Trojaner-Board
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Live Security Platinum eingefangen - wie werde ich den wieder los? (https://www.trojaner-board.de/120512-live-security-platinum-eingefangen-los.html)

cosinus 13.08.2012 19:39
Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:
:OTL
FF - user.js - File not found
O4 - HKLM..\Run: []  File not found
O4 - HKU\S-1-5-21-3240833004-1946179193-2110766005-1000..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O32 - HKLM CDRom: AutoRun - 1
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:F8D65F32
:Files
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0
C:\ProgramData\0C1CFB13028283C12EAD2100F875F002
C:\ProgramData\adobetmp00011437
K:\Sicherung für Neustart\Service\Audiograbber\agsetup183se.exe
:Commands
[purity]
[emptytemp]
[emptyflash]
[resethosts]
Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

gruffelo 14.08.2012 06:35
Nach dem Fixen sollte ich den Rechner gleich neu starten. Es erschien kein Log-File.
Erst nach dem Neustart war ein Fenster mit dem Namen 08142012_072052 offen. Nehme an, dass hast Du mit Log-File gemeint.

Code:
All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3240833004-1946179193-2110766005-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
ADS C:\ProgramData\TEMP:F8D65F32 deleted successfully.
========== FILES ==========
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\tmp folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0 folder moved successfully.
C:\Users\Birgit\AppData\LocalLow\Sun\Java\Deployment\cache\6.0 folder moved successfully.
C:\ProgramData\0C1CFB13028283C12EAD2100F875F002 folder moved successfully.
C:\ProgramData\adobetmp00011437 moved successfully.
K:\Sicherung für Neustart\Service\Audiograbber\agsetup183se.exe moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Birgit
->Temp folder emptied: 21928057430 bytes
->Temporary Internet Files folder emptied: 728145778 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 342419790 bytes
->Flash cache emptied: 49238 bytes
 
User: Birgit neu
->Temp folder emptied: 426574 bytes
->Temporary Internet Files folder emptied: 135947143 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 232690685 bytes
->Flash cache emptied: 1785 bytes
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 36067650 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Public
 
User: Wunstorf
->Temp folder emptied: 80572614 bytes
->Temporary Internet Files folder emptied: 41817750 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 541922432 bytes
->Flash cache emptied: 9636 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 265785054 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50434 bytes
RecycleBin emptied: 7743422007 bytes
 
Total Files Cleaned = 30.591,00 mb
 
 
[EMPTYFLASH]
 
User: All Users
 
User: Birgit
->Flash cache emptied: 0 bytes
 
User: Birgit neu
->Flash cache emptied: 0 bytes
 
User: Default
 
User: Default User
 
User: Public
 
User: Wunstorf
->Flash cache emptied: 0 bytes
 
Total Flash Files Cleaned = 0,00 mb
 
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.57.0 log created on 08142012_072052

Files\Folders moved on Reboot...
C:\Users\Wunstorf\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...
File C:\Users\Wunstorf\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!

Registry entries deleted on Reboot...

cosinus 14.08.2012 15:42
Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C:) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg

