.recently-used.xbel
[2008.08.09 00:48:20 | 000,090,112 | ---- | C] () -- C:\Program Files\Common Files\CPInstallAction.dll
[2008.05.22 19:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files\Common Files\banner.jpg

========== LOP Check ==========

[2012.07.08 21:37:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\.minecraft
[2010.11.04 04:50:33 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\AnvSoft
[2012.05.12 02:41:38 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Atari
[2011.12.26 17:53:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\calibre
[2011.08.12 13:13:59 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Command & Conquer 3 Tiberium Wars
[2009.04.08 23:35:55 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools
[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Lite
[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Pro
[2012.07.22 20:24:08 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Dropbox
[2012.05.10 21:54:54 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DVDVideoSoft
[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Electronic Arts
[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Facebook
[2010.01.13 19:12:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\FVZilla
[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GetRightToGo
[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\gtk-2.0
[2012.01.12 21:40:34 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HandBrake
[2012.01.29 21:24:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HTC
[2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Imperium Romanum
[2011.09.21 22:23:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Leadertech
[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade
[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade Warband
[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Moyea
[2012.07.03 21:26:19 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mumble
[2011.07.25 12:20:10 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\MyPhoneExplorer
[2010.11.04 04:51:14 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\OpenOffice.org
[2010.11.04 04:51:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\The Bat!
[2012.07.21 16:01:39 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\uTorrent
[2010.11.09 02:13:15 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Windows Live Writer
[2011.12.28 23:42:07 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

< End of report >

Warum postest du nicht die Logs von Malwarebytes wenn das Tool bei dir installiert und auch offensichtlich schon genutzt wurde?

Hallo Cosinus...

Eine durchaus berechtigte Frage, die ich leider nicht beantworten kann...hab einfach nicht daran gedacht bzw. hab mich wohl auf die anderen Programme konzentriert.

Macht aber nichts, hier ist das log:

Code:

Malwarebytes Anti-Malware 1.62.0.1300

www.malwarebytes.org
 

Datenbank Version: v2012.07.22.08
 

Windows 7 Service Pack 1 x86 NTFS

Internet Explorer 8.0.7601.17514

Darian :: ***-PC [Administrator]
 

22.07.2012 20:02:28

mbam-log-2012-07-22 (20-02-28).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 270563

Laufzeit: 13 Minute(n), 36 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 1

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings|ProxyServer (PUM.Bad.Proxy) -> Daten: http=127.0.0.1:50370 -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 3

C:\Users\***\Downloads\SoftonicDownloader_fuer_freemind.exe (PUP.ToolbarDownloader) -> Keine Aktion durchgeführt.

C:\Users\User2\Downloads\SoftonicDownloader_fuer_gpl-mpeg-1-2-directshow-decoder-filter.exe (PUP.OfferBundler.ST) -> Keine Aktion durchgeführt.

C:\Users\***\AppData\Roaming\Microsoft\stor.cfg (Malware.Trace) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Seit Heute kommt folgende Fehlermeldung wenn ich Avira öffnen möchte:

http://s14.directupload.net/images/120725/3zoqfzob.jpg

Der Echtzeitscanner ist lt. Kontextmenü jedoch aktiviert.

ICh weiß nicht ob Avira logs automatisch speichert(?), sonst würde ich das letzte Avira log auch noch anhängen. Ich finde es zumindest nicht auf der Platte.

Danke und einen sonnigen Abend!

Vermüllte Software von Softonic scheint gerade stark in Mode zu sein! http://cosgan.de/images/midi/boese/a040.gif

Finger weg von Softonic!! :pfui:

Softonic ist eine Toolbar- und Adwareschleuder! Finger weg! Software lädt man sich mit oberster Priorität direkt vom Hersteller und nicht von solchen Toolbarklitschen wie Softonic! Im Notfall würde natürlich chip.de gehen

Bitte erstmal routinemäßig einen Vollscan mit malwarebytes machen und Log posten. =>ALLE lokalen Datenträger (außer CD/DVD) überprüfen lassen!
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Die Funde mit Malwarebytes bitte alle entfernen, sodass sie in der Quarantäne von Malwarebytes aufgehoben werden! NICHTS voreilig aus der Quarantäne entfernen!

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

hier steht das Log

Hey =)

Normalerweise versuche ich Toolbars und auch so Softonic Downloadern aus dem Weg zu gehen...aber nun ja. Leider nicht 100% erfolgreich. Für User 2 kann ich leider nicht wirklich sprechen, hab ihr das aber auch noch mal gesagt.

HIer nun die Logs:

Code:

Malwarebytes Anti-Malware 1.62.0.1300

www.malwarebytes.org
 

Datenbank Version: v2012.07.26.11
 

Windows 7 Service Pack 1 x86 NTFS

Internet Explorer 8.0.7601.17514

*** :: ***-PC [Administrator]
 

26.07.2012 12:12:42

mbam-log-2012-07-26 (12-12-42).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 517830

Laufzeit: 2 Stunde(n), 20 Minute(n), 14 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 3

C:\Users\***\Downloads\SoftonicDownloader_fuer_freemind.exe (PUP.ToolbarDownloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\***\Downloads\Old\SoftonicDownloader_fuer_gpl-mpeg-1-2-directshow-decoder-filter.exe (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\User2\Downloads\SoftonicDownloader_fuer_gpl-mpeg-1-2-directshow-decoder-filter.exe (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Nun noch die alten logs:

1. vom 03.11.2010

Code:

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org
 

Datenbank Version: 5035
 

Windows 6.1.7600

Internet Explorer 8.0.7600.16385
 

03.11.2010 22:59:08

mbam-log-2010-11-03 (22-59-08).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)

Durchsuchte Objekte: 395649

Laufzeit: 2 Stunde(n), 32 Minute(n), 41 Sekunde(n)
 

Infizierte Speicherprozesse: 4

Infizierte Speichermodule: 1

Infizierte Registrierungsschlüssel: 2

Infizierte Registrierungswerte: 5

Infizierte Dateiobjekte der Registrierung: 2

Infizierte Verzeichnisse: 4

Infizierte Dateien: 30
 

Infizierte Speicherprozesse:

C:\Users\***\AppData\Local\Temp\dfrgsnapnt.exe (Trojan.FakeAlert) -> Unloaded process successfully.

C:\Users\***\AppData\Roaming\Microsoft\svchost.exe (Backdoor.Bot) -> Unloaded process successfully.

C:\Users\***\AppData\Roaming\Microsoft\Windows\shell.exe (Trojan.Shell) -> Unloaded process successfully.

C:\Users\***\AppData\Local\Temp\dwm.exe (Trojan.Agent) -> Unloaded process successfully.
 

Infizierte Speichermodule:

C:\Users\***\AppData\Local\mspiay.dll (Trojan.Hiloti) -> Delete on reboot.
 

Infizierte Registrierungsschlüssel:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\flv direct player (Adware.FLVPlayer) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Software\FLV Direct Player (Adware.FLVPlayer) -> Quarantined and deleted successfully.
 

Infizierte Registrierungswerte:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wlefal (Trojan.Hiloti) -> Delete on reboot.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\dfrgsnapnt.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost (Backdoor.Bot) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\pyibosowuwul (Trojan.Agent.U) -> Delete on reboot.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\load (Trojan.Agent) -> Quarantined and deleted successfully.
 

Infizierte Dateiobjekte der Registrierung:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Load (Trojan.Agent) -> Data: c:\users\***\appdata\local\temp\dwm.exe -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell) -> Bad: (explorer.exe,C:\Users\D***\AppData\Roaming\Microsoft\Windows\shell.exe) Good: (Explorer.exe) -> Quarantined and deleted successfully.
 

Infizierte Verzeichnisse:

C:\Program Files\FLV Direct Player (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\Skin (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\Skin\DirectFLV (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FLV Direct Player (Adware.FLVPlayer) -> Quarantined and deleted successfully.
 

Infizierte Dateien:

C:\Users\***\AppData\Local\mspiay.dll (Trojan.Hiloti) -> Delete on reboot.

C:\Users\***\AppData\Local\Temp\dfrgsnapnt.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\FLVPlayer.exe (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\uninstall.exe (Adware.FLVPlayer) -> Quarantined and deleted successfully.

C:\Users\***\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ZXLJ20J\setup[1].exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Users\Darian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K1HOVHFY\setup[1].exe (Trojan.Hiloti) -> Quarantined and deleted successfully.

C:\Users\***\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RHU43OSX\5-direct[1].ex (Trojan.Agent.Gen) -> Quarantined and deleted successfully.

C:\Users\***\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TRV0OVL0\setup[1].exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.

C:\Users\***\AppData\Local\Temp\0.6632338777721782.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.

C:\Users\***\AppData\Local\Temp\1048.tmp (Trojan.Agent.Gen) -> Quarantined and deleted successfully.

C:\Users\***\AppData\Local\Temp\17D6.tmp.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.

C:\Users\***\AppData\Local\Temp\IuMepIQkir.exe (Trojan.Hiloti) -> Quarantined and deleted successfully.

C:\Users\***\AppData\Local\Temp\topwesitjh (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\downloading.swf (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\player.swf (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\preload.swf (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\Skin\DirectFLV\Button.bmp (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\Skin\DirectFLV\Logo.bmp (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\Skin\DirectFLV\skin.xml (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\Skin\DirectFLV\SysCloseButton.bmp (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\Skin\DirectFLV\SysMaxButton.bmp (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\Skin\DirectFLV\SysMinButton.bmp (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Program Files\FLV Direct Player\Skin\DirectFLV\Window.bmp (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FLV Direct Player\FLV Direct Player.lnk (Adware.FLVPlayer) -> Quarantined and deleted successfully.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FLV Direct Player\Uninstall FLV Direct Player.lnk (Adware.FLVPlayer) -> Quarantined and deleted successfully.

C:\Users\***\AppData\Roaming\Microsoft\svchost.exe (Backdoor.Bot) -> Quarantined and deleted successfully.

C:\Users\Darian\AppData\Roaming\Microsoft\Windows\shell.exe (Trojan.Shell) -> Quarantined and deleted successfully.

C:\Users\Public\Desktop\FLV Direct Player.lnk (Adware.BHO.FL) -> Quarantined and deleted successfully.

C:\Users\***\AppData\Local\igahudafugaho.dll (Trojan.Agent.U) -> Delete on reboot.

C:\Users\***\AppData\Local\Temp\dwm.exe (Trojan.Agent) -> Quarantined and deleted successfully.

und das letzte alte Logfile vom 10.11.2010

Code:

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org
 

Datenbank Version: 5035
 

Windows 6.1.7600

Internet Explorer 8.0.7600.16385
 

10.11.2010 22:43:02

mbam-log-2010-11-10 (22-43-02).txt
 

Art des Suchlaufs: Quick-Scan

Durchsuchte Objekte: 636

Laufzeit: 21 Sekunde(n)
 

Infizierte Speicherprozesse: 0

Infizierte Speichermodule: 0

Infizierte Registrierungsschlüssel: 0

Infizierte Registrierungswerte: 0

Infizierte Dateiobjekte der Registrierung: 0

Infizierte Verzeichnisse: 0

Infizierte Dateien: 0
 

Infizierte Speicherprozesse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung:

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien:

(Keine bösartigen Objekte gefunden)

Und nun das log des Online Scanners:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=46a05b0f789175458dd2e18fc6c79e56

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2012-07-26 04:56:27

# local_time=2012-07-26 06:56:27 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=512 16777215 100 0 0 0 0 0

# compatibility_mode=1792 16777215 100 0 24258095 24258095 0 0

# compatibility_mode=5893 16776573 100 94 74130 94937744 0 0

# compatibility_mode=8192 67108863 100 0 299 299 0 0

# scanned=261160

# found=4

# cleaned=0

# scan_time=15233

D:\DESIRE ROOT\appmonster2\backup\com.androidlab.gpsfix\rev\110921.apk        a variant of Android/Adware.AirPush.B application (unable to clean)        00000000000000000000000000000000        I

D:\DESIRE ROOT\clockworkmod\backup\2011-11-06-18.04.49\data.ext3.tar        a variant of Android/Adware.AirPush.B application (unable to clean)        00000000000000000000000000000000        I

D:\DESIRE ROOT\clockworkmod\backup\2011-11-09-18.12.54_cynajogen\data.ext3.tar        a variant of Android/Adware.AirPush.B application (unable to clean)        00000000000000000000000000000000        I

D:\XDADEV\DESIRE SD CARD\clockworkmod\backup\2011-11-09-18.12.54_cynajogen\data.ext3.tar        a variant of Android/Adware.AirPush.B application (unable to clean)        00000000000000000000000000000000        I

Danke Dir!

Lg!

adwCleaner - Toolbars und ungewollte Start-/Suchseiten aufspüren

Downloade Dir bitte AdwCleaner auf deinen Desktop.

Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Search.
Nach Ende des Suchlaufs öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.

Hallo Cosinus,

hier das Log:

Code:

# AdwCleaner v1.703 - Logfile created 07/27/2012 at 13:20:54

# Updated 20/07/2012 by Xplode

# Operating system : Windows 7 Home Premium Service Pack 1 (32 bits)

# User : *** - ***-PC

# Running from : C:\Users\***\Downloads\adwcleaner.exe

# Option [Search]
 
 

***** [Services] *****
 
 

***** [Files / Folders] *****
 

Folder Found : C:\Users\***\AppData\Local\Temp\Iminent

Folder Found : C:\Users\***\AppData\LocalLow\boost_interprocess

Folder Found : C:\Users\***\AppData\LocalLow\Toolbar4

Folder Found : C:\Users\***\AppData\LocalLow\boost_interprocess

Folder Found : C:\ProgramData\IBUpdaterService
 

***** [Registry] *****
 

Key Found : HKCU\Software\AppDataLow\HavingFunOnline

Key Found : HKCU\Software\Softonic

Key Found : HKLM\SOFTWARE\DT Soft

Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb

Key Found : HKLM\SOFTWARE\Iminent

Key Found : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43

Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32

Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

Key Found : HKLM\SOFTWARE\Wise Solutions
 

***** [Registre - GUID] *****
 

Key Found : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}

Key Found : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Key Found : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Key Found : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Key Found : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Key Found : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Key Found : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Key Found : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Key Found : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Key Found : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Key Found : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Key Found : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Key Found : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Key Found : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Key Found : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Key Found : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Key Found : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Key Found : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Key Found : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Key Found : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Key Found : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Key Found : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Key Found : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Key Found : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Key Found : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Key Found : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Key Found : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Key Found : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Key Found : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Key Found : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Key Found : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Key Found : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Key Found : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Key Found : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Key Found : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Key Found : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Key Found : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Key Found : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Key Found : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Key Found : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Key Found : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Key Found : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Key Found : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Key Found : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Key Found : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{58124A0B-DC32-4180-9BFF-E0E21AE34026}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{58124A0B-DC32-4180-9BFF-E0E21AE34026}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]
 

***** [Internet Browsers] *****
 

-\\ Internet Explorer v8.0.7601.17514
 

[OK] Registry is clean.
 

-\\ Mozilla Firefox v [Unable to get version]
 

Profile name : default 

File : C:\Users\User2\AppData\Roaming\Mozilla\Firefox\Profiles\w3h8bggn.default\prefs.js
 

[OK] File is clean.
 

Profile name : default 

File : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\4azxjc3j.default\prefs.js
 

[OK] File is clean.
 

-\\ Google Chrome v20.0.1132.57
 

File : C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

Found :          "path": "C:\\Users\\***\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\npUnity3D32.dll",

Found :          "freemind.softonic.de": -0.5778829455375671,
 

*************************
 

AdwCleaner[R1].txt - [7616 octets] - [27/07/2012 13:20:55]
 

########## EOF - C:\AdwCleaner[R1].txt - [7744 octets] ##########

Ich wünsche einen sonnigen Tag :)

adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Delete.
Bestätige jeweils mit Ok.
Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[S1].txt.

und weiter gehts:

Code:

# AdwCleaner v1.703 - Logfile created 07/27/2012 at 18:10:24

# Updated 20/07/2012 by Xplode

# Operating system : Windows 7 Home Premium Service Pack 1 (32 bits)

# User : *** - ***-PC

# Running from : C:\Users\***\Downloads\adwcleaner.exe

# Option [Delete]
 
 

***** [Services] *****
 
 

***** [Files / Folders] *****
 

Folder Deleted : C:\Users\***\AppData\Local\Temp\Iminent

Folder Deleted : C:\Users\***\AppData\LocalLow\boost_interprocess

Folder Deleted : C:\Users\***\AppData\LocalLow\Toolbar4

Folder Deleted : C:\Users\User2\AppData\LocalLow\boost_interprocess

Folder Deleted : C:\ProgramData\IBUpdaterService
 

***** [Registry] *****
 

Key Deleted : HKCU\Software\AppDataLow\HavingFunOnline

Key Deleted : HKCU\Software\Softonic

Key Deleted : HKLM\SOFTWARE\DT Soft

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb

Key Deleted : HKLM\SOFTWARE\Iminent

Key Deleted : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

Key Deleted : HKLM\SOFTWARE\Wise Solutions
 

***** [Registre - GUID] *****
 

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Key Deleted : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{58124A0B-DC32-4180-9BFF-E0E21AE34026}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{58124A0B-DC32-4180-9BFF-E0E21AE34026}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]
 

***** [Internet Browsers] *****
 

-\\ Internet Explorer v8.0.7601.17514
 

[OK] Registry is clean.
 

-\\ Mozilla Firefox v [Unable to get version]
 

Profile name : default 

File : C:\Users\User2\AppData\Roaming\Mozilla\Firefox\Profiles\w3h8bggn.default\prefs.js
 

[OK] File is clean.
 

Profile name : default 

File : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\4azxjc3j.default\prefs.js
 

[OK] File is clean.
 

-\\ Google Chrome v20.0.1132.57
 

File : C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

Deleted :          "path": "C:\\Users\\***\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\npUnity3D32.dll",

Deleted :          "freemind.softonic.de": -0.5778829455375671,
 

*************************
 

AdwCleaner[R1].txt - [7745 octets] - [27/07/2012 13:20:55]

AdwCleaner[S1].txt - [7832 octets] - [27/07/2012 18:10:25]
 

########## EOF - C:\AdwCleaner[S1].txt - [7960 octets] ##########

Hätte da mal zwei Fragen bevor es weiter geht

1.) Geht der normale Modus von Windows (wieder) uneingeschränkt?
2.) Vermisst du irgendwas im Startmenü? Sind da leere Ordner unter alle Programme oder ist alles vorhanden?

Hallo,

"Unglücklicherweise" bin ich am WOchenende umgezogen, habe hier also keinen Unitymediaanschluss mehr, besser gesagt bisher überhaupt kein Internet, außer via tethering.

Der Rechner läuft schnell und problemlos, war aber vorher auch schon. Das Internet via tethering läuft auch problemlos. Als ich es Samstag das letzte mal via DSL probierte, tat sich da nichts...sprich das Problem bestand noch.

Ich müsste halt mal gucken ob und wie es läuft, sobald mein DSL hier läuft bzw. ich die Geräte bekomme......

Lg!

Sorry...JA ich habe leere Ordner!

Sorry - ja ich habe leere Ordner!

Hatte den Teil der Antwort vorhin wohl ausversehen gelöscht.

Hättest du auch die Güte kurz zu erläutern was da leer bzw, was du vermisst?!
Ein paar leere Ordner können durchaus normal sein, aber nicht alle!

Selbstverständlich habe ich die Güte.

Jeweils ein Ordner:

SRS LABS, Sci Games, Paradox Interactive(+), Nvidia Corporation(+), NDW, Lavalys, ID SOftware (+), Easyutilities, Bethesda Software(+), Activision(+).

Die mit dem + markierten kann ich zuordnen, sofern das deine nächste Frage wäre...nicht das ich wieder eine unnötige Nachfrage erzwinge :)

Auf jeden Fall danke für deine Hilfe...ganz ohne Ironie!!

LG!

Sind diese Ordner zufällig leer, weil du diese Programme mal deinstalliert hast? :)

Davon ist auszugehen!

:)

Sieht der Rechner denn für dich clean aus?

Mach bitte ein neues OTL-Log. Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

hier steht das Log

CustomScan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop. Falls schon vorhanden, bitte die ältere vorhandene Datei durch die neu heruntergeladene Datei ersetzen, damit du auch wirklich mit einer aktuellen Version von OTL arbeitest.

Starte bitte die OTL.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Setze oben mittig den Haken bei Scanne alle Benutzer
Kopiere nun den kompletten Inhalt aus der untenstehenden Codebox in die http://billy-oneal.com/Canned%20Spee.../customFix.png Textbox von OTL - wenn OTL auf deutsch ist wird sie mit http://larusso.trojaner-board.de/Images/otlfix.jpg beschriftet

Code:

netsvcs

msconfig

safebootminimal

safebootnetwork

activex

drivers32

%ALLUSERSPROFILE%\Application Data\*.

%ALLUSERSPROFILE%\Application Data\*.exe /s

%APPDATA%\*.