gruffelo 14.08.2012 19:39
Code:
20:34:34.0035 4480  TDSS rootkit removing tool 2.8.6.0 Aug 13 2012 17:24:05
20:34:34.0129 4480  ============================================================
20:34:34.0129 4480  Current date / time: 2012/08/14 20:34:34.0129
20:34:34.0129 4480  SystemInfo:
20:34:34.0129 4480 
20:34:34.0129 4480  OS Version: 6.1.7601 ServicePack: 1.0
20:34:34.0129 4480  Product type: Workstation
20:34:34.0129 4480  ComputerName: WUNSTORF-PC
20:34:34.0129 4480  UserName: Wunstorf
20:34:34.0129 4480  Windows directory: C:\Windows
20:34:34.0129 4480  System windows directory: C:\Windows
20:34:34.0129 4480  Running under WOW64
20:34:34.0129 4480  Processor architecture: Intel x64
20:34:34.0129 4480  Number of processors: 2
20:34:34.0129 4480  Page size: 0x1000
20:34:34.0129 4480  Boot type: Normal boot
20:34:34.0129 4480  ============================================================
20:34:35.0533 4480  Drive \Device\Harddisk3\DR3 - Size: 0x7470000000 (465.75 Gb), SectorSize: 0x200, Cylinders: 0xED7F, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000048
20:34:35.0548 4480  Drive \Device\Harddisk2\DR2 - Size: 0x7470B06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000048
20:34:35.0564 4480  Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:34:35.0985 4480  Drive \Device\Harddisk1\DR1 - Size: 0x1D1C100DE00 (1863.02 Gb), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:34:36.0001 4480  ============================================================
20:34:36.0001 4480  \Device\Harddisk3\DR3:
20:34:36.0001 4480  MBR partitions:
20:34:36.0001 4480  \Device\Harddisk3\DR3\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A37EFBF
20:34:36.0001 4480  \Device\Harddisk2\DR2:
20:34:36.0001 4480  MBR partitions:
20:34:36.0001 4480  \Device\Harddisk0\DR0:
20:34:36.0001 4480  MBR partitions:
20:34:36.0001 4480  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x987111F
20:34:36.0032 4480  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x987119D, BlocksNum 0x139533E4
20:34:36.0032 4480  \Device\Harddisk1\DR1:
20:34:36.0032 4480  MBR partitions:
20:34:36.0032 4480  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xE8E07482
20:34:36.0032 4480  ============================================================
20:34:36.0063 4480  C: <-> \Device\Harddisk0\DR0\Partition1
20:34:36.0079 4480  D: <-> \Device\Harddisk0\DR0\Partition2
20:34:36.0157 4480  E: <-> \Device\Harddisk3\DR3\Partition1
20:34:36.0172 4480  K: <-> \Device\Harddisk1\DR1\Partition1
20:34:36.0172 4480  ============================================================
20:34:36.0172 4480  Initialize success
20:34:36.0172 4480  ============================================================
20:35:17.0310 4840  ============================================================
20:35:17.0310 4840  Scan started
20:35:17.0310 4840  Mode: Manual; SigCheck; TDLFS;
20:35:17.0310 4840  ============================================================
20:35:18.0823 4840  ================ Scan services =============================
20:35:18.0916 4840  [ a87d604aea360176311474c87a63bb88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
20:35:19.0384 4840  1394ohci - ok
20:35:19.0416 4840  [ d81d9e70b8a6dd14d42d7b4efa65d5f2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
20:35:19.0431 4840  ACPI - ok
20:35:19.0447 4840  [ 99f8e788246d495ce3794d7e7821d2ca ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
20:35:19.0540 4840  AcpiPmi - ok
20:35:19.0572 4840  [ d44bcaf639e4e45307c2bc80715273d5 ] adfs            C:\Windows\system32\drivers\adfs.sys
20:35:19.0634 4840  adfs - ok
20:35:19.0696 4840  [ f84c9dee4698df3c1d76801b7b1b55d7 ] Adobe LM Service C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
20:35:19.0728 4840  Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning
20:35:19.0728 4840  Adobe LM Service - detected UnsignedFile.Multi.Generic (1)
20:35:19.0790 4840  [ 2f6b34b83843f0c5118b63ac634f5bf4 ] adp94xx        C:\Windows\system32\drivers\adp94xx.sys
20:35:19.0806 4840  adp94xx - ok
20:35:19.0806 4840  [ 597f78224ee9224ea1a13d6350ced962 ] adpahci        C:\Windows\system32\drivers\adpahci.sys
20:35:19.0821 4840  adpahci - ok
20:35:19.0837 4840  [ e109549c90f62fb570b9540c4b148e54 ] adpu320        C:\Windows\system32\drivers\adpu320.sys
20:35:19.0852 4840  adpu320 - ok
20:35:19.0868 4840  [ 4b78b431f225fd8624c5655cb1de7b61 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
20:35:20.0008 4840  AeLookupSvc - ok
20:35:20.0055 4840  [ 1c7857b62de5994a75b054a9fd4c3825 ] AFD            C:\Windows\system32\drivers\afd.sys
20:35:20.0164 4840  AFD - ok
20:35:20.0196 4840  [ 608c14dba7299d8cb6ed035a68a15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
20:35:20.0196 4840  agp440 - ok
20:35:20.0211 4840  [ 3290d6946b5e30e70414990574883ddb ] ALG            C:\Windows\System32\alg.exe
20:35:20.0258 4840  ALG - ok
20:35:20.0274 4840  [ 5812713a477a3ad7363c7438ca2ee038 ] aliide          C:\Windows\system32\drivers\aliide.sys
20:35:20.0289 4840  aliide - ok
20:35:20.0320 4840  [ dceee24e57e8176115207312f827c130 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
20:35:20.0414 4840  AMD External Events Utility - ok
20:35:20.0430 4840  [ 1ff8b4431c353ce385c875f194924c0c ] amdide          C:\Windows\system32\drivers\amdide.sys
20:35:20.0445 4840  amdide - ok
20:35:20.0461 4840  [ 7024f087cff1833a806193ef9d22cda9 ] AmdK8          C:\Windows\system32\drivers\amdk8.sys
20:35:20.0508 4840  AmdK8 - ok
20:35:20.0679 4840  [ f6640d83af0fd74c50e23e68548ea9a0 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
20:35:20.0882 4840  amdkmdag - ok
20:35:20.0913 4840  [ 20b63276a1920b41e1c56720b395049b ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
20:35:20.0929 4840  amdkmdap - ok
20:35:20.0944 4840  [ 1e56388b3fe0d031c44144eb8c4d6217 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
20:35:20.0976 4840  AmdPPM - ok
20:35:21.0022 4840  [ d4121ae6d0c0e7e13aa221aa57ef2d49 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
20:35:21.0022 4840  amdsata - ok
20:35:21.0038 4840  [ f67f933e79241ed32ff46a4f29b5120b ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
20:35:21.0054 4840  amdsbs - ok
20:35:21.0054 4840  [ 540daf1cea6094886d72126fd7c33048 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
20:35:21.0069 4840  amdxata - ok
20:35:21.0163 4840  [ 466a0d95960dad3222c896d2cea99993 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
20:35:21.0178 4840  AntiVirSchedulerService - ok
20:35:21.0210 4840  [ a489be6bb0aa1ff406b488b60542314b ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
20:35:21.0225 4840  AntiVirService - ok
20:35:21.0256 4840  [ 89a69c3f2f319b43379399547526d952 ] AppID          C:\Windows\system32\drivers\appid.sys
20:35:21.0397 4840  AppID - ok
20:35:21.0412 4840  [ 0bc381a15355a3982216f7172f545de1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
20:35:21.0459 4840  AppIDSvc - ok
20:35:21.0459 4840  [ 3977d4a871ca0d4f2ed1e7db46829731 ] Appinfo        C:\Windows\System32\appinfo.dll
20:35:21.0522 4840  Appinfo - ok
20:35:21.0537 4840  [ c484f8ceb1717c540242531db7845c4e ] arc            C:\Windows\system32\drivers\arc.sys
20:35:21.0553 4840  arc - ok
20:35:21.0553 4840  [ 019af6924aefe7839f61c830227fe79c ] arcsas          C:\Windows\system32\drivers\arcsas.sys
20:35:21.0568 4840  arcsas - ok
20:35:21.0584 4840  [ 769765ce2cc62867468cea93969b2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
20:35:21.0631 4840  AsyncMac - ok
20:35:21.0662 4840  [ 02062c0b390b7729edc9e69c680a6f3c ] atapi          C:\Windows\system32\drivers\atapi.sys
20:35:21.0678 4840  atapi - ok
20:35:21.0724 4840  [ 4bf5bca6e2608cd8a00bc4a6673a9f47 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
20:35:21.0740 4840  AtiHDAudioService - ok
20:35:21.0880 4840  [ f6640d83af0fd74c50e23e68548ea9a0 ] atikmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
20:35:21.0974 4840  atikmdag - ok
20:35:22.0005 4840  [ f23fef6d569fce88671949894a8becf1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:35:22.0068 4840  AudioEndpointBuilder - ok
20:35:22.0068 4840  [ f23fef6d569fce88671949894a8becf1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
20:35:22.0099 4840  AudioSrv - ok
20:35:22.0146 4840  [ 26e38b5a58c6c55fafbc563eeddb0867 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
20:35:22.0146 4840  avgntflt - ok
20:35:22.0161 4840  [ 9d1f00beff84cbbf46d7f052bc7e0565 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
20:35:22.0177 4840  avipbb - ok
20:35:22.0208 4840  [ 248db59fc86de44d2779f4c7fb1a567d ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
20:35:22.0208 4840  avkmgr - ok
20:35:22.0239 4840  [ a6bf31a71b409dfa8cac83159e1e2aff ] AxInstSV        C:\Windows\System32\AxInstSV.dll
20:35:22.0333 4840  AxInstSV - ok
20:35:22.0364 4840  [ 3e5b191307609f7514148c6832bb0842 ] b06bdrv        C:\Windows\system32\drivers\bxvbda.sys
20:35:22.0411 4840  b06bdrv - ok
20:35:22.0426 4840  [ b5ace6968304a3900eeb1ebfd9622df2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
20:35:22.0473 4840  b57nd60a - ok
20:35:22.0504 4840  [ fde360167101b4e45a96f939f388aeb0 ] BDESVC          C:\Windows\System32\bdesvc.dll
20:35:22.0582 4840  BDESVC - ok
20:35:22.0582 4840  [ 16a47ce2decc9b099349a5f840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
20:35:22.0629 4840  Beep - ok
20:35:22.0660 4840  [ 82974d6a2fd19445cc5171fc378668a4 ] BFE            C:\Windows\System32\bfe.dll
20:35:22.0707 4840  BFE - ok
20:35:22.0738 4840  [ 1ea7969e3271cbc59e1730697dc74682 ] BITS            C:\Windows\System32\qmgr.dll
20:35:22.0848 4840  BITS - ok
20:35:22.0879 4840  [ 61583ee3c3a17003c4acd0475646b4d3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
20:35:22.0894 4840  blbdrive - ok
20:35:22.0941 4840  [ 6c02a83164f5cc0a262f4199f0871cf5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
20:35:22.0988 4840  bowser - ok
20:35:23.0019 4840  [ f09eee9edc320b5e1501f749fde686c8 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
20:35:23.0035 4840  BrFiltLo - ok
20:35:23.0050 4840  [ b114d3098e9bdb8bea8b053685831be6 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
20:35:23.0050 4840  BrFiltUp - ok
20:35:23.0066 4840  [ 8ef0d5c41ec907751b8429162b1239ed ] Browser        C:\Windows\System32\browser.dll