%APPDATA%\*.exe /s

%SYSTEMDRIVE%\*.exe

/md5start

wininit.exe

userinit.exe

eventlog.dll

scecli.dll

netlogon.dll

cngaudit.dll

ws2ifsl.sys

sceclt.dll

ntelogon.dll

winlogon.exe

logevent.dll

user32.DLL

iaStor.sys

nvstor.sys

atapi.sys

IdeChnDr.sys

viasraid.sys

AGP440.sys

vaxscsi.sys

nvatabus.sys

viamraid.sys

nvata.sys

nvgts.sys

iastorv.sys

ViPrt.sys

eNetHook.dll

ahcix86.sys

KR10N.sys

nvstor32.sys

ahcix86s.sys

/md5stop

%systemroot%\system32\drivers\*.sys /lockedfiles

%systemroot%\System32\config\*.sav

%systemroot%\*. /mp /s

%systemroot%\system32\*.dll /lockedfiles

CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Klick auf http://billy-oneal.com/Canned%20Spee.../OTL/btnOK.png.
Kopiere nun den Inhalt aus OTL.txt hier in Deinen Thread

Hallo und Guten Morgen,

anbei das log:

Code:

OTL logfile created on: 02.08.2012 12:12:21 - Run 4

OTL by OldTimer - Version 3.2.55.0     Folder = C:\Users\***\Desktop

 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 8.0.7601.17514)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

3,00 Gb Total Physical Memory | 2,13 Gb Available Physical Memory | 70,90% Memory free

6,00 Gb Paging File | 4,41 Gb Available in Paging File | 73,55% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 149,04 Gb Total Space | 0,72 Gb Free Space | 0,48% Space Free | Partition Type: NTFS

Drive D: | 137,33 Gb Total Space | 3,55 Gb Free Space | 2,59% Space Free | Partition Type: NTFS

 

Computer Name: ***-PC | User Name: *** | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012.08.02 12:10:14 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe

PRC - [2012.05.11 23:03:15 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe

PRC - [2012.05.11 23:03:15 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe

PRC - [2012.05.11 23:03:15 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe

PRC - [2012.05.11 23:03:15 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe

PRC - [2012.04.04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe

PRC - [2012.04.03 17:02:59 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvtray.exe

PRC - [2012.04.03 17:01:59 | 000,857,920 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvxdsync.exe

PRC - [2012.04.03 07:15:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

PRC - [2011.12.20 14:32:00 | 000,634,880 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcUPCTLoader.exe

PRC - [2011.12.16 13:54:22 | 000,220,744 | ---- | M] (Geek Software GmbH) -- C:\Programme\PDF24\pdf24.exe

PRC - [2011.09.15 13:06:04 | 000,088,576 | ---- | M] () -- C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe

PRC - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe

PRC - [2011.06.24 06:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe

PRC - [2011.03.28 20:31:16 | 000,193,920 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

PRC - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe

PRC - [2010.11.20 14:22:51 | 000,673,040 | ---- | M] (Microsoft Corporation) -- C:\Programme\Internet Explorer\iexplore.exe

PRC - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe

PRC - [2010.11.20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe

PRC - [2009.10.06 01:56:00 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Programme\Common Files\Real\Update_OB\realsched.exe

PRC - [2009.02.26 19:36:46 | 000,030,040 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Office\Office12\GrooveMonitor.exe

PRC - [2009.02.26 03:52:22 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe

PRC - [2009.01.09 19:46:32 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Programme\OpenOffice.org 3\program\soffice.bin

PRC - [2009.01.09 19:45:26 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Programme\OpenOffice.org 3\program\soffice.exe

PRC - [2008.11.25 19:22:10 | 000,170,552 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\HControl.exe

PRC - [2008.11.20 20:09:20 | 000,307,200 | -H-- | M] (DeviceVM) -- C:\ASUS.SYS\DVMExportService.exe

PRC - [2008.10.24 16:35:44 | 000,128,296 | ---- | M] () -- C:\Programme\AAVUpdateManager\aavus.exe

PRC - [2008.10.18 03:10:54 | 000,211,512 | ---- | M] (ATK) -- C:\Programme\P4G\BatteryLife.exe

PRC - [2008.09.03 03:11:04 | 008,105,984 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATKOSD2\ATKOSD2.exe

PRC - [2008.08.19 20:34:04 | 000,159,744 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Media\DMedia.exe

PRC - [2008.08.18 21:27:32 | 000,117,304 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\MsgTranAgt.exe

PRC - [2008.08.18 20:56:22 | 000,098,304 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\HControlUser.exe

PRC - [2008.08.14 07:00:16 | 000,158,264 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\WDC.exe

PRC - [2008.08.14 07:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\KBFiltr.exe

PRC - [2008.08.14 06:59:52 | 000,100,920 | ---- | M] () -- C:\Programme\ASUS\ATK Hotkey\AsLdrSrv.exe

PRC - [2008.08.14 02:21:56 | 002,482,176 | ---- | M] (ASUS) -- C:\Programme\ASUS\ATK Hotkey\ATKOSD.exe

PRC - [2008.07.19 05:52:16 | 000,104,936 | ---- | M] (CyberLink) -- C:\Programme\CyberLink\Power2Go\CLMLSvc.exe

PRC - [2008.06.19 22:18:12 | 000,154,168 | ---- | M] (ASUS) -- C:\Programme\ASUS\ASUS CopyProtect\ASPG.exe

PRC - [2008.06.18 08:10:24 | 000,297,528 | ---- | M] (ASUS) -- C:\Programme\ASUS\SmartLogon\sensorsrv.exe

PRC - [2008.06.04 03:29:08 | 000,851,968 | ---- | M] (ATK) -- C:\Programme\ASUS\Splendid\ACMON.exe

PRC - [2007.11.30 21:20:44 | 000,051,768 | ---- | M] () -- C:\Programme\ASUS\ASUS Live Update\ALU.exe

PRC - [2007.08.08 10:08:40 | 000,094,208 | ---- | M] () -- C:\Programme\ATKGFNEX\GFNEXSrv.exe

PRC - [2007.07.06 02:53:44 | 001,040,384 | ---- | M] () -- C:\Programme\Wireless Console 2\wcourier.exe

PRC - [2005.07.07 01:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\System32\ACEngSvr.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2012.05.13 01:29:31 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\f3814b488d9e083cbbc623e01b389f09\System.Data.ni.dll

MOD - [2012.05.13 01:27:59 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll

MOD - [2012.05.13 01:27:53 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll

MOD - [2012.05.13 01:27:52 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll

MOD - [2012.05.13 01:27:36 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll

MOD - [2011.12.20 14:32:00 | 001,515,520 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\Maps\R66Api.dll

MOD - [2011.12.20 14:32:00 | 000,634,880 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcUPCTLoader.exe

MOD - [2011.12.20 14:32:00 | 000,559,244 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\sqlite3.7.dll

MOD - [2011.12.20 14:32:00 | 000,516,599 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\sqlite3.dll

MOD - [2011.12.20 14:32:00 | 000,389,120 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcDetect.dll

MOD - [2011.12.20 14:32:00 | 000,172,032 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcDetectLegend.dll

MOD - [2011.12.20 14:32:00 | 000,143,360 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\htcDisk.dll

MOD - [2011.12.20 14:32:00 | 000,103,936 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\OutputLog.dll

MOD - [2011.12.20 14:32:00 | 000,094,208 | ---- | M] () -- C:\Programme\HTC\HTC Sync 3.0\fdHttpd.dll

MOD - [2011.07.29 01:09:42 | 000,096,112 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdateCheck.dll

MOD - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe

MOD - [2010.11.13 02:02:21 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll

MOD - [2010.11.05 03:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

MOD - [2008.10.17 02:45:20 | 000,014,848 | ---- | M] () -- C:\Programme\P4G\OvrClk.dll

MOD - [2008.09.16 20:18:06 | 000,132,608 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll

MOD - [2008.08.21 01:49:56 | 000,016,384 | ---- | M] () -- C:\Programme\P4G\DevMng.dll

MOD - [2008.07.29 13:55:14 | 000,969,728 | ---- | M] () -- C:\Programme\OpenOffice.org 3\program\libxml2.dll

MOD - [2008.07.19 05:52:08 | 000,649,704 | ---- | M] () -- C:\Programme\CyberLink\Power2Go\CLMediaLibrary.dll

MOD - [2008.06.09 19:55:08 | 000,013,096 | ---- | M] () -- C:\Programme\CyberLink\Power2Go\CLMLSvcPS.dll

MOD - [2007.11.30 21:20:44 | 000,051,768 | ---- | M] () -- C:\Programme\ASUS\ASUS Live Update\ALU.exe

MOD - [2007.11.13 01:41:50 | 000,106,496 | ---- | M] () -- C:\Programme\ASUS\ATK Hotkey\MsgTran.dll

MOD - [2007.08.14 23:59:54 | 006,365,184 | ---- | M] () -- C:\Programme\Common Files\LightScribe\QtGui4.dll

MOD - [2007.07.12 23:55:52 | 000,131,072 | ---- | M] () -- C:\Programme\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll

MOD - [2007.07.12 23:55:28 | 001,581,056 | ---- | M] () -- C:\Programme\Common Files\LightScribe\QtCore4.dll

MOD - [2007.03.10 02:16:52 | 000,106,496 | ---- | M] () -- C:\Programme\ATKGFNEX\AGFNEX.dll

 

 
 ========== Win32 Services (SafeList) ==========

 

SRV - [2012.05.11 23:03:15 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2012.05.11 23:03:15 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2012.04.04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2012.04.03 19:16:00 | 001,262,912 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)

SRV - [2012.04.03 07:15:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)

SRV - [2012.03.08 18:32:24 | 001,492,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)

SRV - [2011.09.15 13:06:04 | 000,088,576 | ---- | M] () [Auto | Running] -- C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)

SRV - [2011.07.20 06:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE -- (odserv)

SRV - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)

SRV - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)

SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)

SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)

SRV - [2009.02.26 19:36:22 | 000,064,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)

SRV - [2008.11.20 20:09:20 | 000,307,200 | -H-- | M] (DeviceVM) [Auto | Running] -- C:\ASUS.SYS\DVMExportService.exe -- (DvmMDES)

SRV - [2008.10.24 16:35:44 | 000,128,296 | ---- | M] () [Auto | Running] -- C:\Programme\AAVUpdateManager\aavus.exe -- (AAV UpdateService)

SRV - [2008.08.14 06:59:52 | 000,100,920 | ---- | M] () [Auto | Running] -- C:\Programme\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)

SRV - [2007.08.08 10:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Programme\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)

SRV - [2007.05.31 09:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)

SRV - [2007.05.31 09:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)

SRV - [2006.10.26 23:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - [2012.07.26 12:11:54 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)

DRV - [2012.05.11 23:03:16 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)

DRV - [2012.05.11 23:03:16 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)

DRV - [2012.04.03 19:16:00 | 011,348,288 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)

DRV - [2011.11.09 22:12:31 | 000,232,512 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)

DRV - [2011.10.11 15:00:01 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)

DRV - [2011.04.30 14:00:18 | 000,039,064 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)

DRV - [2011.04.30 14:00:06 | 000,041,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)

DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WINUSB)

DRV - [2010.06.23 11:24:56 | 000,023,040 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\htcnprot.sys -- (htcnprot)

DRV - [2010.06.17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)

DRV - [2010.05.07 06:50:55 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)

DRV - [2010.05.07 06:50:54 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)

DRV - [2009.11.09 23:39:14 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)

DRV - [2009.10.26 09:54:24 | 000,025,088 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ANDROIDUSB.sys -- (HTCAND32)

DRV - [2009.07.14 00:02:53 | 000,048,128 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SiSGB6.sys -- (SiSGbeLH)

DRV - [2009.07.14 00:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)

DRV - [2008.12.10 05:20:56 | 001,772,544 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC)

DRV - [2008.11.16 18:39:44 | 000,131,984 | ---- | M] (Deterministic Networks, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\dne2000.sys -- (DNE)

DRV - [2008.06.03 08:41:51 | 000,015,928 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)

DRV - [2008.05.29 20:21:04 | 000,015,416 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\System32\drivers\lullaby.sys -- (lullaby)

DRV - [2007.07.24 21:09:04 | 000,013,880 | ---- | M] () [Kernel | Auto | Running] -- C:\Programme\ATKGFNEX\ASMMAP.sys -- (ASMMAP)

DRV - [2007.01.18 20:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CVirtA.sys -- (CVirtA)

DRV - [2006.12.14 09:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)

DRV - [2005.11.03 16:40:07 | 000,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfvfs02.sys -- (sfvfs02)

DRV - [2005.08.10 14:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01)

DRV - [2005.05.16 15:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS

IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

 

 

IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = 

IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}

IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = 

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}

IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 

 

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\URLSearchHook:  - No CLSID value found

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{53C30388-824D-4D09-AA65-87FD20D67DA1}: "URL" = hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search={SearchTerms}

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"

FF - prefs.js..browser.search.defaulturl: "hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search="

FF - prefs.js..browser.search.selectedEngine: "ICQ Search"

FF - prefs.js..browser.startup.homepage: "hxxp://start.icq.com/"

FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.5

FF - prefs.js..extensions.enabledItems: zotero@chnm.gmu.edu:2.0.4

FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906

FF - prefs.js..extensions.enabledItems: {02B06ED9-2E6A-48B2-9EB1-8C3BDB23353A}:1.9.1

FF - prefs.js..extensions.enabledItems: facepad@lazyrussian.com:0.8.2

FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q="

FF - prefs.js..network.proxy.http: "127.0.0.1"

FF - prefs.js..network.proxy.http_port: 50370

FF - prefs.js..network.proxy.type: 0

FF - user.js - File not found

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_257.dll ()

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.448: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\***\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\***\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\***\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.11.04 04:32:13 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.01.30 19:10:21 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.11.04 04:32:13 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{02B06ED9-2E6A-48B2-9EB1-8C3BDB23353A}: C:\Users\***\AppData\Local\{02B06ED9-2E6A-48B2-9EB1-8C3BDB23353A} [2010.11.04 04:49:54 | 000,000,000 | ---D | M]

 

[2011.11.27 21:52:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\vvi9ogvm.default\extensions

[2011.11.27 21:52:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\vvi9ogvm.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}

[2011.11.27 21:52:58 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions

[2012.02.11 18:01:16 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

[2011.11.03 19:53:49 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

[2011.10.03 06:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll

 
 ========== Chrome  ==========

 

CHR - homepage: hxxp://www.google.com

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}

CHR - homepage: hxxp://www.google.com

CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\Application\20.0.1132.57\pdf.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\Application\20.0.1132.57\gcswf32.dll

CHR - plugin: Shockwave Flash (Disabled) = C:\Users\***\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll

CHR - plugin: Skype Toolbars (Enabled) = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll

CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll

CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll

CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll

CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll

CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll

CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll

CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll

CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll

CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll

CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll

CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

CHR - plugin: Java(TM) Platform SE 7 U4 (Enabled) = C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll

CHR - plugin: Java Deployment Toolkit 7.0.40.255 (Enabled) = C:\Windows\system32\npDeployJava1.dll

CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa2.dll

CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)  (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

CHR - plugin: QUAKE LIVE (Enabled) = C:\ProgramData\id Software\QuakeLive\npquakezero.dll

CHR - plugin: Google Update (Enabled) = C:\Users\***\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll

CHR - plugin: Facebook Plugin (Enabled) = C:\Users\***\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll

CHR - plugin: Move Media Player 7 (Enabled) = C:\Users\***\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll

CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll

CHR - Extension: YouTube = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\

CHR - Extension: Google-Suche = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\

CHR - Extension: Skype Click to Call = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\

CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\

CHR - Extension: Google Mail = C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

 

O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: ::1             localhost

O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

O2 - BHO: (no name) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - No CLSID value found.

O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)

O4 - HKLM..\Run: []  File not found

O4 - HKLM..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe ()

O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe (ASUS)

O4 - HKLM..\Run: [ATKMEDIA] C:\Programme\ASUS\ATK Media\DMedia.exe (ASUS)

O4 - HKLM..\Run: [ATKOSD2] C:\Programme\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)

O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKLM..\Run: [CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)

O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()

O4 - HKLM..\Run: [HControlUser] C:\Programme\ASUS\ATK Hotkey\HControlUser.exe (ASUS)

O4 - HKLM..\Run: [HTC Sync Loader] C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()

O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)

O4 - HKLM..\Run: [P2Go_Menu] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)

O4 - HKLM..\Run: [PDFPrint] C:\Programme\PDF24\pdf24.exe (Geek Software GmbH)

O4 - HKLM..\Run: [Skytel] C:\Programme\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)

O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)

O4 - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000..\Run: [OscarEditor] "C:\Program Files\MOUSE Editor\\MouseEditor.exe" Minimum File not found

O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)

O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)

O4 - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil10c.exe (Adobe Systems, Inc.)

O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe ()

O4 - Startup: C:\Users\User2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk = C:\Programme\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1

O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)

O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)

O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O13 - gopher Prefix: missing

O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.de/common/asusTek_sys_ctrl.cab (asusTek_sysctrl Class)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1)

O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F3AEA16B-1611-4632-8548-634EC3598CBA}: DhcpNameServer = 192.168.43.1

O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)

O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)

O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)

O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Programme\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)

O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O24 - Desktop WallPaper: C:\Users\***\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg

O24 - Desktop BackupWallPaper: C:\Users\***\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg

O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell - "" = AutoRun

O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell\AutoRun\command - "" = F:\Setup.exe

O33 - MountPoints2\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\Shell\dinstall\command - "" = F:\directx\dxsetup.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 

NetSvcs: FastUserSwitchingCompatibility -  File not found

NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)

NetSvcs: Nla -  File not found

NetSvcs: Ntmssvc -  File not found

NetSvcs: NWCWorkstation -  File not found

NetSvcs: Nwsapagent -  File not found

NetSvcs: SRService -  File not found

NetSvcs: WmdmPmSp -  File not found

NetSvcs: LogonHours -  File not found

NetSvcs: PCAudit -  File not found

NetSvcs: helpsvc -  File not found

NetSvcs: uploadmgr -  File not found

 

 

SafeBootMin: AppMgmt - Service

SafeBootMin: Base - Driver Group

SafeBootMin: Boot Bus Extender - Driver Group

SafeBootMin: Boot file system - Driver Group

SafeBootMin: File system - Driver Group

SafeBootMin: Filter - Driver Group

SafeBootMin: HelpSvc - Service

SafeBootMin: NTDS -  File not found

SafeBootMin: PCI Configuration - Driver Group

SafeBootMin: PNP Filter - Driver Group

SafeBootMin: Primary disk - Driver Group

SafeBootMin: sacsvr - Service

SafeBootMin: SCSI Class - Driver Group

SafeBootMin: System Bus Extender - Driver Group

SafeBootMin: vmms - Service

SafeBootMin: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)

SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

 

SafeBootNet: AppMgmt - Service

SafeBootNet: Base - Driver Group

SafeBootNet: Boot Bus Extender - Driver Group

SafeBootNet: Boot file system - Driver Group

SafeBootNet: File system - Driver Group

SafeBootNet: Filter - Driver Group

SafeBootNet: HelpSvc - Service

SafeBootNet: Messenger - Service

SafeBootNet: NDIS Wrapper - Driver Group

SafeBootNet: NetBIOSGroup - Driver Group

SafeBootNet: NetDDEGroup - Driver Group

SafeBootNet: Network - Driver Group

SafeBootNet: NetworkProvider - Driver Group

SafeBootNet: NTDS -  File not found

SafeBootNet: PCI Configuration - Driver Group

SafeBootNet: PNP Filter - Driver Group

SafeBootNet: PNP_TDI - Driver Group

SafeBootNet: Primary disk - Driver Group

SafeBootNet: rdsessmgr - Service

SafeBootNet: sacsvr - Service

SafeBootNet: SCSI Class - Driver Group

SafeBootNet: Streams Drivers - Driver Group

SafeBootNet: System Bus Extender - Driver Group

SafeBootNet: TDI - Driver Group

SafeBootNet: vmms - Service

SafeBootNet: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)

SafeBootNet: WudfUsbccidDriver - Driver

SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers

SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

 

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0

ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7

ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

 

Drivers32: msacm.ac3filter - C:\Windows\System32\ac3filter.acm ()

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)

Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)

Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)

Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)

Drivers32: vidc.i420 - C:\Windows\System32\i420vfw.dll (www.helixcommunity.org)

Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)

 

CREATERESTOREPOINT

Restore point Set: OTL Restore Point

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.08.02 12:10:11 | 000,597,504 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe

[2012.08.01 20:26:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1C8B1A5B-32F2-4872-B530-96F7DEB2075B}

[2012.08.01 20:26:33 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{E973CC4F-916F-45CB-873C-58898AB1FAC0}

[2012.07.31 23:59:29 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{4A81BC08-99EE-4B27-8CEB-86B6E2465682}

[2012.07.31 23:59:16 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{F7CDEFFC-904C-4D36-B561-BB8D7CA0D987}

[2012.07.31 09:26:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{85D841BA-A05C-4A1A-A3B4-9EFB8F21BEAF}

[2012.07.31 09:24:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{FBB217E7-56FB-457B-8F7C-88BB3ACC9649}

[2012.07.30 16:29:06 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{189DF4F4-96E4-4619-AB3C-DFD3B0FD014C}

[2012.07.30 16:28:52 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{B72848D8-54E2-4125-AB8B-07A2AC1FD555}

[2012.07.27 19:52:25 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1732372D-3B5A-4A7A-BC1B-3035E74AEF5F}

[2012.07.27 19:52:11 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{EC7910C3-3F28-4DA7-9D37-CD7623969E4D}

[2012.07.27 18:12:08 | 000,000,000 | -H-D | C] -- C:\dvmexp

[2012.07.26 14:37:34 | 000,000,000 | ---D | C] -- C:\Program Files\ESET

[2012.07.26 12:10:48 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys

[2012.07.26 11:59:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A6AA22DA-861E-4F90-8CDB-9ADEEDCA971B}

[2012.07.26 11:59:29 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{860DFF9A-139D-4361-A825-058F122C3F73}

[2012.07.24 19:22:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{9BA75DB0-F4DC-4252-81D0-E95AEDAF90AF}

[2012.07.24 19:21:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{E07BCC5F-2546-40E9-9165-90222C2811E5}

[2012.07.23 21:37:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{DD171A30-289A-4E57-A1EC-BD5076A9FC23}

[2012.07.23 21:36:51 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1070BA7C-EB72-4FE6-823E-58466380B8AE}

[2012.07.22 22:35:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7D076970-BFD6-4244-AF29-B4A3608D22FC}

[2012.07.22 22:35:33 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{B83D740C-013E-439E-815A-D2C4F802D957}