20:35:23.0113 4840  Browser - ok
20:35:23.0128 4840  [ 43bea8d483bf1870f018e2d02e06a5bd ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
20:35:23.0191 4840  Brserid - ok
20:35:23.0191 4840  [ a6eca2151b08a09caceca35c07f05b42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
20:35:23.0206 4840  BrSerWdm - ok
20:35:23.0238 4840  [ b79968002c277e869cf38bd22cd61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
20:35:23.0253 4840  BrUsbMdm - ok
20:35:23.0253 4840  [ a87528880231c54e75ea7a44943b38bf ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
20:35:23.0269 4840  BrUsbSer - ok
20:35:23.0269 4840  [ 9da669f11d1f894ab4eb69bf546a42e8 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
20:35:23.0284 4840  BTHMODEM - ok
20:35:23.0300 4840  [ 95f9c2976059462cbbf227f7aab10de9 ] bthserv        C:\Windows\system32\bthserv.dll
20:35:23.0331 4840  bthserv - ok
20:35:23.0347 4840  [ b8bd2bb284668c84865658c77574381a ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
20:35:23.0394 4840  cdfs - ok
20:35:23.0409 4840  [ f036ce71586e93d94dab220d7bdf4416 ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
20:35:23.0425 4840  cdrom - ok
20:35:23.0456 4840  [ f17d1d393bbc69c5322fbfafaca28c7f ] CertPropSvc    C:\Windows\System32\certprop.dll
20:35:23.0503 4840  CertPropSvc - ok
20:35:23.0518 4840  [ d7cd5c4e1b71fa62050515314cfb52cf ] circlass        C:\Windows\system32\drivers\circlass.sys
20:35:23.0518 4840  circlass - ok
20:35:23.0534 4840  [ fe1ec06f2253f691fe36217c592a0206 ] CLFS            C:\Windows\system32\CLFS.sys
20:35:23.0550 4840  CLFS - ok
20:35:23.0596 4840  [ d88040f816fda31c3b466f0fa0918f29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:35:23.0612 4840  clr_optimization_v2.0.50727_32 - ok
20:35:23.0659 4840  [ d1ceea2b47cb998321c579651ce3e4f8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
20:35:23.0659 4840  clr_optimization_v2.0.50727_64 - ok
20:35:23.0706 4840  [ c5a75eb48e2344abdc162bda79e16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:35:23.0752 4840  clr_optimization_v4.0.30319_32 - ok
20:35:23.0784 4840  [ c6f9af94dcd58122a4d7e89db6bed29d ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
20:35:23.0784 4840  clr_optimization_v4.0.30319_64 - ok
20:35:23.0799 4840  [ 0840155d0bddf1190f84a663c284bd33 ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
20:35:23.0815 4840  CmBatt - ok
20:35:23.0830 4840  [ e19d3f095812725d88f9001985b94edd ] cmdide          C:\Windows\system32\drivers\cmdide.sys
20:35:23.0846 4840  cmdide - ok
20:35:23.0877 4840  [ 9ac4f97c2d3e93367e2148ea940cd2cd ] CNG            C:\Windows\system32\Drivers\cng.sys
20:35:23.0908 4840  CNG - ok
20:35:23.0908 4840  [ 102de219c3f61415f964c88e9085ad14 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
20:35:23.0924 4840  Compbatt - ok
20:35:23.0940 4840  [ 03edb043586cceba243d689bdda370a8 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
20:35:23.0986 4840  CompositeBus - ok
20:35:23.0986 4840  COMSysApp - ok
20:35:24.0002 4840  [ 1c827878a998c18847245fe1f34ee597 ] crcdisk        C:\Windows\system32\drivers\crcdisk.sys
20:35:24.0018 4840  crcdisk - ok
20:35:24.0096 4840  [ 4f5414602e2544a4554d95517948b705 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
20:35:24.0158 4840  CryptSvc - ok
20:35:24.0189 4840  [ 5c627d1b1138676c0a7ab2c2c190d123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
20:35:24.0252 4840  DcomLaunch - ok
20:35:24.0283 4840  [ 3cec7631a84943677aa8fa8ee5b6b43d ] defragsvc      C:\Windows\System32\defragsvc.dll
20:35:24.0314 4840  defragsvc - ok
20:35:24.0330 4840  [ 9bb2ef44eaa163b29c4a4587887a0fe4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
20:35:24.0361 4840  DfsC - ok
20:35:24.0392 4840  [ 43d808f5d9e1a18e5eeb5ebc83969e4e ] Dhcp            C:\Windows\system32\dhcpcore.dll
20:35:24.0439 4840  Dhcp - ok
20:35:24.0439 4840  [ 13096b05847ec78f0977f2c0f79e9ab3 ] discache        C:\Windows\system32\drivers\discache.sys
20:35:24.0486 4840  discache - ok
20:35:24.0517 4840  [ 9819eee8b5ea3784ec4af3b137a5244c ] Disk            C:\Windows\system32\drivers\disk.sys
20:35:24.0517 4840  Disk - ok
20:35:24.0548 4840  [ 16835866aaa693c7d7fceba8fff706e4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
20:35:24.0595 4840  Dnscache - ok
20:35:24.0626 4840  [ b1fb3ddca0fdf408750d5843591afbc6 ] dot3svc        C:\Windows\System32\dot3svc.dll
20:35:24.0673 4840  dot3svc - ok
20:35:24.0688 4840  [ b26f4f737e8f9df4f31af6cf31d05820 ] DPS            C:\Windows\system32\dps.dll
20:35:24.0720 4840  DPS - ok
20:35:24.0751 4840  [ 9b19f34400d24df84c858a421c205754 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
20:35:24.0782 4840  drmkaud - ok
20:35:24.0798 4840  [ f5bee30450e18e6b83a5012c100616fd ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
20:35:24.0844 4840  DXGKrnl - ok
20:35:24.0860 4840  [ e2dda8726da9cb5b2c4000c9018a9633 ] EapHost        C:\Windows\System32\eapsvc.dll
20:35:24.0891 4840  EapHost - ok
20:35:24.0954 4840  [ dc5d737f51be844d8c82c695eb17372f ] ebdrv          C:\Windows\system32\drivers\evbda.sys
20:35:25.0047 4840  ebdrv - ok