[2012.07.22 20:30:19 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\viruszeugs

[2012.07.21 14:35:23 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{E61564EC-BA2E-4A7F-A0AC-BBE988D70A32}

[2012.07.21 14:34:45 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{EE462F51-646A-4232-8116-F40D5B89AD8C}

[2012.07.20 23:49:48 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7F73E387-C28F-408F-AA79-AFFAE0F9A3FD}

[2012.07.20 23:49:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{D57486E4-CC3E-4F0C-83AF-DF5A4180E7A5}

[2012.07.20 23:43:49 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3457CA14-B8CD-4A90-AD7E-105067D3C458}

[2012.07.20 23:43:32 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A60D35AC-7358-4245-8DC7-6C10B0EE4D6A}

[2012.07.19 01:12:54 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\theHunter

[2012.07.19 01:10:23 | 000,000,000 | ---D | C] -- C:\Windows\System32\directx

[2012.07.19 01:04:55 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\CyberLink

[2012.07.17 00:11:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carnivores 2

[2012.07.15 20:36:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carnivores

[2012.07.15 20:02:25 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0ABC2912-0253-41A7-A288-0C75AECA11B1}

[2012.07.15 20:02:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BE3F9F09-A7B7-4693-9670-B4F4E24825F2}

[2012.07.08 20:29:33 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{78C72B40-BF69-467F-A8EC-3A908FCA4F36}

[2012.07.08 20:29:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C92AE0D9-92DC-421F-B815-4F2B5C4FFF5B}

[2012.07.08 20:26:39 | 000,000,000 | ---D | C] -- C:\Windows\de

[2012.07.08 20:14:52 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{6335CED3-14E3-4B26-9D3F-750A5AED10A5}

[2012.07.08 20:14:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{17DCA90B-2287-4FFB-BD6D-A39D928E9BBB}

[2012.07.07 00:10:24 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2AFCDE61-8680-46D2-92D2-FF74FA5653B9}

[2012.07.07 00:10:01 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{05109273-94C2-4D50-B76D-FDB373E9C22D}

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.08.02 12:10:14 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe

[2012.08.02 12:03:03 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000UA.job

[2012.08.02 11:32:00 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004UA.job

[2012.08.02 11:32:00 | 000,001,068 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004Core.job

[2012.08.02 11:19:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012.08.01 20:13:29 | 000,001,072 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000Core.job

[2012.07.30 16:02:58 | 000,654,166 | ---- | M] () -- C:\Windows\System32\perfh007.dat

[2012.07.30 16:02:58 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat

[2012.07.30 16:02:58 | 000,130,006 | ---- | M] () -- C:\Windows\System32\perfc007.dat

[2012.07.30 16:02:58 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat

[2012.07.30 14:28:28 | 000,010,352 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2012.07.30 14:28:28 | 000,010,352 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2012.07.27 20:12:18 | 000,000,012 | -H-- | M] () -- C:\dvmexp.idx

[2012.07.27 18:11:54 | 2415,394,816 | -HS- | M] () -- C:\hiberfil.sys

[2012.07.27 17:52:04 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe

[2012.07.26 12:11:54 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys

[2012.07.25 18:11:28 | 000,053,978 | ---- | M] () -- C:\Users\***\Desktop\avir.jpg

[2012.07.22 20:34:31 | 000,000,176 | ---- | M] () -- C:\Users\***\defogger_reenable

[2012.07.22 20:00:31 | 000,001,078 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012.07.17 01:11:37 | 000,001,593 | ---- | M] () -- C:\Windows\VPNUnInstall.MIF

[2012.07.15 03:29:34 | 000,428,056 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT

[2012.07.14 23:16:43 | 000,002,415 | ---- | M] () -- C:\Users\***\Desktop\Google Chrome.lnk

[2012.07.06 13:59:34 | 000,838,258 | ---- | M] () -- C:\Users\***\Desktop\mieterfragebogen.jpg

[2012.07.03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys

 
 ========== Files Created - No Company Name ==========

 

[2012.07.27 20:12:18 | 000,000,012 | -H-- | C] () -- C:\dvmexp.idx

[2012.07.25 18:11:27 | 000,053,978 | ---- | C] () -- C:\Users\***\Desktop\avir.jpg

[2012.07.22 20:34:10 | 000,000,176 | ---- | C] () -- C:\Users\***\defogger_reenable

[2012.07.22 20:00:31 | 000,001,078 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012.07.17 01:10:19 | 000,001,593 | ---- | C] () -- C:\Windows\VPNUnInstall.MIF

[2012.07.06 13:29:13 | 000,838,258 | ---- | C] () -- C:\Users\***\Desktop\mieterfragebogen.jpg

[2012.05.12 02:15:08 | 000,000,000 | ---- | C] () -- C:\Windows\PowerReg.dat

[2012.04.03 07:16:04 | 000,423,744 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe

[2012.01.27 23:41:51 | 000,000,096 | ---- | C] () -- C:\Users\***\.asadminpass

[2011.11.10 19:33:05 | 000,000,001 | ---- | C] () -- C:\Windows\System32\SI.bin

[2011.11.06 16:48:31 | 000,410,942 | ---- | C] () -- C:\Windows\adb.exe

[2011.11.06 16:48:31 | 000,401,408 | ---- | C] () -- C:\Windows\wget.exe

[2011.11.06 16:48:31 | 000,356,009 | ---- | C] () -- C:\Windows\fastboot.exe

[2011.11.06 16:48:31 | 000,063,488 | ---- | C] () -- C:\Windows\md5sum.exe

[2011.11.04 22:47:29 | 000,032,256 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll

[2011.03.03 22:36:38 | 000,007,168 | ---- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010.06.29 20:44:07 | 000,001,418 | ---- | C] () -- C:\Users\***\.recently-used.xbel

[2008.08.09 00:48:20 | 000,090,112 | ---- | C] () -- C:\Program Files\Common Files\CPInstallAction.dll

[2008.05.22 19:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files\Common Files\banner.jpg

 
 ========== LOP Check ==========

 

[2012.07.08 21:37:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\.minecraft

[2010.11.04 04:50:33 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\AnvSoft

[2012.05.12 02:41:38 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Atari

[2011.12.26 17:53:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\calibre

[2011.08.12 13:13:59 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Command & Conquer 3 Tiberium Wars

[2009.04.08 23:35:55 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools

[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Lite

[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Pro

[2012.08.02 00:27:44 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Dropbox

[2012.05.10 21:54:54 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DVDVideoSoft

[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Electronic Arts

[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Facebook

[2010.01.13 19:12:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\FVZilla

[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GetRightToGo

[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\gtk-2.0

[2012.01.12 21:40:34 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HandBrake

[2012.01.29 21:24:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HTC

[2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Imperium Romanum

[2011.09.21 22:23:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Leadertech

[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade

[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade Warband

[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Moyea

[2012.07.03 21:26:19 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mumble

[2011.07.25 12:20:10 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\MyPhoneExplorer

[2010.11.04 04:51:14 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\OpenOffice.org

[2010.11.04 04:51:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\The Bat!

[2012.07.21 16:01:39 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\uTorrent

[2010.11.09 02:13:15 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Windows Live Writer

[2011.03.17 01:28:56 | 000,000,000 | ---D | M] -- C:\Users\Gast\AppData\Roaming\HTC

[2011.10.09 16:23:55 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\Canneverbe Limited

[2012.04.01 21:22:08 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\Dropbox

[2012.01.30 18:28:48 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\HTC

[2011.08.12 22:42:22 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\ICQ

[2011.08.04 19:02:17 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\MyPhoneExplorer

[2011.06.10 18:44:28 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\OpenOffice.org

[2011.07.21 14:36:44 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\RapidTyping

[2012.04.01 21:18:05 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\Spotify

[2012.03.30 13:48:34 | 000,000,000 | ---D | M] -- C:\Users\User2\AppData\Roaming\uTorrent

[2011.12.28 23:42:07 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 
 < %ALLUSERSPROFILE%\Application Data\*. >

 
 < %ALLUSERSPROFILE%\Application Data\*.exe /s >

 
 < %APPDATA%\*. >

[2012.07.08 21:37:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\.minecraft

[2011.07.25 20:56:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Adobe

[2010.11.04 04:50:33 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\AnvSoft

[2011.10.24 22:10:58 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Apple Computer

[2012.05.12 02:41:38 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Atari

[2011.10.20 00:34:01 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Avira

[2011.12.26 17:53:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\calibre

[2011.08.12 13:13:59 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Command & Conquer 3 Tiberium Wars

[2012.07.19 01:04:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\CyberLink

[2009.04.08 23:35:55 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools

[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Lite

[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Pro

[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DivX

[2012.08.02 00:27:44 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Dropbox

[2012.06.03 23:48:50 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\dvdcss

[2012.05.10 21:54:54 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DVDVideoSoft

[2010.11.04 04:50:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Electronic Arts

[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Facebook

[2010.01.13 19:12:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\FVZilla

[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GetRightToGo

[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\gtk-2.0

[2012.01.12 21:40:34 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HandBrake

[2010.11.04 04:50:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HP

[2012.02.06 19:08:29 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HpUpdate

[2012.01.29 21:24:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HTC

[2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Identities

[2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Imperium Romanum

[2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\InstallShield

[2011.09.21 22:23:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Leadertech

[2011.09.21 22:20:18 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Logishrd

[2011.09.21 22:23:09 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Logitech

[2010.11.04 04:50:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Macromedia

[2010.11.04 04:50:51 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Malwarebytes

[2009.07.14 10:56:41 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Media Center Programs

[2012.07.22 20:19:52 | 000,000,000 | --SD | M] -- C:\Users\***\AppData\Roaming\Microsoft

[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade

[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mount&Blade Warband

[2010.11.04 04:51:05 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Moyea

[2011.11.27 21:52:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mozilla

[2012.07.03 21:26:19 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mumble

[2011.07.25 12:20:10 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\MyPhoneExplorer

[2011.08.13 02:23:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\NVIDIA

[2010.11.04 04:51:14 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\OpenOffice.org

[2010.11.04 04:51:17 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Real

[2010.11.04 04:51:17 | 000,000,000 | RH-D | M] -- C:\Users\***\AppData\Roaming\SecuROM

[2012.04.29 19:42:15 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Skype

[2010.11.04 04:51:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\The Bat!

[2012.07.21 16:01:39 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\uTorrent

[2012.08.01 23:39:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\vlc

[2012.03.25 00:11:51 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Winamp

[2010.11.09 02:13:15 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Windows Live Writer

[2009.04.08 23:25:00 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\WinRAR

 
 < %APPDATA%\*.exe /s >

[2012.05.24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe

[2012.05.24 20:39:24 | 000,872,144 | ---- | M] (Dropbox, Inc.) -- C:\Users\***\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe

[2012.05.24 20:39:56 | 000,177,280 | ---- | M] (Dropbox, Inc.) -- C:\Users\***\AppData\Roaming\Dropbox\bin\Uninstall.exe

[2010.04.12 20:48:32 | 000,050,354 | ---- | M] (Facebook, Inc.) -- C:\Users\***\AppData\Roaming\Facebook\uninstall.exe

[2010.11.25 00:59:45 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\***\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe

[2011.09.21 22:23:02 | 000,053,248 | R--- | M] (Acresso Software Inc.) -- C:\Users\***\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe

[2009.09.20 01:21:22 | 000,010,134 | R--- | M] () -- C:\Users\***\AppData\Roaming\Microsoft\Installer\{C5E882B1-C7A4-43EA-89E2-15E5ECA6CEA0}\ARPPRODUCTICON.exe

[2009.09.20 01:21:24 | 000,053,248 | R--- | M] (InstallShield Software Corp.) -- C:\Users\***\AppData\Roaming\Microsoft\Installer\{C5E882B1-C7A4-43EA-89E2-15E5ECA6CEA0}\NewShortcut1_C5E882B1C7A443EA89E215E5ECA6CEA0.exe

[2009.09.20 01:21:26 | 000,053,248 | R--- | M] (InstallShield Software Corp.) -- C:\Users\***\AppData\Roaming\Microsoft\Installer\{C5E882B1-C7A4-43EA-89E2-15E5ECA6CEA0}\NewShortcut2_C5E882B1C7A443EA89E215E5ECA6CEA0.exe

[2010.05.30 21:39:20 | 000,443,912 | ---- | M] (RealNetworks, Inc.) -- C:\Users\***\AppData\Roaming\Real\Update\setup3.10\setup.exe

[2011.01.26 23:15:23 | 000,510,120 | ---- | M] (RealNetworks, Inc.) -- C:\Users\***\AppData\Roaming\Real\Update\setup3.13\setup.exe

[2011.11.19 23:30:18 | 000,317,048 | ---- | M] (RealNetworks, Inc.) -- C:\Users\***\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\9.00\rnupgagent.exe

 
 < %SYSTEMDRIVE%\*.exe >

 
 < MD5 for: AGP440.SYS  >

[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys

[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys

[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys

[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys

 
 < MD5 for: ATAPI.SYS  >

[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys

[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys

[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys

[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys

 
 < MD5 for: CNGAUDIT.DLL  >

[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll

[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

 
 < MD5 for: IASTORV.SYS  >

[2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\drivers\iaStorV.sys

[2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys

[2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys

[2011.03.11 07:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_aef580fde910b4b0\iaStorV.sys

[2011.03.11 07:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys

[2009.07.14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys

[2010.11.20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys

[2010.11.20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys

[2011.03.11 07:52:21 | 000,332,160 | ---- | M] (Intel Corporation) MD5=B9039A34C2F8769490DCC494E2402445 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_afae2d45020c148b\iaStorV.sys

 
 < MD5 for: NETLOGON.DLL  >

[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll

[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll

[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll

 
 < MD5 for: NVSTOR.SYS  >

[2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\drivers\nvstor.sys

[2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys

[2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys

[2011.03.11 07:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_39bef1ad20475e88\nvstor.sys

[2011.03.11 07:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys

[2011.03.11 07:52:25 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=8A7583A3B58D3EEB28BB26626526BC91 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_3a779df43942be63\nvstor.sys

[2010.11.20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys

[2010.11.20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys

[2009.07.14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys

 
 < MD5 for: SCECLI.DLL  >

[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll

[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll

[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

 
 < MD5 for: USER32.DLL  >

[2009.07.14 03:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll

[2010.11.20 14:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\System32\user32.dll

[2010.11.20 14:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll

 
 < MD5 for: USERINIT.EXE  >

[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe

[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

 
 < MD5 for: WININIT.EXE  >

[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\System32\wininit.exe

[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

 
 < MD5 for: WINLOGON.EXE  >

[2009.10.28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe

[2009.10.28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe

[2010.11.20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe

[2010.11.20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe

[2012.07.03 13:46:42 | 000,217,672 | ---- | M] () MD5=8A7F34F0BBD076EC3815680A7309114F -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe

[2009.07.14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe

 
 < MD5 for: WS2IFSL.SYS  >

[2009.07.14 01:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys

[2009.07.14 01:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys

 
 < %systemroot%\system32\drivers\*.sys /lockedfiles >

 
 < %systemroot%\System32\config\*.sav >

 
 < %systemroot%\*. /mp /s >

 
 < %systemroot%\system32\*.dll /lockedfiles >

 
 <           >
 

< End of report >

Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:

:OTL

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\URLSearchHook:  - No CLSID value found

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{53C30388-824D-4D09-AA65-87FD20D67DA1}: "URL" = http://flvdirect.iamwired.net/websearch.php?src=tops&search={SearchTerms}

IE - HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

FF - prefs.js..extensions.enabledItems: facepad@lazyrussian.com:0.8.2

FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q="

FF - prefs.js..network.proxy.http: "127.0.0.1"

FF - prefs.js..network.proxy.http_port: 50370

FF - user.js - File not found

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"

FF - prefs.js..browser.search.defaulturl: "http://flvdirect.iamwired.net/websearch.php?src=tops&search="

FF - prefs.js..browser.search.selectedEngine: "ICQ Search"

FF - prefs.js..browser.startup.homepage: "http://start.icq.com/"

FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.5

O2 - BHO: (no name) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - No CLSID value found.

O4 - HKLM..\Run: []  File not found

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell - "" = AutoRun

O33 - MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\Shell\AutoRun\command - "" = F:\Setup.exe

O33 - MountPoints2\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\Shell\dinstall\command - "" = F:\directx\dxsetup.exe

:Commands

[purity]

[emptytemp]

[emptyflash]

[resethosts]

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

Gesagt, getan! :)

Code:

All processes killed

========== OTL ==========

HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!

HKU\S-1-5-21-3807720203-1813369325-2731863397-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\StartPageCache| /E : value set successfully!

Registry value HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.

HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!

Registry key HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Internet Explorer\SearchScopes\{53C30388-824D-4D09-AA65-87FD20D67DA1}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53C30388-824D-4D09-AA65-87FD20D67DA1}\ not found.

Registry key HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.

Prefs.js: facepad@lazyrussian.com:0.8.2 removed from extensions.enabledItems

Prefs.js: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q=" removed from keyword.URL

Prefs.js: "127.0.0.1" removed from network.proxy.http

Prefs.js: 50370 removed from network.proxy.http_port

Prefs.js: "ICQ Search" removed from browser.search.defaultenginename

Prefs.js: "hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search=" removed from browser.search.defaulturl

Prefs.js: "ICQ Search" removed from browser.search.selectedEngine

Prefs.js: "hxxp://start.icq.com/" removed from browser.startup.homepage

Prefs.js: smartwebprinting@hp.com:4.5 removed from extensions.enabledItems

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}\ not found.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!

C:\autoexec.bat moved successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c95628f6-0b0e-11e1-b4ce-00248c1ebe26}\ not found.

File F:\Setup.exe not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d2b208c7-ba33-11e0-b8bf-00248c1ebe26}\ not found.

File F:\directx\dxsetup.exe not found.

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: All Users

 

User: ***

->Temp folder emptied: 604934066 bytes

->Temporary Internet Files folder emptied: 152533362 bytes

->Java cache emptied: 40338330 bytes

->FireFox cache emptied: 52369685 bytes

->Google Chrome cache emptied: 144944274 bytes

->Apple Safari cache emptied: 44496896 bytes

->Flash cache emptied: 91475 bytes

 

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 677279 bytes

->Flash cache emptied: 56475 bytes

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

 

User: Gast

->Temp folder emptied: 1578369 bytes

->Temporary Internet Files folder emptied: 83156660 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 41585955 bytes

->Flash cache emptied: 59163 bytes

 

User: User2

->Temp folder emptied: 58409804 bytes

->Temporary Internet Files folder emptied: 72659581 bytes

->Java cache emptied: 1877457 bytes

->FireFox cache emptied: 357548212 bytes

->Apple Safari cache emptied: 21386240 bytes

->Flash cache emptied: 85202 bytes

 

User: Public

 

User: UpdatusUser

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 32768 bytes

->Flash cache emptied: 2870 bytes

 

User: UpdatusUser.***-PC

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 677279 bytes

->Flash cache emptied: 56475 bytes

 

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 108923791 bytes

RecycleBin emptied: 306300640 bytes

 

Total Files Cleaned = 1.998,00 mb

 

 

[EMPTYFLASH]

 

User: All Users

 

User: ***

->Flash cache emptied: 0 bytes

 

User: Default

->Flash cache emptied: 0 bytes

 

User: Default User

->Flash cache emptied: 0 bytes

 

User: Gast

->Flash cache emptied: 0 bytes

 

User: User2

->Flash cache emptied: 0 bytes

 

User: Public

 

User: UpdatusUser

->Flash cache emptied: 0 bytes

 

User: UpdatusUser.***-PC

->Flash cache emptied: 0 bytes

 

Total Flash Files Cleaned = 0,00 mb

 

C:\Windows\System32\drivers\etc\Hosts moved successfully.

HOSTS file reset successfully

 

OTL by OldTimer - Version 3.2.55.0 log created on 08032012_150426
 

Files\Folders moved on Reboot...
 

PendingFileRenameOperations files...
 

Registry entries deleted on Reboot...

Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C:) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg

Hallo,

hat leider ein paar Tage gedauert da ich kaum zu Hause war, aber hier das Log:

Code:

19:12:46.0113 5196        TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32

19:12:48.0145 5196        ============================================================

19:12:48.0145 5196        Current date / time: 2012/08/07 19:12:48.0145

19:12:48.0146 5196        SystemInfo:

19:12:48.0146 5196        

19:12:48.0146 5196        OS Version: 6.1.7601 ServicePack: 1.0

19:12:48.0146 5196        Product type: Workstation

19:12:48.0146 5196        ComputerName: ***-PC

19:12:48.0146 5196        UserName: ***

19:12:48.0146 5196        Windows directory: C:\Windows

19:12:48.0146 5196        System windows directory: C:\Windows

19:12:48.0147 5196        Processor architecture: Intel x86

19:12:48.0147 5196        Number of processors: 2

19:12:48.0147 5196        Page size: 0x1000

19:12:48.0147 5196        Boot type: Normal boot

19:12:48.0147 5196        ============================================================

19:12:54.0147 5196        Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

19:12:54.0202 5196        ============================================================

19:12:54.0202 5196        \Device\Harddisk0\DR0:

19:12:54.0221 5196        MBR partitions:

19:12:54.0222 5196        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1770D7A, BlocksNum 0x12A14C00

19:12:54.0233 5196        \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x141859B9, BlocksNum 0x112A7D08

19:12:54.0234 5196        ============================================================

19:12:54.0590 5196        C: <-> \Device\Harddisk0\DR0\Partition0

19:12:55.0282 5196        D: <-> \Device\Harddisk0\DR0\Partition1

19:12:55.0283 5196        ============================================================

19:12:55.0283 5196        Initialize success

19:12:55.0283 5196        ============================================================

19:13:24.0574 7680        ============================================================

19:13:24.0575 7680        Scan started

19:13:24.0575 7680        Mode: Manual; SigCheck; TDLFS; 

19:13:24.0575 7680        ============================================================

19:13:47.0662 7680        1394ohci        (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys

19:13:48.0116 7680        1394ohci - ok

19:13:49.0624 7680        AAV UpdateService (7eeb488346fbfa3731276c3ee8a8fd9e) C:\Program Files\AAVUpdateManager\aavus.exe

19:13:49.0640 7680        AAV UpdateService - ok

19:13:50.0351 7680        ACPI            (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys

19:13:50.0399 7680        ACPI - ok

19:13:50.0501 7680        AcpiPmi         (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys

19:13:50.0879 7680        AcpiPmi - ok

19:13:51.0648 7680        AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

19:13:51.0714 7680        AdobeARMservice - ok

19:13:52.0488 7680        adp94xx         (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys

19:13:52.0560 7680        adp94xx - ok

19:13:52.0643 7680        adpahci         (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys

19:13:52.0671 7680        adpahci - ok

19:13:52.0952 7680        adpu320         (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys

19:13:52.0976 7680        adpu320 - ok

19:13:53.0039 7680        AeLookupSvc     (8b5eefeec1e6d1a72a06c526628ad161) C:\Windows\System32\aelupsvc.dll

19:13:53.0174 7680        AeLookupSvc - ok

19:13:53.0475 7680        AFD             (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys

19:13:53.0741 7680        AFD - ok

19:13:54.0076 7680        agp440          (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys

19:13:54.0164 7680        agp440 - ok

19:13:54.0573 7680        aic78xx         (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys

19:13:54.0597 7680        aic78xx - ok

19:13:54.0842 7680        ALG             (18a54e132947cd98fea9accc57f98f13) C:\Windows\System32\alg.exe

19:13:55.0076 7680        ALG - ok

19:13:55.0158 7680        aliide          (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys

19:13:55.0175 7680        aliide - ok

19:13:55.0387 7680        amdagp          (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys

19:13:55.0437 7680        amdagp - ok

19:13:55.0482 7680        amdide          (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys

19:13:55.0500 7680        amdide - ok

19:13:55.0573 7680        AmdK8           (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys

19:13:55.0679 7680        AmdK8 - ok

19:13:55.0728 7680        AmdPPM          (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys

19:13:55.0813 7680        AmdPPM - ok

19:13:56.0079 7680        amdsata         (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys

19:13:56.0102 7680        amdsata - ok

19:13:56.0271 7680        amdsbs          (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys

19:13:56.0324 7680        amdsbs - ok

19:13:56.0415 7680        amdxata         (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys

19:13:56.0433 7680        amdxata - ok

19:13:56.0828 7680        AntiVirSchedulerService (466a0d95960dad3222c896d2cea99993) C:\Program Files\Avira\AntiVir Desktop\sched.exe

19:13:56.0863 7680        AntiVirSchedulerService - ok

19:13:57.0198 7680        AntiVirService  (a489be6bb0aa1ff406b488b60542314b) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

19:13:57.0215 7680        AntiVirService - ok

19:13:57.0446 7680        AppID           (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys

19:13:58.0289 7680        AppID - ok

19:13:58.0469 7680        AppIDSvc        (62a9c86cb6085e20db4823e4e97826f5) C:\Windows\System32\appidsvc.dll

19:13:58.0537 7680        AppIDSvc - ok

19:13:58.0761 7680        Appinfo         (fb1959012294d6ad43e5304df65e3c26) C:\Windows\System32\appinfo.dll

19:13:58.0883 7680        Appinfo - ok

19:13:59.0260 7680        arc             (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys

19:13:59.0283 7680        arc - ok

19:13:59.0339 7680        arcsas          (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys

19:13:59.0367 7680        arcsas - ok

19:13:59.0627 7680        ASLDRService    (eb1807795cd3eeaa3288b4a30de254e8) C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe

19:13:59.0724 7680        ASLDRService - ok

19:13:59.0833 7680        ASMMAP          (7b4d08d2017ac06689d422e06c43f0aa) C:\Program Files\ATKGFNEX\ASMMAP.sys

19:13:59.0846 7680        ASMMAP - ok

19:14:00.0054 7680        AsyncMac        (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys

19:14:00.0486 7680        AsyncMac - ok

19:14:00.0546 7680        atapi           (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys

19:14:00.0564 7680        atapi - ok

19:14:01.0107 7680        athr            (76bab0c824e2d05b940c4dd40a9b08bf) C:\Windows\system32\DRIVERS\athr.sys

19:14:01.0208 7680        athr - ok

19:14:01.0401 7680        ATKGFNEXSrv     (7c157574a181b19b9dcf5f339e25337e) C:\Program Files\ATKGFNEX\GFNEXSrv.exe

19:14:01.0451 7680        ATKGFNEXSrv ( UnsignedFile.Multi.Generic ) - warning

19:14:01.0451 7680        ATKGFNEXSrv - detected UnsignedFile.Multi.Generic (1)

19:14:02.0956 7680        atksgt          (f0d933b42cd0594048e4d5200ae9e417) C:\Windows\system32\DRIVERS\atksgt.sys

19:14:03.0002 7680        atksgt - ok

19:14:03.0612 7680        AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll

19:14:03.0712 7680        AudioEndpointBuilder - ok

19:14:03.0723 7680        Audiosrv        (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll

19:14:03.0758 7680        Audiosrv - ok

19:14:04.0127 7680        avgntflt        (d5541f0afb767e85fc412fc609d96a74) C:\Windows\system32\DRIVERS\avgntflt.sys

19:14:04.0167 7680        avgntflt - ok

19:14:04.0440 7680        avipbb          (7d967a682d4694df7fa57d63a2db01fe) C:\Windows\system32\DRIVERS\avipbb.sys

19:14:04.0482 7680        avipbb - ok

19:14:04.0528 7680        avkmgr          (271cfd1a989209b1964e24d969552bf7) C:\Windows\system32\DRIVERS\avkmgr.sys

19:14:04.0543 7680        avkmgr - ok

19:14:04.0634 7680        AxInstSV        (6e30d02aac9cac84f421622e3a2f6178) C:\Windows\System32\AxInstSV.dll

19:14:04.0814 7680        AxInstSV - ok

19:14:05.0278 7680        b06bdrv         (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys

19:14:05.0406 7680        b06bdrv - ok

19:14:05.0772 7680        b57nd60x        (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys

19:14:05.0840 7680        b57nd60x - ok

19:14:06.0247 7680        BDESVC          (ee1e9c3bb8228ae423dd38db69128e71) C:\Windows\System32\bdesvc.dll

19:14:06.0457 7680        BDESVC - ok

19:14:06.0578 7680        Beep            (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys

19:14:06.0680 7680        Beep - ok

19:14:07.0176 7680        BFE             (1e2bac209d184bb851e1a187d8a29136) C:\Windows\System32\bfe.dll

19:14:07.0279 7680        BFE - ok

19:14:07.0520 7680        BITS            (e585445d5021971fae10393f0f1c3961) C:\Windows\System32\qmgr.dll

19:14:07.0618 7680        BITS - ok

19:14:07.0838 7680        blbdrive        (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys

19:14:07.0903 7680        blbdrive - ok

19:14:08.0072 7680        bowser          (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys

19:14:08.0164 7680        bowser - ok

19:14:08.0213 7680        BrFiltLo        (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys

19:14:08.0260 7680        BrFiltLo - ok

19:14:08.0325 7680        BrFiltUp        (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys

19:14:08.0410 7680        BrFiltUp - ok

19:14:08.0619 7680        Browser         (6e11f33d14d020f58d5e02e4d67dfa19) C:\Windows\System32\browser.dll

19:14:08.0790 7680        Browser - ok

19:14:08.0980 7680        Brserid         (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys

19:14:09.0124 7680        Brserid - ok

19:14:09.0174 7680        BrSerWdm        (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys

19:14:09.0269 7680        BrSerWdm - ok

19:14:09.0362 7680        BrUsbMdm        (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys

19:14:09.0495 7680        BrUsbMdm - ok

19:14:09.0559 7680        BrUsbSer        (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys

19:14:09.0629 7680        BrUsbSer - ok

19:14:09.0693 7680        BTHMODEM        (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys

19:14:09.0793 7680        BTHMODEM - ok

19:14:09.0966 7680        bthserv         (1df19c96eef6c29d1c3e1a8678e07190) C:\Windows\system32\bthserv.dll

19:14:10.0057 7680        bthserv - ok

19:14:10.0132 7680        cdfs            (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys

19:14:10.0188 7680        cdfs - ok

19:14:10.0263 7680        cdrom           (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\DRIVERS\cdrom.sys

19:14:10.0295 7680        cdrom - ok

19:14:10.0370 7680        CertPropSvc     (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll

19:14:10.0422 7680        CertPropSvc - ok

19:14:10.0512 7680        circlass        (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys

19:14:10.0599 7680        circlass - ok

19:14:11.0191 7680        CLFS            (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys

19:14:11.0223 7680        CLFS - ok

19:14:11.0951 7680        clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

19:14:11.0971 7680        clr_optimization_v2.0.50727_32 - ok

19:14:12.0502 7680        clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

19:14:12.0592 7680        clr_optimization_v4.0.30319_32 - ok

19:14:12.0662 7680        CmBatt          (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys

19:14:12.0679 7680        CmBatt - ok

19:14:12.0819 7680        cmdide          (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys

19:14:12.0885 7680        cmdide - ok

19:14:13.0104 7680        CNG             (247b4ce2dab1160cd422d532d5241e1f) C:\Windows\system32\Drivers\cng.sys

19:14:13.0238 7680        CNG - ok

19:14:13.0324 7680        Compbatt        (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys

19:14:13.0406 7680        Compbatt - ok

19:14:13.0471 7680        CompositeBus    (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys

19:14:13.0498 7680        CompositeBus - ok

19:14:13.0519 7680        COMSysApp - ok

19:14:13.0541 7680        crcdisk         (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys

19:14:13.0557 7680        crcdisk - ok

19:14:13.0721 7680        CryptSvc        (06e771aa596b8761107ab57e99f128d7) C:\Windows\system32\cryptsvc.dll

19:14:13.0895 7680        CryptSvc - ok

19:14:13.0930 7680        CVirtA          (b5ecadf7708960f1818c7fa015f4c239) C:\Windows\system32\DRIVERS\CVirtA.sys

19:14:13.0979 7680        CVirtA - ok

19:14:14.0052 7680        DcomLaunch      (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll

19:14:14.0143 7680        DcomLaunch - ok

19:14:14.0570 7680        defragsvc       (8d6e10a2d9a5eed59562d9b82cf804e1) C:\Windows\System32\defragsvc.dll

19:14:14.0637 7680        defragsvc - ok

19:14:14.0826 7680        DfsC            (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys

19:14:14.0890 7680        DfsC - ok

19:14:15.0220 7680        Dhcp            (e9e01eb683c132f7fa27cd607b8a2b63) C:\Windows\system32\dhcpcore.dll

19:14:15.0328 7680        Dhcp - ok

19:14:15.0537 7680        discache        (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys

19:14:15.0684 7680        discache - ok

19:14:15.0745 7680        Disk            (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys

19:14:15.0768 7680        Disk - ok

19:14:15.0845 7680        DNE             (b5aa5aa5ac327bd7c1aec0c58f0c1144) C:\Windows\system32\DRIVERS\dne2000.sys

19:14:15.0861 7680        DNE - ok

19:14:15.0922 7680        Dnscache        (33ef4861f19a0736b11314aad9ae28d0) C:\Windows\System32\dnsrslvr.dll

19:14:15.0981 7680        Dnscache - ok

19:14:16.0574 7680        dot3svc         (366ba8fb4b7bb7435e3b9eacb3843f67) C:\Windows\System32\dot3svc.dll

19:14:16.0684 7680        dot3svc - ok

19:14:16.0997 7680        Dot4            (b5e479eb83707dd698f66953e922042c) C:\Windows\system32\DRIVERS\Dot4.sys

19:14:17.0044 7680        Dot4 - ok

19:14:17.0147 7680        Dot4Print       (caefd09b6a6249c53a67d55a9a9fcabf) C:\Windows\system32\drivers\Dot4Prt.sys

19:14:17.0199 7680        Dot4Print - ok

19:14:17.0246 7680        dot4usb         (cf491ff38d62143203c065260567e2f7) C:\Windows\system32\DRIVERS\dot4usb.sys

19:14:17.0278 7680        dot4usb - ok

19:14:17.0554 7680        DPS             (8ec04ca86f1d68da9e11952eb85973d6) C:\Windows\system32\dps.dll

19:14:17.0623 7680        DPS - ok

19:14:17.0775 7680        drmkaud         (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys

19:14:17.0848 7680        drmkaud - ok

19:14:17.0929 7680        dtsoftbus01     (c0c7ceccb6c85994c2bc92d58e52d3f2) C:\Windows\system32\DRIVERS\dtsoftbus01.sys

19:14:18.0016 7680        dtsoftbus01 - ok

19:14:18.0083 7680        DvmMDES         (f6b7c3e5749fe84e081860962dac9ea3) C:\ASUS.SYS\DVMExportService.exe

19:14:18.0116 7680        DvmMDES ( UnsignedFile.Multi.Generic ) - warning

19:14:18.0116 7680        DvmMDES - detected UnsignedFile.Multi.Generic (1)

19:14:18.0189 7680        DXGKrnl         (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys

19:14:18.0298 7680        DXGKrnl - ok

19:14:18.0599 7680        EapHost         (8600142fa91c1b96367d3300ad0f3f3a) C:\Windows\System32\eapsvc.dll

19:14:18.0745 7680        EapHost - ok

19:14:22.0216 7680        ebdrv           (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys

19:14:22.0575 7680        ebdrv - ok

19:14:24.0494 7680        EFS             (81951f51e318aecc2d68559e47485cc4) C:\Windows\System32\lsass.exe

19:14:24.0643 7680        EFS - ok

19:14:26.0130 7680        ehRecvr         (a8c362018efc87beb013ee28f29c0863) C:\Windows\ehome\ehRecvr.exe

19:14:26.0296 7680        ehRecvr - ok

19:14:26.0552 7680        ehSched         (d389bff34f80caede417bf9d1507996a) C:\Windows\ehome\ehsched.exe

19:14:26.0679 7680        ehSched - ok

19:14:28.0001 7680        elxstor         (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys

19:14:28.0161 7680        elxstor - ok

19:14:28.0213 7680        ErrDev          (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys

19:14:28.0250 7680        ErrDev - ok

19:14:29.0035 7680        EventSystem     (f6916efc29d9953d5d0df06882ae8e16) C:\Windows\system32\es.dll

19:14:29.0136 7680        EventSystem - ok

19:14:29.0269 7680        exfat           (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys

19:14:29.0318 7680        exfat - ok

19:14:29.0724 7680        fastfat         (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys

19:14:29.0790 7680        fastfat - ok

19:14:30.0907 7680        Fax             (967ea5b213e9984cbe270205df37755b) C:\Windows\system32\fxssvc.exe

19:14:31.0070 7680        Fax - ok

19:14:31.0274 7680        fdc             (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys

19:14:31.0340 7680        fdc - ok

19:14:31.0462 7680        fdPHost         (f3222c893bd2f5821a0179e5c71e88fb) C:\Windows\system32\fdPHost.dll

19:14:31.0641 7680        fdPHost - ok

19:14:31.0668 7680        FDResPub        (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\Windows\system32\fdrespub.dll

19:14:31.0778 7680        FDResPub - ok

19:14:31.0789 7680        FileInfo        (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys

19:14:31.0805 7680        FileInfo - ok

19:14:31.0822 7680        Filetrace       (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys

19:14:31.0906 7680        Filetrace - ok

19:14:31.0994 7680        flpydisk        (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys

19:14:32.0084 7680        flpydisk - ok

19:14:32.0157 7680        FltMgr          (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys

19:14:32.0298 7680        FltMgr - ok

19:14:33.0644 7680        FontCache       (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\Windows\system32\FntCache.dll

19:14:33.0809 7680        FontCache - ok

19:14:34.0423 7680        FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

19:14:34.0438 7680        FontCache3.0.0.0 - ok

19:14:34.0506 7680        FsDepends       (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys

19:14:34.0526 7680        FsDepends - ok

19:14:34.0631 7680        fssfltr         (b0082808a6856a252f7cdd939892ce50) C:\Windows\system32\DRIVERS\fssfltr.sys

19:14:34.0713 7680        fssfltr - ok

19:14:36.0731 7680        fsssvc          (28ddeeec44e988657b732cf404d504cb) C:\Program Files\Windows Live\Family Safety\fsssvc.exe

19:14:36.0872 7680        fsssvc - ok

19:14:38.0283 7680        Fs_Rec          (7dae5ebcc80e45d3253f4923dc424d05) C:\Windows\system32\drivers\Fs_Rec.sys

19:14:38.0339 7680        Fs_Rec - ok

19:14:39.0157 7680        fvevol          (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys

19:14:39.0278 7680        fvevol - ok

19:14:39.0650 7680        gagp30kx        (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys

19:14:39.0667 7680        gagp30kx - ok

19:14:41.0650 7680        gpsvc           (e897eaf5ed6ba41e081060c9b447a673) C:\Windows\System32\gpsvc.dll

19:14:41.0753 7680        gpsvc - ok

19:14:41.0806 7680        hcw85cir        (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys

19:14:41.0919 7680        hcw85cir - ok

19:14:42.0532 7680        HDAudBus        (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys

19:14:42.0638 7680        HDAudBus - ok

19:14:42.0791 7680        HidBatt         (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys

19:14:42.0879 7680        HidBatt - ok

19:14:43.0120 7680        HidBth          (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys

19:14:43.0165 7680        HidBth - ok

19:14:43.0404 7680        HidIr           (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys

19:14:43.0469 7680        HidIr - ok

19:14:43.0709 7680        hidserv         (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\Windows\system32\hidserv.dll

19:14:43.0793 7680        hidserv - ok

19:14:43.0855 7680        HidUsb          (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\DRIVERS\hidusb.sys

19:14:43.0873 7680        HidUsb - ok

19:14:44.0028 7680        hkmsvc          (196b4e3f4cccc24af836ce58facbb699) C:\Windows\system32\kmsvc.dll

19:14:44.0092 7680        hkmsvc - ok

19:14:44.0504 7680        HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\Windows\system32\ListSvc.dll

19:14:44.0647 7680        HomeGroupListener - ok

19:14:45.0080 7680        HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\Windows\system32\provsvc.dll

19:14:45.0164 7680        HomeGroupProvider - ok

19:14:46.0546 7680        hpqcxs08        (0a3c6aa4a9fc38c20ba4eac2c3351c05) C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

19:14:46.0623 7680        hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning

19:14:46.0623 7680        hpqcxs08 - detected UnsignedFile.Multi.Generic (1)

19:14:46.0884 7680        hpqddsvc        (f3f72a2a86c22610bca5439fa789dd52) C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

19:14:47.0066 7680        hpqddsvc ( UnsignedFile.Multi.Generic ) - warning

19:14:47.0066 7680        hpqddsvc - detected UnsignedFile.Multi.Generic (1)

19:14:47.0473 7680        HpSAMD          (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys

19:14:47.0549 7680        HpSAMD - ok

19:14:47.0607 7680        HTCAND32        (950cc1e6ae3a6cd23e0945cde089b02c) C:\Windows\system32\Drivers\ANDROIDUSB.sys

19:14:47.0661 7680        HTCAND32 - ok

19:14:47.0710 7680        htcnprot        (339adefad60353f960e3ca67ce468c24) C:\Windows\system32\DRIVERS\htcnprot.sys

19:14:47.0735 7680        htcnprot - ok

19:14:49.0682 7680        HTTP            (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys

19:14:49.0781 7680        HTTP - ok

19:14:49.0949 7680        hwpolicy        (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys

19:14:49.0964 7680        hwpolicy - ok

19:14:50.0263 7680        i8042prt        (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys

19:14:50.0388 7680        i8042prt - ok

19:14:50.0548 7680        iaStorV         (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys

19:14:50.0596 7680        iaStorV - ok

19:14:52.0133 7680        idsvc           (c521d7eb6497bb1af6afa89e322fb43c) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

19:14:52.0192 7680        idsvc - ok

19:14:53.0990 7680        iirsp           (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys

19:14:54.0088 7680        iirsp - ok

19:14:56.0228 7680        IKEEXT          (f95622f161474511b8d80d6b093aa610) C:\Windows\System32\ikeext.dll

19:14:56.0333 7680        IKEEXT - ok

19:14:59.0883 7680        IntcAzAudAddService (43f5535aa4d6c75a37f70fb9c561cc9b) C:\Windows\system32\drivers\RTKVHDA.sys

19:15:00.0028 7680        IntcAzAudAddService - ok

19:15:01.0434 7680        intelide        (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys

19:15:01.0450 7680        intelide - ok

19:15:01.0630 7680        intelppm        (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys

19:15:01.0745 7680        intelppm - ok

19:15:02.0029 7680        IPBusEnum       (acb364b9075a45c0736e5c47be5cae19) C:\Windows\system32\ipbusenum.dll

19:15:02.0174 7680        IPBusEnum - ok

19:15:02.0213 7680        IpFilterDriver  (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys

19:15:02.0314 7680        IpFilterDriver - ok

19:15:02.0395 7680        iphlpsvc        (4d65a07b795d6674312f879d09aa7663) C:\Windows\System32\iphlpsvc.dll

19:15:02.0486 7680        iphlpsvc - ok

19:15:02.0514 7680        IPMIDRV         (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys

19:15:02.0534 7680        IPMIDRV - ok

19:15:02.0846 7680        IPNAT           (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys

19:15:02.0952 7680        IPNAT - ok

19:15:03.0018 7680        IRENUM          (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys

19:15:03.0099 7680        IRENUM - ok

19:15:03.0147 7680        isapnp          (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys

19:15:03.0170 7680        isapnp - ok

19:15:03.0297 7680        iScsiPrt        (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys

19:15:03.0319 7680        iScsiPrt - ok

19:15:03.0389 7680        kbdclass        (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys

19:15:03.0405 7680        kbdclass - ok

19:15:03.0452 7680        kbdhid          (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\DRIVERS\kbdhid.sys

19:15:03.0491 7680        kbdhid - ok

19:15:03.0563 7680        kbfiltr         (27bd4ac228ef6c0d490617c32e86a672) C:\Windows\system32\DRIVERS\kbfiltr.sys

19:15:03.0577 7680        kbfiltr - ok

19:15:03.0611 7680        KeyIso          (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

19:15:03.0629 7680        KeyIso - ok

19:15:04.0201 7680        KSecDD          (b7895b4182c0d16f6efadeb8081e8d36) C:\Windows\system32\Drivers\ksecdd.sys

19:15:04.0269 7680        KSecDD - ok

19:15:04.0491 7680        KSecPkg         (d30159ac9237519fbc62c6ec247d2d46) C:\Windows\system32\Drivers\ksecpkg.sys

19:15:04.0513 7680        KSecPkg - ok

19:15:05.0255 7680        KtmRm           (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\Windows\system32\msdtckrm.dll

19:15:05.0373 7680        KtmRm - ok

19:15:05.0876 7680        LanmanServer    (d64af876d53eca3668bb97b51b4e70ab) C:\Windows\system32\srvsvc.dll

19:15:06.0002 7680        LanmanServer - ok

19:15:06.0076 7680        LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\Windows\System32\wkssvc.dll

19:15:06.0192 7680        LanmanWorkstation - ok

19:15:06.0290 7680        LHidFilt        (05d6b85ecc3204931923ab7940b9596e) C:\Windows\system32\DRIVERS\LHidFilt.Sys

19:15:06.0305 7680        LHidFilt - ok

19:15:06.0939 7680        LightScribeService (abf90fc5a127f481219b873c1b8dfc1c) C:\Program Files\Common Files\LightScribe\LSSrvc.exe

19:15:06.0991 7680        LightScribeService ( UnsignedFile.Multi.Generic ) - warning

19:15:06.0991 7680        LightScribeService - detected UnsignedFile.Multi.Generic (1)

19:15:07.0367 7680        lirsgt          (f8a7212d0864ef5e9185fb95e6623f4d) C:\Windows\system32\DRIVERS\lirsgt.sys

19:15:07.0460 7680        lirsgt - ok

19:15:07.0543 7680        lltdio          (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys

19:15:07.0701 7680        lltdio - ok

19:15:08.0233 7680        lltdsvc         (5700673e13a2117fa3b9020c852c01e2) C:\Windows\System32\lltdsvc.dll

19:15:08.0272 7680        lltdsvc - ok

19:15:08.0310 7680        lmhosts         (55ca01ba19d0006c8f2639b6c045e08b) C:\Windows\System32\lmhsvc.dll

19:15:08.0408 7680        lmhosts - ok

19:15:08.0530 7680        LMouFilt        (053dbcc1082fdf74ab145a71917a6556) C:\Windows\system32\DRIVERS\LMouFilt.Sys

19:15:08.0545 7680        LMouFilt - ok

19:15:08.0961 7680        LSI_FC          (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys

19:15:09.0012 7680        LSI_FC - ok

19:15:09.0671 7680        LSI_SAS         (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys

19:15:09.0753 7680        LSI_SAS - ok

19:15:09.0953 7680        LSI_SAS2        (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys

19:15:09.0970 7680        LSI_SAS2 - ok

19:15:10.0255 7680        LSI_SCSI        (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys

19:15:10.0271 7680        LSI_SCSI - ok

19:15:10.0680 7680        luafv           (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys

19:15:10.0773 7680        luafv - ok

19:15:10.0909 7680        lullaby         (8039f480c192dd99fed4ebc71ffbf795) C:\Windows\system32\DRIVERS\lullaby.sys

19:15:10.0925 7680        lullaby - ok

19:15:11.0161 7680        MBAMSwissArmy   (0db7527db188c7d967a37bb51bbf3963) C:\Windows\system32\drivers\mbamswissarmy.sys

19:15:11.0297 7680        MBAMSwissArmy - ok

19:15:11.0456 7680        Mcx2Svc         (bfb9ee8ee977efe85d1a3105abef6dd1) C:\Windows\system32\Mcx2Svc.dll

19:15:11.0536 7680        Mcx2Svc - ok

19:15:11.0668 7680        megasas         (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys

19:15:11.0688 7680        megasas - ok

19:15:11.0760 7680        MegaSR          (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys

19:15:11.0787 7680        MegaSR - ok

19:15:12.0312 7680        Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe

19:15:12.0331 7680        Microsoft Office Groove Audit Service - ok

19:15:12.0487 7680        MMCSS           (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll

19:15:12.0563 7680        MMCSS - ok

19:15:12.0723 7680        Modem           (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys

19:15:12.0835 7680        Modem - ok

19:15:12.0875 7680        monitor         (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys

19:15:12.0920 7680        monitor - ok

19:15:13.0042 7680        mouclass        (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys

19:15:13.0070 7680        mouclass - ok

19:15:13.0229 7680        mouhid          (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys

19:15:13.0269 7680        mouhid - ok

19:15:13.0534 7680        mountmgr        (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys

19:15:13.0560 7680        mountmgr - ok

19:15:13.0802 7680        mpio            (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys

19:15:13.0820 7680        mpio - ok

19:15:14.0099 7680        mpsdrv          (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys

19:15:14.0214 7680        mpsdrv - ok

19:15:16.0091 7680        MpsSvc          (9835584e999d25004e1ee8e5f3e3b881) C:\Windows\system32\mpssvc.dll

19:15:16.0192 7680        MpsSvc - ok

19:15:16.0482 7680        MRxDAV          (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys

19:15:16.0589 7680        MRxDAV - ok

19:15:16.0663 7680        mrxsmb          (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys

19:15:16.0782 7680        mrxsmb - ok

19:15:16.0848 7680        mrxsmb10        (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys

19:15:16.0904 7680        mrxsmb10 - ok

19:15:16.0942 7680        mrxsmb20        (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys

19:15:17.0023 7680        mrxsmb20 - ok

19:15:17.0046 7680        msahci          (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys

19:15:17.0063 7680        msahci - ok

19:15:17.0087 7680        msdsm           (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys

19:15:17.0106 7680        msdsm - ok

19:15:17.0172 7680        MSDTC           (e1bce74a3bd9902b72599c0192a07e27) C:\Windows\System32\msdtc.exe

19:15:17.0234 7680        MSDTC - ok

19:15:17.0308 7680        Msfs            (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys

19:15:17.0351 7680        Msfs - ok

19:15:17.0383 7680        mshidkmdf       (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys

19:15:17.0476 7680        mshidkmdf - ok

19:15:17.0535 7680        msisadrv        (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys

19:15:17.0550 7680        msisadrv - ok

19:15:18.0023 7680        MSiSCSI         (90f7d9e6b6f27e1a707d4a297f077828) C:\Windows\system32\iscsiexe.dll

19:15:18.0132 7680        MSiSCSI - ok

19:15:18.0138 7680        msiserver - ok

19:15:18.0254 7680        MSKSSRV         (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys

19:15:18.0324 7680        MSKSSRV - ok

19:15:18.0375 7680        MSPCLOCK        (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys

19:15:18.0419 7680        MSPCLOCK - ok

19:15:18.0474 7680        MSPQM           (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys

19:15:18.0533 7680        MSPQM - ok

19:15:18.0592 7680        MsRPC           (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys

19:15:18.0610 7680        MsRPC - ok

19:15:18.0694 7680        mssmbios        (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys

19:15:18.0710 7680        mssmbios - ok

19:15:18.0826 7680        MSTEE           (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys

19:15:18.0858 7680        MSTEE - ok

19:15:18.0881 7680        MTConfig        (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys

19:15:18.0924 7680        MTConfig - ok

19:15:18.0995 7680        MTsensor        (97affa9d95ffe20eee6229bc6be166cf) C:\Windows\system32\DRIVERS\ATKACPI.sys

19:15:19.0148 7680        MTsensor - ok

19:15:19.0183 7680        Mup             (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys

19:15:19.0201 7680        Mup - ok

19:15:20.0002 7680        napagent        (61d57a5d7c6d9afe10e77dae6e1b445e) C:\Windows\system32\qagentRT.dll

19:15:20.0084 7680        napagent - ok

19:15:21.0025 7680        NativeWifiP     (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys

19:15:21.0122 7680        NativeWifiP - ok

19:15:23.0543 7680        NDIS            (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys

19:15:23.0627 7680        NDIS - ok

19:15:23.0701 7680        NdisCap         (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys

19:15:23.0830 7680        NdisCap - ok

19:15:23.0851 7680        NdisTapi        (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys

19:15:23.0898 7680        NdisTapi - ok

19:15:24.0087 7680        Ndisuio         (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys

19:15:24.0186 7680        Ndisuio - ok

19:15:24.0732 7680        NdisWan         (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys

19:15:24.0823 7680        NdisWan - ok

19:15:24.0870 7680        NDProxy         (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys

19:15:24.0949 7680        NDProxy - ok

19:15:25.0213 7680        Net Driver HPZ12 (a081cb6fb9a12668f233eb5414be3a0e) C:\Windows\system32\HPZinw12.dll

19:15:25.0248 7680        Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

19:15:25.0248 7680        Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

19:15:25.0398 7680        NetBIOS         (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys

19:15:25.0481 7680        NetBIOS - ok

19:15:26.0248 7680        NetBT           (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys

19:15:26.0321 7680        NetBT - ok

19:15:26.0396 7680        Netlogon        (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

19:15:26.0413 7680        Netlogon - ok

19:15:27.0376 7680        Netman          (7cccfca7510684768da22092d1fa4db2) C:\Windows\System32\netman.dll

19:15:27.0437 7680        Netman - ok

19:15:28.0892 7680        netprofm        (8c338238c16777a802d6a9211eb2ba50) C:\Windows\System32\netprofm.dll

19:15:28.0935 7680        netprofm - ok

19:15:29.0568 7680        NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

19:15:29.0585 7680        NetTcpPortSharing - ok

19:15:29.0867 7680        nfrd960         (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys

19:15:29.0891 7680        nfrd960 - ok

19:15:29.0971 7680        NlaSvc          (912084381d30d8b89ec4e293053f4710) C:\Windows\System32\nlasvc.dll

19:15:30.0034 7680        NlaSvc - ok

19:15:30.0088 7680        Npfs            (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys

19:15:30.0141 7680        Npfs - ok

19:15:30.0267 7680        nsi             (ba387e955e890c8a88306d9b8d06bf17) C:\Windows\system32\nsisvc.dll

19:15:30.0317 7680        nsi - ok

19:15:30.0436 7680        nsiproxy        (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys

19:15:30.0483 7680        nsiproxy - ok

19:15:34.0083 7680        Ntfs            (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys

19:15:34.0162 7680        Ntfs - ok

19:15:37.0367 7680        Null            (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys

19:15:37.0400 7680        Null - ok

19:15:41.0240 7680        nvlddmkm        (c593ca398f26b34b71b0579ceb6ffaa5) C:\Windows\system32\DRIVERS\nvlddmkm.sys

19:15:41.0680 7680        nvlddmkm - ok

19:15:42.0410 7680        nvraid          (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys

19:15:42.0428 7680        nvraid - ok

19:15:42.0674 7680        nvstor          (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys

19:15:42.0697 7680        nvstor - ok

19:15:43.0123 7680        nvsvc           (3d207c5cf5f65a1f31c9f0260725ae82) C:\Windows\system32\nvvsvc.exe

19:15:43.0176 7680        nvsvc - ok

19:15:44.0325 7680        nvUpdatusService (5ba460f39d2d4032ee8c5474192d5a11) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

19:15:44.0417 7680        nvUpdatusService - ok

19:15:45.0301 7680        nv_agp          (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys

19:15:45.0320 7680        nv_agp - ok

19:15:46.0557 7680        odserv          (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

19:15:46.0623 7680        odserv - ok

19:15:46.0778 7680        ohci1394        (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys

19:15:46.0856 7680        ohci1394 - ok

19:15:47.0308 7680        ose             (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

19:15:47.0373 7680        ose - ok

19:15:47.0859 7680        p2pimsvc        (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll

19:15:47.0947 7680        p2pimsvc - ok

19:15:48.0549 7680        p2psvc          (59c3ddd501e39e006dac31bf55150d91) C:\Windows\system32\p2psvc.dll

19:15:48.0613 7680        p2psvc - ok

19:15:48.0769 7680        Parport         (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys

19:15:48.0955 7680        Parport - ok

19:15:49.0132 7680        partmgr         (3f34a1b4c5f6475f320c275e63afce9b) C:\Windows\system32\drivers\partmgr.sys

19:15:49.0149 7680        partmgr - ok

19:15:49.0203 7680        Parvdm          (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys

19:15:49.0248 7680        Parvdm - ok

19:15:49.0619 7680        PassThru Service (39b9dcd7040654c2e57d7396736c718e) C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

19:15:49.0685 7680        PassThru Service ( UnsignedFile.Multi.Generic ) - warning

19:15:49.0685 7680        PassThru Service - detected UnsignedFile.Multi.Generic (1)

19:15:49.0834 7680        PcaSvc          (358ab7956d3160000726574083dfc8a6) C:\Windows\System32\pcasvc.dll

19:15:49.0863 7680        PcaSvc - ok

19:15:50.0259 7680        pci             (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys

19:15:50.0343 7680        pci - ok

19:15:50.0389 7680        pciide          (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys

19:15:50.0407 7680        pciide - ok

19:15:50.0777 7680        pcmcia          (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys

19:15:50.0796 7680        pcmcia - ok

19:15:50.0852 7680        pcw             (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys

19:15:50.0868 7680        pcw - ok

19:15:51.0870 7680        PEAUTH          (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys

19:15:51.0975 7680        PEAUTH - ok

19:15:54.0096 7680        pla             (414bba67a3ded1d28437eb66aeb8a720) C:\Windows\system32\pla.dll

19:15:54.0182 7680        pla - ok

19:15:55.0713 7680        PlugPlay        (ec7bc28d207da09e79b3e9faf8b232ca) C:\Windows\system32\umpnpmgr.dll

19:15:55.0846 7680        PlugPlay - ok

19:15:55.0889 7680        Pml Driver HPZ12 (65bc271f337637731d3c71455ae1f476) C:\Windows\system32\HPZipm12.dll

19:15:55.0918 7680        Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

19:15:55.0918 7680        Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

19:15:56.0005 7680        PNRPAutoReg     (63ff8572611249931eb16bb8eed6afc8) C:\Windows\system32\pnrpauto.dll

19:15:56.0126 7680        PNRPAutoReg - ok

19:15:56.0696 7680        PNRPsvc         (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll

19:15:56.0719 7680        PNRPsvc - ok

19:15:57.0242 7680        PolicyAgent     (53946b69ba0836bd95b03759530c81ec) C:\Windows\System32\ipsecsvc.dll

19:15:57.0335 7680        PolicyAgent - ok

19:15:57.0627 7680        Power           (f87d30e72e03d579a5199ccb3831d6ea) C:\Windows\system32\umpo.dll

19:15:57.0666 7680        Power - ok

19:15:58.0089 7680        PptpMiniport    (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys

19:15:58.0201 7680        PptpMiniport - ok

19:15:58.0251 7680        Processor       (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys

19:15:58.0308 7680        Processor - ok

19:15:58.0373 7680        ProfSvc         (cadefac453040e370a1bdff3973be00d) C:\Windows\system32\profsvc.dll

19:15:58.0461 7680        ProfSvc - ok

19:15:58.0495 7680        ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

19:15:58.0512 7680        ProtectedStorage - ok

19:15:58.0862 7680        Psched          (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys

19:15:58.0921 7680        Psched - ok

19:16:01.0800 7680        ql2300          (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys

19:16:01.0915 7680        ql2300 - ok

19:16:03.0689 7680        ql40xx          (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys

19:16:03.0714 7680        ql40xx - ok

19:16:04.0153 7680        QWAVE           (31ac809e7707eb580b2bdb760390765a) C:\Windows\system32\qwave.dll

19:16:04.0252 7680        QWAVE - ok

19:16:04.0294 7680        QWAVEdrv        (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys

19:16:04.0314 7680        QWAVEdrv - ok

19:16:04.0815 7680        RapiMgr         (8f97d374ad1857e1eed85a79f29a1d3d) C:\Windows\WindowsMobile\rapimgr.dll

19:16:04.0833 7680        RapiMgr - ok

19:16:04.0919 7680        RasAcd          (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys

19:16:05.0008 7680        RasAcd - ok

19:16:05.0096 7680        RasAgileVpn     (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys

19:16:05.0128 7680        RasAgileVpn - ok

19:16:05.0432 7680        RasAuto         (a60f1839849c0c00739787fd5ec03f13) C:\Windows\System32\rasauto.dll

19:16:05.0488 7680        RasAuto - ok

19:16:05.0685 7680        Rasl2tp         (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys

19:16:05.0720 7680        Rasl2tp - ok

19:16:06.0366 7680        RasMan          (cb9e04dc05eacf5b9a36ca276d475006) C:\Windows\System32\rasmans.dll

19:16:06.0448 7680        RasMan - ok

19:16:06.0832 7680        RasPppoe        (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys

19:16:06.0915 7680        RasPppoe - ok

19:16:07.0189 7680        RasSstp         (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys

19:16:07.0266 7680        RasSstp - ok

19:16:08.0012 7680        rdbss           (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys

19:16:08.0087 7680        rdbss - ok

19:16:08.0158 7680        rdpbus          (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys

19:16:08.0249 7680        rdpbus - ok

19:16:08.0342 7680        RDPCDD          (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys

19:16:08.0442 7680        RDPCDD - ok

19:16:08.0499 7680        RDPENCDD        (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys

19:16:08.0545 7680        RDPENCDD - ok

19:16:08.0638 7680        RDPREFMP        (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys

19:16:08.0668 7680        RDPREFMP - ok

19:16:09.0169 7680        RDPWD           (f031683e6d1fea157abb2ff260b51e61) C:\Windows\system32\drivers\RDPWD.sys

19:16:09.0314 7680        RDPWD - ok

19:16:09.0623 7680        rdyboost        (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys

19:16:09.0673 7680        rdyboost - ok

19:16:09.0826 7680        RemoteAccess    (7b5e1419717fac363a31cc302895217a) C:\Windows\System32\mprdim.dll

19:16:09.0907 7680        RemoteAccess - ok

19:16:10.0055 7680        RemoteRegistry  (cb9a8683f4ef2bf99e123d79950d7935) C:\Windows\system32\regsvc.dll

19:16:10.0151 7680        RemoteRegistry - ok

19:16:10.0193 7680        RpcEptMapper    (78d072f35bc45d9e4e1b61895c152234) C:\Windows\System32\RpcEpMap.dll

19:16:10.0247 7680        RpcEptMapper - ok

19:16:10.0332 7680        RpcLocator      (94d36c0e44677dd26981d2bfeef2a29d) C:\Windows\system32\locator.exe

19:16:10.0360 7680        RpcLocator - ok

19:16:11.0358 7680        RpcSs           (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll

19:16:11.0395 7680        RpcSs - ok

19:16:11.0507 7680        rspndr          (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys

19:16:11.0578 7680        rspndr - ok

19:16:11.0708 7680        RTSTOR          (830b682cb24206f457ea8a617605209f) C:\Windows\system32\drivers\RTSTOR.SYS

19:16:11.0741 7680        RTSTOR - ok

19:16:11.0845 7680        SamSs           (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

19:16:11.0861 7680        SamSs - ok

19:16:11.0939 7680        sbp2port        (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys

19:16:11.0961 7680        sbp2port - ok

19:16:12.0150 7680        SCardSvr        (8fc518ffe9519c2631d37515a68009c4) C:\Windows\System32\SCardSvr.dll

19:16:12.0197 7680        SCardSvr - ok

19:16:12.0274 7680        scfilter        (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys

19:16:12.0318 7680        scfilter - ok

19:16:13.0723 7680        Schedule        (a04bb13f8a72f8b6e8b4071723e4e336) C:\Windows\system32\schedsvc.dll

19:16:13.0834 7680        Schedule - ok

19:16:13.0984 7680        SCPolicySvc     (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll

19:16:14.0013 7680        SCPolicySvc - ok

19:16:14.0432 7680        SDRSVC          (08236c4bce5edd0a0318a438af28e0f7) C:\Windows\System32\SDRSVC.dll

19:16:14.0525 7680        SDRSVC - ok

19:16:14.0611 7680        secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys

19:16:14.0665 7680        secdrv - ok

19:16:14.0779 7680        seclogon        (a59b3a4442c52060cc7a85293aa3546f) C:\Windows\system32\seclogon.dll

19:16:14.0889 7680        seclogon - ok

19:16:14.0922 7680        SENS            (dcb7fcdcc97f87360f75d77425b81737) C:\Windows\System32\sens.dll

19:16:15.0011 7680        SENS - ok

19:16:15.0124 7680        SensrSvc        (50087fe1ee447009c9cc2997b90de53f) C:\Windows\system32\sensrsvc.dll

19:16:15.0191 7680        SensrSvc - ok

19:16:15.0258 7680        Serenum         (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys

19:16:15.0276 7680        Serenum - ok

19:16:15.0577 7680        Serial          (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys

19:16:15.0659 7680        Serial - ok

19:16:15.0820 7680        sermouse        (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys

19:16:15.0868 7680        sermouse - ok

19:16:16.0122 7680        SessionEnv      (4ae380f39a0032eab7dd953030b26d28) C:\Windows\system32\sessenv.dll

19:16:16.0234 7680        SessionEnv - ok

19:16:16.0286 7680        sfdrv01         (4c0d673281178cb496011a2e28571fc8) C:\Windows\system32\drivers\sfdrv01.sys

19:16:16.0294 7680        sfdrv01 ( UnsignedFile.Multi.Generic ) - warning

19:16:16.0294 7680        sfdrv01 - detected UnsignedFile.Multi.Generic (1)

19:16:16.0315 7680        sffdisk         (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys

19:16:16.0334 7680        sffdisk - ok

19:16:16.0357 7680        sffp_mmc        (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys

19:16:16.0469 7680        sffp_mmc - ok

19:16:16.0480 7680        sffp_sd         (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys

19:16:16.0499 7680        sffp_sd - ok

19:16:16.0539 7680        sfhlp02         (15be2b5e4dc5b8623cf167720682abc9) C:\Windows\system32\drivers\sfhlp02.sys

19:16:16.0546 7680        sfhlp02 ( UnsignedFile.Multi.Generic ) - warning

19:16:16.0546 7680        sfhlp02 - detected UnsignedFile.Multi.Generic (1)

19:16:16.0640 7680        sfloppy         (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys

19:16:16.0674 7680        sfloppy - ok

19:16:17.0078 7680        sfvfs02         (d5a7e09d2c6a702809e49190d52adc9f) C:\Windows\system32\drivers\sfvfs02.sys

19:16:17.0169 7680        sfvfs02 ( UnsignedFile.Multi.Generic ) - warning

19:16:17.0169 7680        sfvfs02 - detected UnsignedFile.Multi.Generic (1)

19:16:17.0245 7680        SharedAccess    (d1a079a0de2ea524513b6930c24527a2) C:\Windows\System32\ipnathlp.dll

19:16:17.0350 7680        SharedAccess - ok

19:16:18.0013 7680        ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\Windows\System32\shsvcs.dll

19:16:18.0110 7680        ShellHWDetection - ok

19:16:18.0403 7680        sisagp          (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys

19:16:18.0465 7680        sisagp - ok

19:16:18.0766 7680        SiSGbeLH        (6f0c643c7f49f2091b01d014eae72e1a) C:\Windows\system32\DRIVERS\SiSGB6.sys

19:16:18.0841 7680        SiSGbeLH - ok

19:16:18.0909 7680        SiSRaid2        (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys

19:16:18.0927 7680        SiSRaid2 - ok

19:16:18.0943 7680        SiSRaid4        (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys

19:16:18.0962 7680        SiSRaid4 - ok

19:16:18.0998 7680        Smb             (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys

19:16:19.0030 7680        Smb - ok

19:16:19.0144 7680        SNMPTRAP        (6a984831644eca1a33ffeae4126f4f37) C:\Windows\System32\snmptrap.exe

19:16:19.0172 7680        SNMPTRAP - ok

19:16:21.0987 7680        SNP2UVC         (a709dfa1674c1ed61ef7b5f29b38eeb1) C:\Windows\system32\DRIVERS\snp2uvc.sys

19:16:22.0151 7680        SNP2UVC - ok

19:16:24.0206 7680        spldr           (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys

19:16:24.0234 7680        spldr - ok

19:16:24.0512 7680        Spooler         (866a43013535dc8587c258e43579c764) C:\Windows\System32\spoolsv.exe

19:16:24.0573 7680        Spooler - ok

19:16:27.0484 7680        sppsvc          (cf87a1de791347e75b98885214ced2b8) C:\Windows\system32\sppsvc.exe

19:16:27.0631 7680        sppsvc - ok

19:16:28.0600 7680        sppuinotify     (b0180b20b065d89232a78a40fe56eaa6) C:\Windows\system32\sppuinotify.dll

19:16:28.0794 7680        sppuinotify - ok

19:16:29.0715 7680        sptd            (cdddec541bc3c96f91ecb48759673505) C:\Windows\System32\Drivers\sptd.sys

19:16:29.0771 7680        sptd - ok

19:16:29.0830 7680        srv             (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys

19:16:29.0869 7680        srv - ok

19:16:29.0954 7680        srv2            (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys

19:16:30.0004 7680        srv2 - ok

19:16:30.0216 7680        srvnet          (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys

19:16:30.0274 7680        srvnet - ok

19:16:30.0328 7680        SSDPSRV         (d887c9fd02ac9fa880f6e5027a43e118) C:\Windows\System32\ssdpsrv.dll

19:16:30.0366 7680        SSDPSRV - ok

19:16:30.0441 7680        ssmdrv          (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys

19:16:30.0456 7680        ssmdrv - ok

19:16:30.0527 7680        SstpSvc         (d318f23be45d5e3a107469eb64815b50) C:\Windows\system32\sstpsvc.dll

19:16:30.0578 7680        SstpSvc - ok

19:16:31.0510 7680        Stereo Service  (a8f1a34f855887fc721dc9539223b543) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

19:16:31.0529 7680        Stereo Service - ok

19:16:31.0612 7680        stexstor        (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys

19:16:31.0662 7680        stexstor - ok

19:16:32.0270 7680        StiSvc          (e1fb3706030fb4578a0d72c2fc3689e4) C:\Windows\System32\wiaservc.dll

19:16:32.0332 7680        StiSvc - ok

19:16:32.0399 7680        swenum          (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\drivers\swenum.sys

19:16:32.0420 7680        swenum - ok

19:16:32.0611 7680        swprv           (a28bd92df340e57b024ba433165d34d7) C:\Windows\System32\swprv.dll

19:16:32.0683 7680        swprv - ok

19:16:32.0908 7680        SynTP           (55f6e55cc2430ca8713387106fa79817) C:\Windows\system32\DRIVERS\SynTP.sys

19:16:32.0999 7680        SynTP - ok

19:16:33.0455 7680        SysMain         (36650d618ca34c9d357dfd3d89b2c56f) C:\Windows\system32\sysmain.dll

19:16:33.0540 7680        SysMain - ok

19:16:33.0802 7680        TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\Windows\System32\TabSvc.dll

19:16:33.0833 7680        TabletInputService - ok

19:16:33.0986 7680        TapiSrv         (613bf4820361543956909043a265c6ac) C:\Windows\System32\tapisrv.dll

19:16:34.0043 7680        TapiSrv - ok

19:16:34.0090 7680        TBS             (b799d9fdb26111737f58288d8dc172d9) C:\Windows\System32\tbssvc.dll

19:16:34.0128 7680        TBS - ok

19:16:34.0319 7680        Tcpip           (7fa2e0f8b072bd04b77b421480b6cc22) C:\Windows\system32\drivers\tcpip.sys

19:16:34.0389 7680        Tcpip - ok

19:16:35.0493 7680        TCPIP6          (7fa2e0f8b072bd04b77b421480b6cc22) C:\Windows\system32\DRIVERS\tcpip.sys

19:16:35.0530 7680        TCPIP6 - ok

19:16:36.0218 7680        tcpipreg        (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys

19:16:36.0248 7680        tcpipreg - ok

19:16:36.0368 7680        TDPIPE          (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys

19:16:36.0462 7680        TDPIPE - ok

19:16:36.0577 7680        TDTCP           (2c2c5afe7ee4f620d69c23c0617651a8) C:\Windows\system32\drivers\tdtcp.sys

19:16:36.0621 7680        TDTCP - ok

19:16:36.0721 7680        tdx             (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys

19:16:36.0763 7680        tdx - ok

19:16:37.0332 7680        TermDD          (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\drivers\termdd.sys

19:16:37.0349 7680        TermDD - ok

19:16:37.0609 7680        TermService     (382c804c92811be57829d8e550a900e2) C:\Windows\System32\termsrv.dll

19:16:37.0718 7680        TermService - ok

19:16:37.0855 7680        Themes          (42fb6afd6b79d9fe07381609172e7ca4) C:\Windows\system32\themeservice.dll

19:16:37.0878 7680        Themes - ok

19:16:37.0942 7680        THREADORDER     (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll

19:16:37.0976 7680        THREADORDER - ok

19:16:38.0143 7680        TrkWks          (4792c0378db99a9bc2ae2de6cfff0c3a) C:\Windows\System32\trkwks.dll

19:16:38.0260 7680        TrkWks - ok

19:16:38.0460 7680        TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\Windows\servicing\TrustedInstaller.exe

19:16:38.0565 7680        TrustedInstaller - ok

19:16:38.0605 7680        tssecsrv        (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys

19:16:38.0661 7680        tssecsrv - ok

19:16:38.0713 7680        TsUsbFlt        (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys

19:16:38.0758 7680        TsUsbFlt - ok

19:16:39.0008 7680        tunnel          (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys

19:16:39.0051 7680        tunnel - ok

19:16:39.0218 7680        uagp35          (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys

19:16:39.0267 7680        uagp35 - ok

19:16:39.0501 7680        udfs            (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys

19:16:39.0549 7680        udfs - ok

19:16:39.0718 7680        UI0Detect       (8344fd4fce927880aa1aa7681d4927e5) C:\Windows\system32\UI0Detect.exe

19:16:39.0835 7680        UI0Detect - ok

19:16:39.0896 7680        uliagpkx        (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys

19:16:39.0915 7680        uliagpkx - ok

19:16:39.0956 7680        umbus           (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\drivers\umbus.sys

19:16:40.0020 7680        umbus - ok

19:16:40.0100 7680        UmPass          (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys

19:16:40.0128 7680        UmPass - ok

19:16:40.0209 7680        upnphost        (833fbb672460efce8011d262175fad33) C:\Windows\System32\upnphost.dll

19:16:40.0247 7680        upnphost - ok

19:16:40.0337 7680        USBAAPL         (d4fb6ecc60a428564ba8768b0e23c0fc) C:\Windows\system32\Drivers\usbaapl.sys

19:16:40.0411 7680        USBAAPL ( UnsignedFile.Multi.Generic ) - warning

19:16:40.0411 7680        USBAAPL - detected UnsignedFile.Multi.Generic (1)

19:16:40.0474 7680        usbaudio        (1d9f2bd026e8e2d45033a4df3f16b78c) C:\Windows\system32\drivers\usbaudio.sys

19:16:40.0504 7680        usbaudio - ok

19:16:40.0530 7680        usbccgp         (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\DRIVERS\usbccgp.sys

19:16:40.0598 7680        usbccgp - ok

19:16:40.0654 7680        usbcir          (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys

19:16:40.0688 7680        usbcir - ok

19:16:40.0709 7680        usbehci         (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\DRIVERS\usbehci.sys

19:16:40.0739 7680        usbehci - ok

19:16:40.0790 7680        usbhub          (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys

19:16:40.0913 7680        usbhub - ok

19:16:40.0930 7680        usbohci         (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\DRIVERS\usbohci.sys

19:16:40.0966 7680        usbohci - ok

19:16:41.0075 7680        usbprint        (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys

19:16:41.0113 7680        usbprint - ok

19:16:41.0166 7680        usbscan         (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys

19:16:41.0241 7680        usbscan - ok

19:16:41.0341 7680        USBSTOR         (f991ab9cc6b908db552166768176896a) C:\Windows\system32\DRIVERS\USBSTOR.SYS

19:16:41.0412 7680        USBSTOR - ok

19:16:41.0529 7680        usbuhci         (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\drivers\usbuhci.sys

19:16:41.0551 7680        usbuhci - ok

19:16:41.0631 7680        UxSms           (081e6e1c91aec36758902a9f727cd23c) C:\Windows\System32\uxsms.dll

19:16:41.0679 7680        UxSms - ok

19:16:41.0824 7680        VaultSvc        (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

19:16:41.0841 7680        VaultSvc - ok

19:16:41.0889 7680        vdrvroot        (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys

19:16:41.0908 7680        vdrvroot - ok

19:16:42.0057 7680        vds             (c3cd30495687c2a2f66a65ca6fd89be9) C:\Windows\System32\vds.exe

19:16:42.0129 7680        vds - ok

19:16:42.0219 7680        vga             (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys

19:16:42.0242 7680        vga - ok

19:16:42.0450 7680        VgaSave         (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys

19:16:42.0492 7680        VgaSave - ok

19:16:42.0699 7680        vhdmp           (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys

19:16:42.0722 7680        vhdmp - ok

19:16:42.0811 7680        viaagp          (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys

19:16:42.0828 7680        viaagp - ok

19:16:42.0967 7680        ViaC7           (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys

19:16:43.0019 7680        ViaC7 - ok

19:16:43.0116 7680        viaide          (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys

19:16:43.0158 7680        viaide - ok

19:16:43.0174 7680        volmgr          (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys

19:16:43.0191 7680        volmgr - ok

19:16:43.0669 7680        volmgrx         (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys

19:16:43.0716 7680        volmgrx - ok

19:16:43.0906 7680        volsnap         (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys

19:16:43.0962 7680        volsnap - ok

19:16:44.0059 7680        vsmraid         (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys

19:16:44.0082 7680        vsmraid - ok

19:16:44.0289 7680        VSS             (209a3b1901b83aeb8527ed211cce9e4c) C:\Windows\system32\vssvc.exe

19:16:44.0395 7680        VSS - ok

19:16:44.0444 7680        vwifibus        (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\system32\DRIVERS\vwifibus.sys

19:16:44.0488 7680        vwifibus - ok

19:16:44.0560 7680        vwififlt        (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys

19:16:44.0595 7680        vwififlt - ok

19:16:44.0934 7680        W32Time         (55187fd710e27d5095d10a472c8baf1c) C:\Windows\system32\w32time.dll

19:16:45.0012 7680        W32Time - ok

19:16:45.0062 7680        WacomPen        (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys

19:16:45.0133 7680        WacomPen - ok

19:16:45.0215 7680        WANARP          (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys

19:16:45.0270 7680        WANARP - ok

19:16:45.0276 7680        Wanarpv6        (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys

19:16:45.0306 7680        Wanarpv6 - ok

19:16:46.0428 7680        wbengine        (691e3285e53dca558e1a84667f13e15a) C:\Windows\system32\wbengine.exe

19:16:46.0567 7680        wbengine - ok

19:16:46.0865 7680        WbioSrvc        (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\Windows\System32\wbiosrvc.dll

19:16:46.0946 7680        WbioSrvc - ok

19:16:47.0936 7680        WcesComm        (59e19bd13c3bdb857646b9e436ba27f7) C:\Windows\WindowsMobile\wcescomm.dll

19:16:48.0090 7680        WcesComm - ok

19:16:48.0229 7680        wcncsvc         (34eee0dfaadb4f691d6d5308a51315dc) C:\Windows\System32\wcncsvc.dll

19:16:48.0299 7680        wcncsvc - ok

19:16:48.0405 7680        WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\Windows\System32\WcsPlugInService.dll

19:16:48.0535 7680        WcsPlugInService - ok

19:16:48.0835 7680        Wd              (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys

19:16:48.0865 7680        Wd - ok

19:16:49.0578 7680        Wdf01000        (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys

19:16:49.0654 7680        Wdf01000 - ok

19:16:49.0675 7680        WdiServiceHost  (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll

19:16:49.0838 7680        WdiServiceHost - ok

19:16:49.0843 7680        WdiSystemHost   (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll

19:16:49.0865 7680        WdiSystemHost - ok

19:16:50.0040 7680        WebClient       (a9d880f97530d5b8fee278923349929d) C:\Windows\System32\webclnt.dll

19:16:50.0120 7680        WebClient - ok

19:16:50.0532 7680        Wecsvc          (760f0afe937a77cff27153206534f275) C:\Windows\system32\wecsvc.dll

19:16:50.0590 7680        Wecsvc - ok

19:16:50.0782 7680        wercplsupport   (ac804569bb2364fb6017370258a4091b) C:\Windows\System32\wercplsupport.dll

19:16:50.0823 7680        wercplsupport - ok

19:16:50.0876 7680        WerSvc          (08e420d873e4fd85241ee2421b02c4a4) C:\Windows\System32\WerSvc.dll

19:16:50.0909 7680        WerSvc - ok

19:16:51.0015 7680        WfpLwf          (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys

19:16:51.0055 7680        WfpLwf - ok

19:16:51.0095 7680        WIMMount        (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys

19:16:51.0114 7680        WIMMount - ok

19:16:51.0839 7680        WinDefend       (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll

19:16:52.0000 7680        WinDefend - ok

19:16:52.0009 7680        WinHttpAutoProxySvc - ok

19:16:52.0324 7680        Winmgmt         (f62e510b6ad4c21eb9fe8668ed251826) C:\Windows\system32\wbem\WMIsvc.dll

19:16:52.0384 7680        Winmgmt - ok

19:16:53.0525 7680        WinRM           (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\Windows\system32\WsmSvc.dll

19:16:53.0698 7680        WinRM - ok

19:16:53.0881 7680        WINUSB          (a67e5f9a400f3bd1be3d80613b45f708) C:\Windows\system32\DRIVERS\WinUsb.sys

19:16:53.0914 7680        WINUSB - ok

19:16:54.0538 7680        Wlansvc         (16935c98ff639d185086a3529b1f2067) C:\Windows\System32\wlansvc.dll

19:16:54.0609 7680        Wlansvc - ok

19:16:56.0342 7680        wlidsvc         (fb01d4ae207b9efdbabfc55dc95c7e31) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

19:16:56.0469 7680        wlidsvc - ok

19:16:57.0429 7680        WmiAcpi         (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys

19:16:57.0449 7680        WmiAcpi - ok

19:16:57.0675 7680        wmiApSrv        (6eb6b66517b048d87dc1856ddf1f4c3f) C:\Windows\system32\wbem\WmiApSrv.exe

19:16:57.0788 7680        wmiApSrv - ok

19:16:59.0120 7680        WMPNetworkSvc   (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe

19:16:59.0228 7680        WMPNetworkSvc - ok

19:16:59.0869 7680        WPCSvc          (a2f0ec770a92f2b3f9de6d518e11409c) C:\Windows\System32\wpcsvc.dll

19:16:59.0922 7680        WPCSvc - ok

19:17:00.0069 7680        WPDBusEnum      (aa53356d60af47eacc85bc617a4f3f66) C:\Windows\system32\wpdbusenum.dll

19:17:00.0146 7680        WPDBusEnum - ok

19:17:00.0311 7680        ws2ifsl         (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys

19:17:00.0371 7680        ws2ifsl - ok

19:17:00.0453 7680        wscsvc          (6f5d49efe0e7164e03ae773a3fe25340) C:\Windows\System32\wscsvc.dll

19:17:00.0487 7680        wscsvc - ok

19:17:00.0493 7680        WSearch - ok

19:17:02.0043 7680        wuauserv        (fc3ec24fce372c89423e015a2ac1a31e) C:\Windows\system32\wuaueng.dll

19:17:02.0146 7680        wuauserv - ok

19:17:03.0599 7680        WudfPf          (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys

19:17:03.0632 7680        WudfPf - ok

19:17:03.0883 7680        WUDFRd          (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys

19:17:03.0917 7680        WUDFRd - ok

19:17:04.0102 7680        wudfsvc         (8d1e1e529a2c9e9b6a85b55a345f7629) C:\Windows\System32\WUDFSvc.dll

19:17:04.0137 7680        wudfsvc - ok

19:17:04.0428 7680        WwanSvc         (ff2d745b560f7c71b31f30f4d49f73d2) C:\Windows\System32\wwansvc.dll

19:17:04.0515 7680        WwanSvc - ok

19:17:04.0586 7680        MBR (0x1B8)     (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0

19:17:09.0503 7680        \Device\Harddisk0\DR0 - ok

19:17:09.0582 7680        Boot (0x1200)   (b0db6d43ddd578d9fc39c5adfce039d3) \Device\Harddisk0\DR0\Partition0

19:17:09.0589 7680        \Device\Harddisk0\DR0\Partition0 - ok

19:17:09.0602 7680        Boot (0x1200)   (dde6d37ffcad197e240283a37cca4e88) \Device\Harddisk0\DR0\Partition1

19:17:09.0605 7680        \Device\Harddisk0\DR0\Partition1 - ok

19:17:09.0606 7680        ============================================================

19:17:09.0606 7680        Scan finished

19:17:09.0606 7680        ============================================================

19:17:09.0630 7112        Detected object count: 12

19:17:09.0630 7112        Actual detected object count: 12

19:45:43.0069 7112        ATKGFNEXSrv ( UnsignedFile.Multi.Generic ) - skipped by user

19:45:43.0070 7112        ATKGFNEXSrv ( UnsignedFile.Multi.Generic ) - User select action: Skip 

19:45:43.0073 7112        DvmMDES ( UnsignedFile.Multi.Generic ) - skipped by user

19:45:43.0073 7112        DvmMDES ( UnsignedFile.Multi.Generic ) - User select action: Skip 

19:45:43.0076 7112        hpqcxs08 ( UnsignedFile.Multi.Generic ) - skipped by user

19:45:43.0077 7112        hpqcxs08 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

19:45:43.0081 7112        hpqddsvc ( UnsignedFile.Multi.Generic ) - skipped by user

19:45:43.0081 7112        hpqddsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 

19:45:43.0085 7112        LightScribeService ( UnsignedFile.Multi.Generic ) - skipped by user

19:45:43.0085 7112        LightScribeService ( UnsignedFile.Multi.Generic ) - User select action: Skip 

19:45:43.0088 7112        Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user

19:45:43.0088 7112        Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

19:45:43.0091 7112        PassThru Service ( UnsignedFile.Multi.Generic ) - skipped by user

19:45:43.0092 7112        PassThru Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 

19:45:43.0097 7112        Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user

19:45:43.0097 7112        Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

19:45:43.0100 7112        sfdrv01 ( UnsignedFile.Multi.Generic ) - skipped by user

19:45:43.0100 7112        sfdrv01 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

19:45:43.0104 7112        sfhlp02 ( UnsignedFile.Multi.Generic ) - skipped by user

19:45:43.0104 7112        sfhlp02 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

19:45:43.0108 7112        sfvfs02 ( UnsignedFile.Multi.Generic ) - skipped by user

19:45:43.0108 7112        sfvfs02 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

19:45:43.0113 7112        USBAAPL ( UnsignedFile.Multi.Generic ) - skipped by user

19:45:43.0113 7112        USBAAPL ( UnsignedFile.Multi.Generic ) - User select action: Skip

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

Lade dir ComboFix hier herunter auf deinen Desktop.

Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

GUten Morgen,

nach Ausführung von CF bisher keine gemeldeten Probleme vom Rechner (Registrierungsschlüssel ungültig etc.)

Code:

ComboFix 12-08-09.01 - *** 11.08.2012  16:02:53.1.2 - x86

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3071.2008 [GMT 2:00]

ausgeführt von:: c:\users\***\Desktop\ComboFix.exe

AV: Avira Desktop *Disabled/Outdated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Disabled/Outdated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files\Common Files\ASPG_icon.ico

c:\windows\security\Database\tmp.edb

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-07-11 bis 2012-08-11  ))))))))))))))))))))))))))))))

.

.

2012-08-11 14:12 . 2012-08-11 14:12        --------        d-----w-        c:\users\***\AppData\Local\temp

2012-08-11 14:12 . 2012-08-11 14:12        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp

2012-08-11 13:33 . 2012-06-29 08:44        6891424        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6B273A6-3F84-4AF9-B2E0-A44C521D20E7}\mpengine.dll

2012-08-03 13:17 . 2012-08-03 13:17        --------        d-----w-        C:\dvmexp

2012-08-03 13:04 . 2012-08-03 13:04        --------        d-----w-        C:\_OTL

2012-07-26 12:37 . 2012-07-26 12:37        --------        d-----w-        c:\program files\ESET

2012-07-26 10:10 . 2012-07-26 10:11        40776        ----a-w-        c:\windows\system32\drivers\mbamswissarmy.sys

2012-07-21 12:59 . 2012-07-21 12:59        --------        d-----w-        c:\users\User2\AppData\Local\Macromedia

2012-07-18 23:12 . 2012-07-18 23:12        --------        d-----w-        c:\users\***\AppData\Local\theHunter

2012-07-18 23:04 . 2012-07-18 23:04        --------        d-----w-        c:\users\***\AppData\Roaming\CyberLink

2012-07-18 23:04 . 2012-07-18 23:04        --------        d-----w-        c:\users\Public\CyberLink

2012-07-15 18:12 . 2012-06-06 05:05        352256        ----a-w-        c:\program files\Common Files\System\ado\msadomd.dll

2012-07-15 18:12 . 2012-06-06 05:05        1019904        ----a-w-        c:\program files\Common Files\System\ado\msado15.dll

2012-07-15 18:12 . 2012-06-06 05:03        805376        ----a-w-        c:\windows\system32\cdosys.dll

2012-07-15 18:12 . 2012-06-06 05:05        143360        ----a-w-        c:\program files\Common Files\System\ado\msjro.dll

2012-07-15 18:12 . 2012-06-06 05:05        372736        ----a-w-        c:\program files\Common Files\System\ado\msadox.dll

2012-07-15 18:12 . 2012-06-06 05:05        57344        ----a-w-        c:\program files\Common Files\System\ado\msador15.dll

2012-07-15 18:12 . 2012-06-06 05:05        212992        ----a-w-        c:\program files\Common Files\System\msadc\msadco.dll

2012-07-15 01:04 . 2012-06-12 02:40        2345984        ----a-w-        c:\windows\system32\win32k.sys

2012-07-14 21:48 . 2012-06-06 05:05        1390080        ----a-w-        c:\windows\system32\msxml6.dll

2012-07-14 21:48 . 2012-06-06 05:05        1236992        ----a-w-        c:\windows\system32\msxml3.dll

2012-07-14 21:48 . 2010-06-26 03:24        2048        ----a-w-        c:\windows\system32\msxml3r.dll

2012-07-14 21:46 . 2012-06-02 04:45        134000        ----a-w-        c:\windows\system32\drivers\ksecpkg.sys

2012-07-14 21:46 . 2012-06-02 04:40        369336        ----a-w-        c:\windows\system32\drivers\cng.sys

2012-07-14 21:46 . 2012-06-02 04:39        219136        ----a-w-        c:\windows\system32\ncrypt.dll

2012-07-14 21:46 . 2012-06-02 04:45        67440        ----a-w-        c:\windows\system32\drivers\ksecdd.sys

2012-07-14 21:46 . 2012-06-02 04:40        225280        ----a-w-        c:\windows\system32\schannel.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-08-03 13:17 . 2009-03-23 18:36        45056        ----a-w-        c:\windows\system32\acovcnt.exe

2012-07-08 18:20 . 2012-07-08 18:20        19736        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2012-07-03 11:46 . 2010-11-03 19:24        22344        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-06-25 14:04 . 2012-06-25 14:04        1394248        ----a-w-        c:\windows\system32\msxml4.dll

2012-06-08 16:32 . 2012-06-08 16:32        426184        ----a-w-        c:\windows\system32\FlashPlayerApp.exe

2012-06-08 16:32 . 2011-05-30 16:51        70344        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl

2012-06-02 22:19 . 2012-06-21 16:56        53784        ----a-w-        c:\windows\system32\wuauclt.exe

2012-06-02 22:19 . 2012-06-21 16:56        45080        ----a-w-        c:\windows\system32\wups2.dll

2012-06-02 22:19 . 2012-06-21 16:56        35864        ----a-w-        c:\windows\system32\wups.dll

2012-06-02 22:19 . 2012-06-21 16:56        577048        ----a-w-        c:\windows\system32\wuapi.dll

2012-06-02 22:19 . 2012-06-21 16:56        1933848        ----a-w-        c:\windows\system32\wuaueng.dll

2012-06-02 22:12 . 2012-06-21 16:56        2422272        ----a-w-        c:\windows\system32\wucltux.dll

2012-06-02 22:12 . 2012-06-21 16:56        88576        ----a-w-        c:\windows\system32\wudriver.dll

2012-06-02 13:19 . 2012-06-21 16:55        171904        ----a-w-        c:\windows\system32\wuwebv.dll

2012-06-02 13:12 . 2012-06-21 16:55        33792        ----a-w-        c:\windows\system32\wuapp.exe

2012-05-31 10:25 . 2009-10-04 16:40        237072        ------w-        c:\windows\system32\MpSigStub.exe

2012-05-15 03:03 . 2012-06-14 18:53        981504        ----a-w-        c:\windows\system32\wininet.dll

2008-08-08 22:48 . 2008-08-08 22:48        90112        ----a-w-        c:\program files\Common Files\CPInstallAction.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2010-11-20 144384]

"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-06-09 2363392]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2008-11-25 6691360]

"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2008-11-25 1833504]

"ASUS Camera ScreenSaver"="c:\windows\AsScrProlog.exe" [2009-02-26 47672]

"ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2009-02-26 3054136]

"ATKMEDIA"="c:\program files\ASUS\ATK Media\DMedia.exe" [2008-08-19 159744]

"ATKOSD2"="c:\program files\ASUS\ATKOSD2\ATKOSD2.exe" [2008-09-03 8105984]

"CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe" [2008-07-19 104936]

"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2012-03-08 884584]

"HControlUser"="c:\program files\ASUS\ATK Hotkey\HControlUser.exe" [2008-08-18 98304]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]

"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2012-07-03 973488]

"P2Go_Menu"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-06-14 210216]

"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-10-05 198160]

"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-04-04 843712]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-05-11 348624]

"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]

"PDFPrint"="c:\program files\PDF24\pdf24.exe" [2011-12-16 220744]

"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2011-12-20 634880]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]

.

c:\users\User2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

.

c:\users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dropbox.lnk - c:\users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840]

OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"SoftwareSASGeneration"= 1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"aux2"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages        REG_MULTI_SZ           kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [x]

R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [x]

R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [x]

R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]

S0 lullaby;lullaby;c:\windows\system32\DRIVERS\lullaby.sys [x]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]

S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 AAV UpdateService;AAV UpdateService;c:\program files\AAVUpdateManager\aavus.exe [x]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]

S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [x]

S2 DvmMDES;DeviceVM Meta Data Export Service;c:\asus.sys\DVMExportService.exe [x]

S2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [x]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]

S3 SiSGbeLH;NDIS 6.0-Treiber für SiS191/SiS190-Ethernet-Gerät;c:\windows\system32\DRIVERS\SiSGB6.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - 30786651

*Deregistered* - 30786651

*Deregistered* - acedrv11

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

hpdevmgmt        REG_MULTI_SZ           hpqcxs08 hpqddsvc

HPZ12        REG_MULTI_SZ           Pml Driver HPZ12 Net Driver HPZ12

WindowsMobile        REG_MULTI_SZ           wcescomm rapimgr

LocalServiceRestricted        REG_MULTI_SZ           WcesComm RapiMgr

.

Inhalt des "geplante Tasks" Ordners

.

2012-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000Core.job

- c:\users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-27 19:59]

.

2012-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000UA.job

- c:\users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-27 19:59]

.

2012-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004Core.job

- c:\users\User2\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-21 17:48]

.

2012-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004UA.job

- c:\users\User2\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-21 17:48]

.

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = 

mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.43.1

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

HKCU-Run-OscarEditor - c:\program files\MOUSE Editor\\MouseEditor.exe

AddRemove-Android SDK Tools - c:\users\***\tools\uninstall.exe

AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files\DivX\DivXCodecUninstall.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Apple Computer, Inc.\QuickTime\Favorite Movies]

@DACL=(02 0000)

.

[HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Apple Computer, Inc.\QuickTime\Recent Movies]

@DACL=(02 0000)

"5174526"="1,h:\\2010\\5174526.avi"

"Punisher_2_War_Zone_synchron_BlueRay-Rip_XviD_by_Genius2007_shared_by_Freibeuter_der_Meere"="1,d:\\Filme\\Punisher_2_War_Zone_synchron_BlueRay-Rip_XviD_by_Genius2007_shared_by_Freibeuter_der_Meere.avi"

.

[HKEY_USERS\S-1-5-21-3807720203-1813369325-2731863397-1000_Classes\VirtualStore\MACHINE\SOFTWARE\EasiestUtils.com\YouTube FLV to AVI easy converter]

@DACL=(02 0000)

"APPWelcomeScreenDis"=dword:00000000

"K1"=hex:0b,1d,78,3d,b0,26,c3,41

"K2"=hex:71,3d,0a,57,12,14,59,41

"K3"="YouTube FLV to AVI easy converter 2.2.4"

"Key"=hex:de,45,6d,18,9f,29,b8,ee,52,ee,66,87,32,c9,78,cd,bd,9c,33,f5,55,c4,80,

   c7,97,8e,a8,59,e1,70,de,e8,a6,5f,66,e9,7e,e4,6e,6a,2a,ce,e1,5f,e7,8c,bf,81,\

"Limitations"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2012-08-11  16:15:09

ComboFix-quarantined-files.txt  2012-08-11 14:15

.

Vor Suchlauf: 3.950.723.072 Bytes frei

Nach Suchlauf: 3.808.886.784 Bytes frei

.

- - End Of File - - E7EDBCCC06D1D768EBFD7142176952E1

Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte

aswMBR.exe und speichere die Datei auf deinem Desktop.

Starte die aswMBR.exe - (aswMBR.exe Anleitung)
Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS-Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).

Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

Köln, 39 Grad :)
Hier endlich die logs:

Code:

GMER 1.0.15.15641 - hxxp://www.gmer.net

Rootkit scan 2012-08-19 13:59:43

Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1 ST9320320AS rev.0303

Running: m6jzjhk9.exe; Driver: C:\Users\***\AppData\Local\Temp\kglirpod.sys
 
 

---- System - GMER 1.0.15 ----
 

SSDT            967C0F1E                                                                                                            ZwCreateSection

SSDT            967C0F28                                                                                                            ZwRequestWaitReplyPort

SSDT            967C0F23                                                                                                            ZwSetContextThread

SSDT            967C0F2D                                                                                                            ZwSetSecurityObject

SSDT            967C0F32                                                                                                            ZwSystemDebugControl

SSDT            967C0EBF                                                                                                            ZwTerminateProcess
 

---- Kernel code sections - GMER 1.0.15 ----
 

.text           ntkrnlpa.exe!ZwRollbackEnlistment + 140D                                                                            830923C9 1 Byte  [06]

.text           ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                                              830CBD52 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}

.text           ntkrnlpa.exe!KeRemoveQueueEx + 11F7                                                                                 830D2EAC 4 Bytes  [1E, 0F, 7C, 96]

.text           ntkrnlpa.exe!KeRemoveQueueEx + 1553                                                                                 830D3208 4 Bytes  [28, 0F, 7C, 96] {SUB [EDI], CL; JL 0xffffffffffffff9a}

.text           ntkrnlpa.exe!KeRemoveQueueEx + 1597                                                                                 830D324C 4 Bytes  [23, 0F, 7C, 96] {AND ECX, [EDI]; JL 0xffffffffffffff9a}

.text           ntkrnlpa.exe!KeRemoveQueueEx + 1613                                                                                 830D32C8 4 Bytes  [2D, 0F, 7C, 96]

.text           ntkrnlpa.exe!KeRemoveQueueEx + 1667                                                                                 830D331C 4 Bytes  [32, 0F, 7C, 96] {XOR CL, [EDI]; JL 0xffffffffffffff9a}

.text           ...                                                                                                                 

.text           C:\Windows\system32\DRIVERS\atksgt.sys                                                                              section is writeable [0x9A174300, 0x3B6D8, 0xE8000020]

.text           C:\Windows\system32\DRIVERS\lirsgt.sys                                                                              section is writeable [0x825EA300, 0x1BEE, 0xE8000020]
 

---- User IAT/EAT - GMER 1.0.15 ----
 

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc]                                      [741F24CB] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup]                                 [741D562E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown]                                [741D56EC] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree]                                       [741F2546] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics]                             [741E85AA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage]                               [741E4D5E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth]                              [741E5105] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight]                             [741E51DA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromHBITMAP]                    [741E6707] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC]                              [741E8301] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode]                         [741E8850] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode]                       [741E90B1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI]                             [741EE254] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[384] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage]                                 [741E4C90] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]  [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)

IAT             C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]   [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)

IAT             C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]     [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)

IAT             C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress]    [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)

IAT             C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress]   [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)

IAT             C:\Program Files\AAVUpdateManager\aavus.exe[1964] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress]   [7551FFF6] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
 

---- Devices - GMER 1.0.15 ----
 

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                                             Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1                                                                             Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1                                                                              fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2                                                                              fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3                                                                              fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
 

Device          \Driver\ACPI_HAL \Device\0000004f                                                                                   halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)
 

AttachedDevice  \FileSystem\fastfat \Fat                                                                                            fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation)
 

---- Registry - GMER 1.0.15 ----
 

Reg             HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update@NextSqmReportTime                          2012-08-19 11:24:42
 

---- EOF - GMER 1.0.15 ----

Code:

Report of OSAM: Autorun Manager v5.0.11926.0

hxxp://www.online-solutions.ru/en/

Saved at 14:08:17 on 19.08.2012
 

OS: Windows 7 Home Premium Edition Service Pack 1 (Build 7601), 32-bit

Default Browser: Google Inc. Google Chrome 21.0.1180.60
 

Scanner Settings

[x] Rootkits detection (hidden registry)

[x] Rootkits detection (hidden files)

[x] Retrieve files information

[x] Check Microsoft signatures
 

Filters

[ ] Trusted entries

[ ] Empty entries

[x] Hidden registry entries (rootkit activity)

[x] Exclusively opened files

[x] Not found files

[x] Files without detailed information

[x] Existing files

[ ] Non-startable services

[ ] Non-startable drivers

[x] Active entries

[x] Disabled entries
 
 

[Common]

-----( %SystemRoot%\Tasks )-----

"GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000Core.job" - "Google Inc." - C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe

"GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1000UA.job" - "Google Inc." - C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe

"GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004Core.job" - "Google Inc." - C:\Users\User2\AppData\Local\Google\Update\GoogleUpdate.exe

"GoogleUpdateTaskUserS-1-5-21-3807720203-1813369325-2731863397-1004UA.job" - "Google Inc." - C:\Users\User2\AppData\Local\Google\Update\GoogleUpdate.exe
 

[Control Panel Objects]

-----( %SystemRoot%\system32 )-----

"DivXControlPanelApplet.cpl" - "DivX, Inc." - C:\Windows\system32\DivXControlPanelApplet.cpl

"FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\Windows\system32\FlashPlayerCPLApp.cpl

"nvcpl.cpl" - "NVIDIA Corporation" - C:\Windows\system32\nvcpl.cpl

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----

"mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLCFG32.CPL

"QuickTime" - "Apple Inc." - C:\Program Files\QuickTime\QTSystem\QuickTime.cpl

"wmdConn.cpl" - "Microsoft Corporation" - C:\Windows\WindowsMobile\wmdConn.cpl
 

[Drivers]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"Apple Mobile USB Driver" (USBAAPL) - "Apple, Inc." - C:\Windows\System32\Drivers\usbaapl.sys

"ASMMAP" (ASMMAP) - ? - C:\Program Files\ATKGFNEX\ASMMAP.sys

"atksgt" (atksgt) - ? - C:\Windows\System32\DRIVERS\atksgt.sys  (File found, but it contains no detailed information)

"avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys

"avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys

"avkmgr" (avkmgr) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avkmgr.sys

"catchme" (catchme) - ? - C:\Users\***\AppData\Local\Temp\catchme.sys  (File not found)

"FssFltr" (fssfltr) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\fssfltr.sys

"kglirpod" (kglirpod) - ? - C:\Users\***\AppData\Local\Temp\kglirpod.sys  (Hidden registry entry, rootkit activity | File not found)

"lirsgt" (lirsgt) - ? - C:\Windows\System32\DRIVERS\lirsgt.sys  (File found, but it contains no detailed information)

"Logitech SetPoint KMDF HID Filter Driver" (LHidFilt) - "Logitech, Inc." - C:\Windows\System32\DRIVERS\LHidFilt.Sys

"Logitech SetPoint KMDF Mouse Filter Driver" (LMouFilt) - "Logitech, Inc." - C:\Windows\System32\DRIVERS\LMouFilt.Sys

"lullaby" (lullaby) - "Windows (R) Codename Longhorn DDK provider" - C:\Windows\System32\DRIVERS\lullaby.sys

"MBAMSwissArmy" (MBAMSwissArmy) - "Malwarebytes Corporation" - C:\Windows\system32\drivers\mbamswissarmy.sys

"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys

"StarForce Protection Environment Driver (version 1.x)" (sfdrv01) - "Protection Technology" - C:\Windows\System32\drivers\sfdrv01.sys

"StarForce Protection Helper Driver (version 2.x)" (sfhlp02) - "Protection Technology" - C:\Windows\System32\drivers\sfhlp02.sys

"StarForce Protection VFS Driver (version 2.x)" (sfvfs02) - "Protection Technology" - C:\Windows\System32\drivers\sfvfs02.sys
 

[Explorer]

-----( HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----

{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -   (File not found | COM-object registry key not found)

{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -   (File not found | COM-object registry key not found)

{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -   (File not found | COM-object registry key not found)

{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -   (File not found | COM-object registry key not found)

-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----

{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll

{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

-----( HKLM\Software\Classes\Protocols\Filter )-----

{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

-----( HKLM\Software\Classes\Protocols\Handler )-----

{E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} "Album Download IE Asynchronous Pluggable Protocol Interface" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

{828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\Program Files\Windows Live\Messenger\msgrapp.dll

{88FED34C-F0CA-4636-A375-3CB6248B04CD} "Local Groove Web Services Protocol" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

{828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Messenger\msgrapp.dll

{91774881-D725-4E58-B298-07617B9B86A8} "Skype IE add-on Pluggable Protocol" - "Skype Technologies S.A." - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

{03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Program Files\Windows Live\Mail\mailcomm.dll

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )-----

{B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----

{911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? -   (File not found | COM-object registry key not found)

{1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)

{34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)

{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? -   (File not found | COM-object registry key not found)

{A70C977A-BF00-412C-90B7-034C51DA2439} "DesktopContext Class" - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\Display\nvui.dll

{D8D1CE8C-B1EB-4E95-B63B-1531BA60E992} "DivX Property Handler" - "DivX, Inc." - C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXPropertyHandler.dll

{83238FAE-D346-4E12-8734-D42F7554B3E6} "DivX Thumbnail Provider" - "DivX, Inc." - C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXThumbnailProvider.dll

{2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? -   (File not found | COM-object registry key not found)

{99FD978C-D287-4F50-827F-B2C658EDA8E7} "Groove Explorer Icon Overlay 1 (GFS Unread Stub)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} "Groove Explorer Icon Overlay 2 (GFS Stub)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

{920E6DB1-9907-4370-B3A0-BAFC03D81399} "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

{16F3DD56-1AF5-4347-846D-7C10C4192619} "Groove Explorer Icon Overlay 3 (GFS Folder)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

{2916C86E-86A6-43FE-8112-43ABE6BF8DCC} "Groove Explorer Icon Overlay 4 (GFS Unread Mark)" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

{2A541AE1-5BF6-4665-A8A3-CFA9672E4291} "Groove Folder Synchronization" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

{72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

{6C467336-8281-4E60-8204-430CED96822D} "Groove GFS Context Menu Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

{B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

{A449600E-1DC6-4232-B948-9BD794D62056} "Groove GFS Stub Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

{387E725D-DC16-4D76-B310-2C93ED4752A0} "Groove XML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll

{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll

{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONFILTER.DLL

{00020d75-0000-0000-c000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLSHEXT.DLL