20:35:25.0094 4840  [ c118a82cd78818c29ab228366ebf81c3 ] EFS            C:\Windows\System32\lsass.exe
20:35:25.0172 4840  EFS - ok
20:35:25.0219 4840  [ c4002b6b41975f057d98c439030cea07 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
20:35:25.0312 4840  ehRecvr - ok
20:35:25.0344 4840  [ 4705e8ef9934482c5bb488ce28afc681 ] ehSched        C:\Windows\ehome\ehsched.exe
20:35:25.0375 4840  ehSched - ok
20:35:25.0390 4840  [ 0e5da5369a0fcaea12456dd852545184 ] elxstor        C:\Windows\system32\drivers\elxstor.sys
20:35:25.0422 4840  elxstor - ok
20:35:25.0437 4840  [ 34a3c54752046e79a126e15c51db409b ] ErrDev          C:\Windows\system32\drivers\errdev.sys
20:35:25.0453 4840  ErrDev - ok
20:35:25.0484 4840  [ 4166f82be4d24938977dd1746be9b8a0 ] EventSystem    C:\Windows\system32\es.dll
20:35:25.0531 4840  EventSystem - ok
20:35:25.0531 4840  [ a510c654ec00c1e9bdd91eeb3a59823b ] exfat          C:\Windows\system32\drivers\exfat.sys
20:35:25.0562 4840  exfat - ok
20:35:25.0578 4840  [ 0adc83218b66a6db380c330836f3e36d ] fastfat        C:\Windows\system32\drivers\fastfat.sys
20:35:25.0609 4840  fastfat - ok
20:35:25.0640 4840  [ dbefd454f8318a0ef691fdd2eaab44eb ] Fax            C:\Windows\system32\fxssvc.exe
20:35:25.0702 4840  Fax - ok
20:35:25.0702 4840  [ d765d19cd8ef61f650c384f62fac00ab ] fdc            C:\Windows\system32\drivers\fdc.sys
20:35:25.0734 4840  fdc - ok
20:35:25.0749 4840  [ 0438cab2e03f4fb61455a7956026fe86 ] fdPHost        C:\Windows\system32\fdPHost.dll
20:35:25.0796 4840  fdPHost - ok
20:35:25.0796 4840  [ 802496cb59a30349f9a6dd22d6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
20:35:25.0843 4840  FDResPub - ok
20:35:25.0843 4840  [ 655661be46b5f5f3fd454e2c3095b930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
20:35:25.0858 4840  FileInfo - ok
20:35:25.0858 4840  [ 5f671ab5bc87eea04ec38a6cd5962a47 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
20:35:25.0905 4840  Filetrace - ok
20:35:25.0952 4840  [ 1f63900e2eb00101b9aca2b7a870704e ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
20:35:25.0983 4840  FLEXnet Licensing Service - ok
20:35:26.0061 4840  [ 1c3fb052a0bb72edaed90785c34d6eed ] FLEXnet Licensing Service 64 C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
20:35:26.0077 4840  FLEXnet Licensing Service 64 - ok
20:35:26.0092 4840  [ c172a0f53008eaeb8ea33fe10e177af5 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
20:35:26.0108 4840  flpydisk - ok
20:35:26.0124 4840  [ da6b67270fd9db3697b20fce94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
20:35:26.0139 4840  FltMgr - ok
20:35:26.0186 4840  [ 5c4cb4086fb83115b153e47add961a0c ] FontCache      C:\Windows\system32\FntCache.dll
20:35:26.0295 4840  FontCache - ok
20:35:26.0342 4840  [ a8b7f3818ab65695e3a0bb3279f6dce6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
20:35:26.0342 4840  FontCache3.0.0.0 - ok
20:35:26.0358 4840  [ d43703496149971890703b4b1b723eac ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
20:35:26.0373 4840  FsDepends - ok
20:35:26.0404 4840  [ 6bd9295cc032dd3077c671fccf579a7b ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
20:35:26.0420 4840  Fs_Rec - ok
20:35:26.0436 4840  [ 1f7b25b858fa27015169fe95e54108ed ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
20:35:26.0451 4840  fvevol - ok
20:35:26.0467 4840  [ 8c778d335c9d272cfd3298ab02abe3b6 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
20:35:26.0467 4840  gagp30kx - ok
20:35:26.0498 4840  [ f51fb25e1328fa14f446a8b24ac52709 ] gdrv            C:\Windows\gdrv.sys
20:35:26.0514 4840  gdrv - ok
20:35:26.0529 4840  [ 277bbc7e1aa1ee957f573a10eca7ef3a ] gpsvc          C:\Windows\System32\gpsvc.dll
20:35:26.0576 4840  gpsvc - ok
20:35:26.0592 4840  [ f2523ef6460fc42405b12248338ab2f0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
20:35:26.0638 4840  hcw85cir - ok
20:35:26.0685 4840  [ 975761c778e33cd22498059b91e7373a ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:35:26.0716 4840  HdAudAddService - ok
20:35:26.0716 4840  [ 97bfed39b6b79eb12cddbfeed51f56bb ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
20:35:26.0748 4840  HDAudBus - ok
20:35:26.0748 4840  [ 78e86380454a7b10a5eb255dc44a355f ] HidBatt        C:\Windows\system32\drivers\HidBatt.sys
20:35:26.0779 4840  HidBatt - ok
20:35:26.0794 4840  [ 7fd2a313f7afe5c4dab14798c48dd104 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
20:35:26.0810 4840  HidBth - ok
20:35:26.0826 4840  [ 0a77d29f311b88cfae3b13f9c1a73825 ] HidIr          C:\Windows\system32\drivers\hidir.sys
20:35:26.0826 4840  HidIr - ok
20:35:26.0841 4840  Hidmantl - ok
20:35:26.0841 4840  [ bd9eb3958f213f96b97b1d897dee006d ] hidserv        C:\Windows\system32\hidserv.dll
20:35:26.0888 4840  hidserv - ok
20:35:26.0919 4840  [ 9592090a7e2b61cd582b612b6df70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
20:35:26.0919 4840  HidUsb - ok
20:35:26.0950 4840  [ 387e72e739e15e3d37907a86d9ff98e2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
20:35:26.0982 4840  hkmsvc - ok
20:35:26.0997 4840  [ efdfb3dd38a4376f93e7985173813abd ] HomeGroupListener C:\Windows\system32\ListSvc.dll