{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll

{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} "NVIDIA CPL Context Menu Extension" - "NVIDIA Corporation" - C:\Windows\system32\nvshext.dll

{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

{0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\OLKFSTUB.DLL

{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class" - "RealNetworks, Inc." - C:\Program Files\Real\RealPlayer\rpshell.dll

{C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)

{E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)

{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll

{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe

{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe

{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll

{00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll

{00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll

{00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe

{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll

{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -   (File not found | COM-object registry key not found)

{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - ? - C:\Program Files\WinRAR\rarext.dll

{0563DB41-F538-4B37-A92D-4659049B7766} "WLMD Message Handler" - ? -   (File not found | COM-object registry key not found)

{06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe

Logitech Setpoint Extension "{B9B9F083-2B04-452A-8691-83694AC1037B}" - ? -   (File not found | COM-object registry key not found)
 

[Internet Explorer]

-----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars )-----

{555D4D79-4BD2-4094-A395-CFC534424A05} "HP Smart Web Printing" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll

-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----

ITBar7Height "ITBar7Height" - ? -   (File not found | COM-object registry key not found)

<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)

-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----

{0D41B8C5-2599-4893-8183-00195EC8D5F9} "asusTek_sysctrl Class" - ? - C:\Windows\DOWNLO~1\ASUSTE~1.DLL / hxxp://support.asus.de/common/asusTek_sys_ctrl.cab

{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} "Java Plug-in 1.6.0_31" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 10.5.1" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 10.5.1" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

{D27CDB6E-AE6D-11CF-96B8-444553540000} "Shockwave Flash Object" - "Adobe Systems, Inc." - C:\Windows\system32\Macromed\Flash\Flash10c.ocx / hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

{E6F480FC-BD44-4CBA-B74A-89AF7842937D} "{E6F480FC-BD44-4CBA-B74A-89AF7842937D}" - ? -   (File not found | COM-object registry key not found) / hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab

-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----

{5F7B1267-94A9-47F5-98DB-E99415F33AEC} "@C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004" - "Microsoft Corporation" - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} "@C:\Windows\WindowsMobile\INetRepl.dll,-222" - "Microsoft Corporation" - C:\Windows\WindowsMobile\INetRepl.dll

{48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} "ClsidExtension" - "Microsoft Corporation" - C:\Windows\WindowsMobile\INetRepl.dll

{DDE87865-83C5-48c4-8357-2F5B1AA84522} "HP Smart Web Printing ein- oder ausblenden" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

{898EA8C8-E7FF-479B-8935-AEC46303B9E5} "Skype Click to Call" - "Skype Technologies S.A." - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----

{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

{326E768D-4182-46FD-9C16-1449A49795F4} "DivX Plus Web Player HTML5 <video>" - "DivX, LLC" - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

{72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

{0347C33E-8762-4905-BF09-768834316C61} "HP Print Enhancer" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} "HP Smart BHO Class" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} "Java(tm) Plug-In SSV Helper" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll

{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} "Skype Browser Helper" - "Skype Technologies S.A." - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live ID Sign-in Helper" - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
 

[LSA Providers]

-----( HKLM\SYSTEM\CurrentControlSet\Control\Lsa )-----

"Security Packages" - "Microsoft Corp." - C:\Windows\system32\livessp.dll
 

[Logon]

-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"desktop.ini" - ? - C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

"Dropbox.lnk" - "Dropbox, Inc." - C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe  (Shortcut exists | File exists)

"OpenOffice.org 3.0.lnk" - ? - C:\Program Files\OpenOffice.org 3\program\quickstart.exe  (Shortcut exists | File found, but it contains no detailed information | File exists)

-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

"HP Digital Imaging Monitor.lnk" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe  (Shortcut exists | File exists)

-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----

"LightScribe Control Panel" - "Hewlett-Packard Company" - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----

"StartupPrograms" - ? - rdpclip  (File not found)

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----

"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"ASUS Camera ScreenSaver" - ? - C:\Windows\AsScrProlog.exe  (File found, but it contains no detailed information)

"ASUS Screen Saver Protector" - "ASUS" - C:\Windows\AsScrPro.exe

"ATKMEDIA" - "ASUS" - C:\Program Files\ASUS\ATK Media\DMedia.exe

"ATKOSD2" - "ASUS" - C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe

"avgnt" - "Avira Operations GmbH & Co. KG" - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

"CLMLServer" - "CyberLink" - "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"

"DivXUpdate" - ? - "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

"fssui" - "Microsoft Corporation" - "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun

"GrooveMonitor" - "Microsoft Corporation" - "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

"HControlUser" - "ASUS" - C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe

"HP Software Update" - "Hewlett-Packard" - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

"HTC Sync Loader" - ? - "C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup

"Malwarebytes Anti-Malware (reboot)" - "Malwarebytes Corporation" - "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

"P2Go_Menu" - "CyberLink Corp." - "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"

"PDFPrint" - "Geek Software GmbH" - C:\Program Files\PDF24\pdf24.exe

"QuickTime Task" - "Apple Inc." - "C:\Program Files\QuickTime\QTTask.exe" -atboottime

"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

"TkBellExe" - "RealNetworks, Inc." - "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot

"Windows Mobile Device Center" - "Microsoft Corporation" - %windir%\WindowsMobile\wmdc.exe
 

[Print Monitors]

-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----

"Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\Windows\system32\msonpmon.dll
 

[Services]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"@%windir%\WindowsMobile\rapimgr.dll,-104" (RapiMgr) - "Microsoft Corporation" - C:\Windows\WindowsMobile\rapimgr.dll

"@%windir%\WindowsMobile\wcescomm.dll,-40079" (WcesComm) - "Microsoft Corporation" - C:\Windows\WindowsMobile\wcescomm.dll

"AAV UpdateService" (AAV UpdateService) - ? - C:\Program Files\AAVUpdateManager\aavus.exe

"Adobe Acrobat Update Service" (AdobeARMservice) - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

"ASLDR Service" (ASLDRService) - ? - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe

"ATKGFNEX Service" (ATKGFNEXSrv) - ? - C:\Program Files\ATKGFNEX\GFNEXSrv.exe

"Avira Echtzeit Scanner" (AntiVirService) - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

"Avira Planer" (AntiVirSchedulerService) - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\sched.exe

"DeviceVM Meta Data Export Service" (DvmMDES) - "DeviceVM" - C:\ASUS.SYS\DVMExportService.exe

"HP CUE DeviceDiscovery Service" (hpqddsvc) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

"hpqcxs08" (hpqcxs08) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

"Internet Pass-Through Service" (PassThru Service) - ? - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

"LightScribeService Direct Disc Labeling Service" (LightScribeService) - "Hewlett-Packard Company" - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

"Microsoft Office Groove Audit Service" (Microsoft Office Groove Audit Service) - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe

"Net Driver HPZ12" (Net Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZinw12.dll

"NVIDIA Display Driver Service" (nvsvc) - "NVIDIA Corporation" - C:\Windows\system32\nvvsvc.exe

"NVIDIA Stereoscopic 3D Driver Service" (Stereo Service) - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

"NVIDIA Update Service Daemon" (nvUpdatusService) - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

"Pml Driver HPZ12" (Pml Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZipm12.dll

"Windows Live Family Safety Service" (fsssvc) - "Microsoft Corporation" - C:\Program Files\Windows Live\Family Safety\fsssvc.exe

"Windows Live ID Sign-in Assistant" (wlidsvc) - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
 

[Winsock Providers]

-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----

"WindowsLive Local NSP" - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

"WindowsLive NSP" - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
 

===[ Logfile end ]=========================================[ Logfile end ]===
 

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru

Code:

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software

Run date: 2012-08-19 14:10:25

-----------------------------

14:10:25.809    OS Version: Windows 6.1.7601 Service Pack 1

14:10:25.809    Number of processors: 2 586 0xF0D

14:10:25.811    ComputerName: ***-PC  UserName: ***

14:10:27.453    Initialize success

14:16:31.715    AVAST engine defs: 12081900

14:16:45.816    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1

14:16:45.816    Disk 0 Vendor: ST9320320AS 0303 Size: 305245MB BusType: 3

14:16:46.440    Disk 0 MBR read successfully

14:16:46.440    Disk 0 MBR scan

14:16:46.455    Disk 0 Windows 7 default MBR code

14:16:46.502    Disk 0 Partition 1 00     1C Hidd FAT32 LBA MSDOS5.0    12001 MB offset 63

14:16:46.611    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS       152617 MB offset 24579450

14:16:46.611    Disk 0 Partition - 00     0F Extended LBA            140623 MB offset 337140090

14:16:46.830    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS       140623 MB offset 337140153

14:16:47.423    Disk 0 scanning sectors +625137345

14:16:48.187    Disk 0 scanning C:\Windows\system32\drivers

14:18:36.826    Service scanning

14:19:17.698    Modules scanning

14:21:51.373    Disk 0 trace - called modules:

14:21:51.436    ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys 

14:21:51.436    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8676f278]

14:21:51.451    3 CLASSPNP.SYS[8b9b959e] -> nt!IofCallDriver -> [0x8667f918]

14:21:51.451    5 ACPI.sys[8b4c53d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-1[0x8667a030]

14:21:52.419    AVAST engine scan C:\Windows

14:24:12.788    AVAST engine scan C:\Windows\system32

14:48:04.121    AVAST engine scan C:\Windows\system32\drivers

14:53:15.904    AVAST engine scan C:\Users\***

16:30:15.993    AVAST engine scan C:\ProgramData

16:37:33.418    Scan finished successfully

18:50:03.785    Disk 0 MBR has been saved successfully to "C:\Users\***\Desktop\neue scans\MBR.dat"

18:50:03.800    The log file has been saved successfully to "C:\Users\***\Desktop\neue scans\aswMBR.txt"

Vielen lieben Dank!

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Hallo :) Hoffe dein Urlaub war ok? Ich war auch ein paar Tage nicht im Lande. Hier die Logs:

Code:

Malwarebytes Anti-Malware 1.62.0.1300

www.malwarebytes.org
 

Datenbank Version: v2012.09.02.02
 

Windows 7 Service Pack 1 x86 NTFS

Internet Explorer 8.0.7601.17514

*** :: ***-PC [Administrator]
 

02.09.2012 12:03:03

mbam-log-2012-09-02 (12-03-03).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 520238

Laufzeit: 3 Stunde(n), 18 Minute(n), 51 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

Sowie:

Code:

SUPERAntiSpyware Scan Log

hxxp://www.superantispyware.com
 

Generated 09/07/2012 at 06:23 PM
 

Application Version : 5.5.1012
 

Core Rules Database Version : 9168

Trace Rules Database Version: 6980
 

Scan type       : Complete Scan

Total Scan Time : 04:35:08
 

Operating System Information

Windows 7 Home Premium 32-bit, Service Pack 1 (Build 6.01.7601)

UAC On - Administrator
 

Memory items scanned      : 948

Memory threats detected   : 0

Registry items scanned    : 36720

Registry threats detected : 0

File items scanned        : 219189

File threats detected     : 839
 

Adware.Tracking Cookie

        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\2J9QDHCJ.txt [ /ad3.adfarm1.adition.com ]

        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\PLZDXMDB.txt [ /ad2.adfarm1.adition.com ]

        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\P2CMPVEK.txt [ /adfarm1.adition.com ]

        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\4PKFLJTW.txt [ /c.atdmt.com ]

        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\PFFELTMY.txt [ /microsoftwllivemkt.112.2o7.net ]

        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\F6MB3HRC.txt [ /atdmt.com ]

        C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\UHJRA66L.txt [ /doubleclick.net ]

        C:\USERS\***\Cookies\PLZDXMDB.txt [ Cookie:***@ad2.adfarm1.adition.com/ ]

        C:\USERS\***\Cookies\P2CMPVEK.txt [ Cookie:***@adfarm1.adition.com/ ]

        C:\USERS\***\Cookies\4PKFLJTW.txt [ Cookie:***@c.atdmt.com/ ]

        C:\USERS\***\Cookies\F6MB3HRC.txt [ Cookie:***@atdmt.com/ ]

        C:\USERS\***\Cookies\UHJRA66L.txt [ Cookie:***@doubleclick.net/ ]

        .doubleclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .histats.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adserver.adtechus.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ads.rokatraffic.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        de.sitestat.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .mediaplex.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .trafficmp.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .sevenoneintermedia.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .imrworldwide.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .imrworldwide.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .specificclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .xiti.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .a.revenuemax.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ibanner.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ero-advertising.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .gostats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        adserv3.deutschland-spion.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        tracking.gameforge.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .easy-adserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .apmebf.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adxpose.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        adserv.kwick.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        adserv.kwick.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ehg-twi.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .kontera.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .legolas-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        media.fragster.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adserve.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .server.cpmstar.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        wstat.wibiya.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .unitymedia.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        de.sitestat.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .im.banner.t-online.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .gwarez.cc [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .gwarez.cc [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.multimediaxis.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.multimediaxis.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .multimediaxis.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .multimediaxis.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adlegend.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adlegend.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        xxx-blog.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        adserver.w3anythink.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .weborama.fr [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .leylines.solution.weborama.fr [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .mm.chitika.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .mediafire.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .apmebf.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .oms.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .olympiaverlag.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .h.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .h.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .h.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .h.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .microsoftsto.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .c.gigcount.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        adserver.heavenmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adinterax.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adinterax.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .questionmarket.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .guj.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        s2.netxmedia.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ad.adnet.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ad.adnet.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        eas.apm.emediate.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        eas.apm.emediate.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ru4.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .histats.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .histats.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .bs.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        adserver2.clipkit.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        accounts.google.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        de.sitestat.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        banner.testberichte.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ad.adnet.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .thewarezscene.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .thewarezscene.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        pornrush.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        pornrush.org [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        statse.webtrendslive.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ads.quartermedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .media-dealer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .media-dealer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .azjmp.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .trafficmp.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .trafficmp.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        adserver.seedpeer.me [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .aim4media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .horyzon-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .horyzon-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .horyzon-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .horyzon-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .foxfilmedentertainment.122.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .easy-adserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .easy-adserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .wegotmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .wegotmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ox-d.yadomedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .amazon-adsystem.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        dc.tremormedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.active-tracking.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.active-tracking.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.active-tracking.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tribalfusion.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .eyewonder.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .eyewonder.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ads.adxvalue.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .amazon-adsystem.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .msnportal.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        eas4.emediate.eu [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .bs.serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tracking.mindshare.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .lucidmedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .mmotraffic.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .mmotraffic.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .mediafire.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .mediafire.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .legolas-media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .komtrack.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .komtrack.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        track.adform.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .statcounter.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .statcounter.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ceramex-media.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ceramex-media.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .comstats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .comstats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.comstats.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .aim4media.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ru4.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .yieldmanager.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .pro-market.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.adserver01.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        accounts.google.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        accounts.google.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .de.partypoker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        rts.pgmediaserve.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        rts.pgmediaserve.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        rts.pgmediaserve.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        counter.f-thies.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .yadro.ru [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.etracker.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .paypal.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .trackcorner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .trackcorner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .mediaplex.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .clickfuse.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .fastclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .doubleclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .mediaplex.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        tracking.sim-technik.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad3.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        adserver.11freunde.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .hightraffic.hugoboss.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .hightraffic.hugoboss.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .hightraffic.hugoboss.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .keygens.nl [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.crack.ms [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        stats.zebralog.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ehg-foxmovies.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .ehg-foxmovies.hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .hitbox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.adition.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.adition.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .questionmarket.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad4.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        studivz.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        studivz.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .c.atdmt.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        track.adform.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adform.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .mentorcorporation.112.2o7.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ww251.smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .zanox-affiliate.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .dyntracker.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .counter.sexsuche.tv [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        counter2.sexmoney.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.tldadserv.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        media.campartner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        media.campartner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        media.campartner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        media.campartner.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        click.iwantuonline.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        click.iwantuonline.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        click.iwantuonline.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        banner.publisher.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webstats4u.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        toplisted.us [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        warez-load.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        tracking.alternads.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tracking.alternads.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tracking.alternads.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tracking.alternads.info [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.netxmedia.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        s1.netxmedia.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad1.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        track.effiliation.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad2.adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        adfarm1.adition.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .doubleclick.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .traffictrack.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        fl01.ct2.comclick.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .cyonix.to [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        view.advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        view.advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .advert-layer.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        media.quakelive.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .www.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        web.unitymedia.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .adviva.net [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .serving-sys.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .im.banner.t-online.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.zanox-affiliate.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.zanox-affiliate.de [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .zanox.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .apmebf.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .content.yieldmanager.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VVI9OGVM.DEFAULT\COOKIES.SQLITE ]

        .statcounter.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        rts.pgmediaserve.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        rts.pgmediaserve.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        rts.pgmediaserve.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        .content.yieldmanager.com [ C:\USERS\GAST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4AZXJC3J.DEFAULT\COOKIES.SQLITE ]

        C:\USERS\User2\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\User2@CONTENT.YIELDMANAGER[1].TXT [ /CONTENT.YIELDMANAGER ]

        .xiti.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .im.banner.t-online.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .atdmt.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .imrworldwide.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .imrworldwide.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .premiumtv.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .moviepilot.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        fl01.ct2.comclick.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        fl01.ct2.comclick.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        fl01.ct2.comclick.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adviva.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .mediaplex.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .specificclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .specificclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .specificclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .specificclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adxpose.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .ad.adnet.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .wissende.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        adserver2.clipkit.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .doubleclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .a.revenuemax.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.adition.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.adition.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .liveperson.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .rainbowmedia.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .apmebf.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .fastclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .ru4.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        g.blogads.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        f.blogads.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        f.blogads.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        f.blogads.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .fastclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .viacom.adbureau.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .ad.adnet.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        adservercentral.info [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.zanox.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .server.cpmstar.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .webstats4u.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .easy-adserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .easy-adserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .traveladvertising.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .amazonservices.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .ero-advertising.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .webstats4u.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .xm.xtendmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .advert-layer.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .advert-layer.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .amazonwebstore.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .mtvn.112.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .clicksor.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .clicksor.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .clicksor.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .clicksor.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .harrenmedianetwork.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .ad-emea.doubleclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .azjmp.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .trafficmp.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        eas.apm.emediate.eu [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .googleads.g.doubleclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .insightexpressai.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.adserver01.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .guj.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad1.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .questionmarket.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .questionmarket.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .mediatraffic.com.ua [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .horyzon-media.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .horyzon-media.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .horyzon-media.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .horyzon-media.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        de.sitestat.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .amazon-adsystem.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .amazon-adsystem.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .pro-market.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ads.247activemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        adsrv1.admediate.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .viewablemedia.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .atdmt.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .bs.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        media.quakelive.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .apmebf.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .apmebf.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .viacom.adbureau.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .mediaplex.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .trafficmp.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .trafficmp.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        de.sitestat.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .nextag.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .nextag.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .casalemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .casalemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .casalemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .casalemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .yieldmanager.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .eyewonder.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .eyewonder.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .histats.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .histats.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        statse.webtrendslive.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .care2.112.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        www.etracker.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        www.mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .mediaed.org [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        wmedia.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        gotacha.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        gotacha.rotator.hadj7.adjuggler.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        track.adform.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .collective-media.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        tracking.mlsat02.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        track.effiliation.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .dyntracker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ww251.smartadserver.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .bs.serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .im.banner.t-online.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adviva.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        eas.apm.emediate.eu [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adxvalue.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        adx.chip.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        www.netdebit-counter.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .gostats.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .gostats.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .ru4.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .ar.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tacoda.at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .at.atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .atwola.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .advertising.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .advertising.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .zanox-affiliate.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .traffictrack.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        track.adform.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adform.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .im.banner.t-online.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad4.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .paypal.112.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .stats.paypal.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        www.googleadservices.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .deutschepostag.112.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.youtube.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .doubleclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .c.gigcount.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .statcounter.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        blogcounter.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        www.blogcounter.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        www.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        tracking.dc-storm.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        web.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .unitymedia.122.2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .revsci.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tracking.quisma.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .invitemedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .serving-sys.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adtech.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad3.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .mediaplex.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .fastclick.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        accounts.google.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .www.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        www.unitymedia.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        tracking.dc-storm.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .2o7.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        adserver.seedpeer.me [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        7.rotator.wigetmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        7.rotator.wigetmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        7.rotator.wigetmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .wegotmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .wegotmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .wegotmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .toplist.cz [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .toplist.eu [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .content.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .mediaplex.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        www.etracker.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .blogads.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .blogads.de [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        onlineadtracker.co.uk [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .webmasterplan.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.zanox.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .zanox.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad2.adfarm1.adition.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .tradedoubler.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        counters.gigya.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .media6degrees.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .lucidmedia.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .adbrite.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .zedo.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        ad.yieldmanager.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        www.youporn.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        www.youporn.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        rts.pgmediaserve.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        rts.pgmediaserve.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        rts.pgmediaserve.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .de.partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .partypoker.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .sexad.net [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]

        .exoclick.com [ C:\USERS\User2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\W3H8BGGN.DEFAULT\COOKIES.SQLITE ]
 

Trojan.Agent/Gen-FakeAV

        C:\PROGRAM FILES\WINRAR\DEFAULT.SFX

Danke =)

Sieht ok aus, da wurden nur Cookies gefunden, der angebliche Fund bei WinRAR ist ein Fehalarm.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

HAllo,

Es scheint tatsächlich alles in Ordnung zu sein. Keine Probleme nach mehrtägiger Nutzung festgestellt.

Danke!

Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. Mit Hilfe von OTL kannst du auch viele Tools entfernen:

Starte bitte OTL und klicke auf Bereinigung.
Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen.

Malwarebytes zu behalten ist zu empfehlen. Kannst ja 1x im Monat damit einen Vollscan machen, aber immer vorher ans Update denken.

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.

Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update

PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks => Adobe Flash Player Distribution | Adobe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.

Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.