20:35:27.0044 4840  HomeGroupListener - ok
20:35:27.0060 4840  [ 908acb1f594274965a53926b10c81e89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
20:35:27.0091 4840  HomeGroupProvider - ok
20:35:27.0122 4840  [ 39d2abcd392f3d8a6dce7b60ae7b8efc ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
20:35:27.0122 4840  HpSAMD - ok
20:35:27.0153 4840  [ 0ea7de1acb728dd5a369fd742d6eee28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
20:35:27.0216 4840  HTTP - ok
20:35:27.0231 4840  [ a5462bd6884960c9dc85ed49d34ff392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
20:35:27.0247 4840  hwpolicy - ok
20:35:27.0262 4840  [ fa55c73d4affa7ee23ac4be53b4592d3 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
20:35:27.0278 4840  i8042prt - ok
20:35:27.0325 4840  [ aaaf44db3bd0b9d1fb6969b23ecc8366 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
20:35:27.0340 4840  iaStorV - ok
20:35:27.0372 4840  [ 5988fc40f8db5b0739cd1e3a5d0d78bd ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
20:35:27.0403 4840  idsvc - ok
20:35:27.0403 4840  [ 5c18831c61933628f5bb0ea2675b9d21 ] iirsp          C:\Windows\system32\drivers\iirsp.sys
20:35:27.0418 4840  iirsp - ok
20:35:27.0450 4840  [ fcd84c381e0140af901e58d48882d26b ] IKEEXT          C:\Windows\System32\ikeext.dll
20:35:27.0496 4840  IKEEXT - ok
20:35:27.0512 4840  [ f00f20e70c6ec3aa366910083a0518aa ] intelide        C:\Windows\system32\drivers\intelide.sys
20:35:27.0512 4840  intelide - ok
20:35:27.0528 4840  [ ada036632c664caa754079041cf1f8c1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
20:35:27.0559 4840  intelppm - ok
20:35:27.0574 4840  [ 098a91c54546a3b878dad6a7e90a455b ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
20:35:27.0606 4840  IPBusEnum - ok
20:35:27.0606 4840  [ c9f0e1bd74365a8771590e9008d22ab6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:35:27.0637 4840  IpFilterDriver - ok
20:35:27.0652 4840  [ a34a587fffd45fa649fba6d03784d257 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
20:35:27.0699 4840  iphlpsvc - ok
20:35:27.0699 4840  [ 0fc1aea580957aa8817b8f305d18ca3a ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
20:35:27.0715 4840  IPMIDRV - ok
20:35:27.0715 4840  [ af9b39a7e7b6caa203b3862582e9f2d0 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
20:35:27.0762 4840  IPNAT - ok
20:35:27.0777 4840  [ 3abf5e7213eb28966d55d58b515d5ce9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
20:35:27.0808 4840  IRENUM - ok
20:35:27.0824 4840  [ 2f7b28dc3e1183e5eb418df55c204f38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
20:35:27.0824 4840  isapnp - ok
20:35:27.0840 4840  [ d931d7309deb2317035b07c9f9e6b0bd ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
20:35:27.0855 4840  iScsiPrt - ok
20:35:27.0902 4840  [ db85fe8d6cbaa2047cb4da1b2c193d76 ] jraid          C:\Windows\system32\DRIVERS\jraid.sys
20:35:27.0964 4840  jraid - ok
20:35:27.0980 4840  [ bc02336f1cba7dcc7d1213bb588a68a5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
20:35:27.0996 4840  kbdclass - ok
20:35:27.0996 4840  [ 0705eff5b42a9db58548eec3b26bb484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
20:35:28.0027 4840  kbdhid - ok
20:35:28.0042 4840  [ c118a82cd78818c29ab228366ebf81c3 ] KeyIso          C:\Windows\system32\lsass.exe
20:35:28.0042 4840  KeyIso - ok
20:35:28.0089 4840  [ 97a7070aea4c058b6418519e869a63b4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
20:35:28.0105 4840  KSecDD - ok
20:35:28.0136 4840  [ 26c43a7c2862447ec59deda188d1da07 ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
20:35:28.0152 4840  KSecPkg - ok
20:35:28.0152 4840  [ 6869281e78cb31a43e969f06b57347c4 ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
20:35:28.0198 4840  ksthunk - ok
20:35:28.0214 4840  [ 6ab66e16aa859232f64deb66887a8c9c ] KtmRm          C:\Windows\system32\msdtckrm.dll
20:35:28.0261 4840  KtmRm - ok
20:35:28.0292 4840  [ d9f42719019740baa6d1c6d536cbdaa6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
20:35:28.0323 4840  LanmanServer - ok
20:35:28.0354 4840  [ 851a1382eed3e3a7476db004f4ee3e1a ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:35:28.0401 4840  LanmanWorkstation - ok
20:35:28.0432 4840  [ 1538831cf8ad2979a04c423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
20:35:28.0479 4840  lltdio - ok
20:35:28.0495 4840  [ c1185803384ab3feed115f79f109427f ] lltdsvc        C:\Windows\System32\lltdsvc.dll
20:35:28.0542 4840  lltdsvc - ok
20:35:28.0542 4840  [ f993a32249b66c9d622ea5592a8b76b8 ] lmhosts        C:\Windows\System32\lmhsvc.dll
20:35:28.0588 4840  lmhosts - ok
20:35:28.0604 4840  [ 1a93e54eb0ece102495a51266dcdb6a6 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
20:35:28.0620 4840  LSI_FC - ok
20:35:28.0620 4840  [ 1047184a9fdc8bdbff857175875ee810 ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
20:35:28.0635 4840  LSI_SAS - ok
20:35:28.0651 4840  [ 30f5c0de1ee8b5bc9306c1f0e4a75f93 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
20:35:28.0651 4840  LSI_SAS2 - ok
20:35:28.0666 4840  [ 0504eacaff0d3c8aed161c4b0d369d4a ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
20:35:28.0666 4840  LSI_SCSI - ok
20:35:28.0698 4840  [ 43d0f98e1d56ccddb0d5254cff7b356e ] luafv          C:\Windows\system32\drivers\luafv.sys
20:35:28.0744 4840  luafv - ok
20:35:28.0791 4840  [ dc8490812a3b72811ae534f423b4c206 ] MBAMProtector  C:\Windows\system32\drivers\mbam.sys
20:35:29.0088 4840  MBAMProtector - ok
20:35:29.0150 4840  [ 43683e970f008c93c9429ef428147a54 ] MBAMService    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
20:35:29.0166 4840  MBAMService - ok
20:35:29.0244 4840  [ 0be09cd858abf9df6ed259d57a1a1663 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
20:35:29.0259 4840  Mcx2Svc - ok
20:35:29.0290 4840  [ a55805f747c6edb6a9080d7c633bd0f4 ] megasas        C:\Windows\system32\drivers\megasas.sys
20:35:29.0306 4840  megasas - ok
20:35:29.0306 4840  [ baf74ce0072480c3b6b7c13b2a94d6b3 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
20:35:29.0322 4840  MegaSR - ok
20:35:29.0353 4840  [ e40e80d0304a73e8d269f7141d77250b ] MMCSS          C:\Windows\system32\mmcss.dll
20:35:29.0384 4840  MMCSS - ok
20:35:29.0400 4840  [ 800ba92f7010378b09f9ed9270f07137 ] Modem          C:\Windows\system32\drivers\modem.sys
20:35:29.0446 4840  Modem - ok
20:35:29.0462 4840  [ b03d591dc7da45ece20b3b467e6aadaa ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
20:35:29.0493 4840  monitor - ok
20:35:29.0524 4840  [ 7d27ea49f3c1f687d357e77a470aea99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
20:35:29.0524 4840  mouclass - ok
20:35:29.0556 4840  [ d3bf052c40b0c4166d9fd86a4288c1e6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
20:35:29.0587 4840  mouhid - ok
20:35:29.0602 4840  [ 32e7a3d591d671a6df2db515a5cbe0fa ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
20:35:29.0602 4840  mountmgr - ok
20:35:29.0618 4840  [ a44b420d30bd56e145d6a2bc8768ec58 ] mpio            C:\Windows\system32\drivers\mpio.sys
20:35:29.0634 4840  mpio - ok
20:35:29.0634 4840  [ 6c38c9e45ae0ea2fa5e551f2ed5e978f ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
20:35:29.0665 4840  mpsdrv - ok
20:35:29.0696 4840  [ 54ffc9c8898113ace189d4aa7199d2c1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
20:35:29.0727 4840  MpsSvc - ok
20:35:29.0743 4840  [ dc722758b8261e1abafd31a3c0a66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
20:35:29.0774 4840  MRxDAV - ok
20:35:29.0805 4840  [ a5d9106a73dc88564c825d317cac68ac ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
20:35:29.0883 4840  mrxsmb - ok
20:35:29.0930 4840  [ d711b3c1d5f42c0c2415687be09fc163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:35:29.0946 4840  mrxsmb10 - ok
20:35:29.0961 4840  [ 9423e9d355c8d303e76b8cfbd8a5c30c ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:35:29.0977 4840  mrxsmb20 - ok
20:35:30.0008 4840  [ c25f0bafa182cbca2dd3c851c2e75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
20:35:30.0024 4840  msahci - ok
20:35:30.0024 4840  [ db801a638d011b9633829eb6f663c900 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
20:35:30.0024 4840  msdsm - ok
20:35:30.0055 4840  [ de0ece52236cfa3ed2dbfc03f28253a8 ] MSDTC          C:\Windows\System32\msdtc.exe
20:35:30.0070 4840  MSDTC - ok
20:35:30.0102 4840  [ aa3fb40e17ce1388fa1bedab50ea8f96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
20:35:30.0133 4840  Msfs - ok
20:35:30.0148 4840  [ f9d215a46a8b9753f61767fa72a20326 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
20:35:30.0180 4840  mshidkmdf - ok
20:35:30.0180 4840  [ d916874bbd4f8b07bfb7fa9b3ccae29d ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
20:35:30.0195 4840  msisadrv - ok
20:35:30.0226 4840  [ 808e98ff49b155c522e6400953177b08 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
20:35:30.0273 4840  MSiSCSI - ok
20:35:30.0273 4840  msiserver - ok
20:35:30.0289 4840  [ 49ccf2c4fea34ffad8b1b59d49439366 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
20:35:30.0336 4840  MSKSSRV - ok
20:35:30.0336 4840  [ bdd71ace35a232104ddd349ee70e1ab3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
20:35:30.0382 4840  MSPCLOCK - ok
20:35:30.0382 4840  [ 4ed981241db27c3383d72092b618a1d0 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
20:35:30.0414 4840  MSPQM - ok
20:35:30.0429 4840  [ 759a9eeb0fa9ed79da1fb7d4ef78866d ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
20:35:30.0460 4840  MsRPC - ok
20:35:30.0460 4840  [ 0eed230e37515a0eaee3c2e1bc97b288 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
20:35:30.0476 4840  mssmbios - ok
20:35:30.0507 4840  [ 2e66f9ecb30b4221a318c92ac2250779 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
20:35:30.0538 4840  MSTEE - ok
20:35:30.0538 4840  [ 7ea404308934e675bffde8edf0757bcd ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
20:35:30.0554 4840  MTConfig - ok
20:35:30.0570 4840  [ f9a18612fd3526fe473c1bda678d61c8 ] Mup            C:\Windows\system32\Drivers\mup.sys
20:35:30.0585 4840  Mup - ok
20:35:30.0616 4840  [ 582ac6d9873e31dfa28a4547270862dd ] napagent        C:\Windows\system32\qagentRT.dll
20:35:30.0663 4840  napagent - ok
20:35:30.0694 4840  [ 1ea3749c4114db3e3161156ffffa6b33 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
20:35:30.0726 4840  NativeWifiP - ok
20:35:30.0757 4840  [ 79b47fd40d9a817e932f9d26fac0a81c ] NDIS            C:\Windows\system32\drivers\ndis.sys
20:35:30.0788 4840  NDIS - ok
20:35:30.0819 4840  [ 9f9a1f53aad7da4d6fef5bb73ab811ac ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
20:35:30.0850 4840  NdisCap - ok
20:35:30.0866 4840  [ 30639c932d9fef22b31268fe25a1b6e5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
20:35:30.0897 4840  NdisTapi - ok
20:35:30.0897 4840  [ 136185f9fb2cc61e573e676aa5402356 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
20:35:30.0944 4840  Ndisuio - ok
20:35:30.0960 4840  [ 53f7305169863f0a2bddc49e116c2e11 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
20:35:30.0991 4840  NdisWan - ok
20:35:31.0006 4840  [ 015c0d8e0e0421b4cfd48cffe2825879 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
20:35:31.0022 4840  NDProxy - ok
20:35:31.0038 4840  [ 86743d9f5d2b1048062b14b1d84501c4 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
20:35:31.0084 4840  NetBIOS - ok
20:35:31.0100 4840  [ 09594d1089c523423b32a4229263f068 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
20:35:31.0116 4840  NetBT - ok
20:35:31.0131 4840  [ c118a82cd78818c29ab228366ebf81c3 ] Netlogon        C:\Windows\system32\lsass.exe
20:35:31.0147 4840  Netlogon - ok
20:35:31.0178 4840  [ 847d3ae376c0817161a14a82c8922a9e ] Netman          C:\Windows\System32\netman.dll
20:35:31.0225 4840  Netman - ok
20:35:31.0240 4840  [ 5f28111c648f1e24f7dbc87cdeb091b8 ] netprofm        C:\Windows\System32\netprofm.dll
20:35:31.0272 4840  netprofm - ok
20:35:31.0303 4840  [ 3e5a36127e201ddf663176b66828fafe ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
20:35:31.0303 4840  NetTcpPortSharing - ok
20:35:31.0350 4840  [ 77889813be4d166cdab78ddba990da92 ] nfrd960        C:\Windows\system32\drivers\nfrd960.sys
20:35:31.0350 4840  nfrd960 - ok
20:35:31.0381 4840  [ 1ee99a89cc788ada662441d1e9830529 ] NlaSvc          C:\Windows\System32\nlasvc.dll
20:35:31.0412 4840  NlaSvc - ok
20:35:31.0443 4840  [ 1e4c4ab5c9b8dd13179bbdc75a2a01f7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
20:35:31.0459 4840  Npfs - ok
20:35:31.0474 4840  [ d54bfdf3e0c953f823b3d0bfe4732528 ] nsi            C:\Windows\system32\nsisvc.dll
20:35:31.0521 4840  nsi - ok
20:35:31.0537 4840  [ e7f5ae18af4168178a642a9247c63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
20:35:31.0568 4840  nsiproxy - ok
20:35:31.0630 4840  [ a2f74975097f52a00745f9637451fdd8 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
20:35:31.0677 4840  Ntfs - ok
20:35:31.0693 4840  [ 9899284589f75fa8724ff3d16aed75c1 ] Null            C:\Windows\system32\drivers\Null.sys
20:35:31.0740 4840  Null - ok
20:35:31.0755 4840  [ 0a92cb65770442ed0dc44834632f66ad ] nvraid          C:\Windows\system32\drivers\nvraid.sys
20:35:31.0771 4840  nvraid - ok
20:35:31.0802 4840  [ dab0e87525c10052bf65f06152f37e4a ] nvstor          C:\Windows\system32\drivers\nvstor.sys
20:35:31.0802 4840  nvstor - ok
20:35:31.0833 4840  [ 270d7cd42d6e3979f6dd0146650f0e05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
20:35:31.0833 4840  nv_agp - ok
20:35:31.0849 4840  [ 3589478e4b22ce21b41fa1bfc0b8b8a0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
20:35:31.0896 4840  ohci1394 - ok
20:35:31.0942 4840  [ 9d10f99a6712e28f8acd5641e3a7ea6b ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:35:31.0942 4840  ose - ok
20:35:32.0067 4840  [ 61bffb5f57ad12f83ab64b7181829b34 ] osppsvc        C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
20:35:32.0176 4840  osppsvc - ok
20:35:32.0192 4840  [ 3eac4455472cc2c97107b5291e0dcafe ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
20:35:32.0254 4840  p2pimsvc - ok
20:35:32.0301 4840  [ 927463ecb02179f88e4b9a17568c63c3 ] p2psvc          C:\Windows\system32\p2psvc.dll
20:35:32.0301 4840  p2psvc - ok
20:35:32.0332 4840  [ 0086431c29c35be1dbc43f52cc273887 ] Parport        C:\Windows\system32\DRIVERS\parport.sys
20:35:32.0364 4840  Parport - ok
20:35:32.0395 4840  [ e9766131eeade40a27dc27d2d68fba9c ] partmgr        C:\Windows\system32\drivers\partmgr.sys
20:35:32.0410 4840  partmgr - ok
20:35:32.0426 4840  [ 3aeaa8b561e63452c655dc0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
20:35:32.0457 4840  PcaSvc - ok
20:35:32.0473 4840  [ 94575c0571d1462a0f70bde6bd6ee6b3 ] pci            C:\Windows\system32\drivers\pci.sys
20:35:32.0488 4840  pci - ok
20:35:32.0520 4840  [ b5b8b5ef2e5cb34df8dcf8831e3534fa ] pciide          C:\Windows\system32\drivers\pciide.sys
20:35:32.0520 4840  pciide - ok
20:35:32.0535 4840  [ b2e81d4e87ce48589f98cb8c05b01f2f ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
20:35:32.0551 4840  pcmcia - ok
20:35:32.0566 4840  [ d6b9c2e1a11a3a4b26a182ffef18f603 ] pcw            C:\Windows\system32\drivers\pcw.sys
20:35:32.0566 4840  pcw - ok
20:35:32.0598 4840  [ 68769c3356b3be5d1c732c97b9a80d6e ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
20:35:32.0660 4840  PEAUTH - ok
20:35:32.0707 4840  [ e495e408c93141e8fc72dc0c6046ddfa ] PerfHost        C:\Windows\SysWow64\perfhost.exe
20:35:32.0722 4840  PerfHost - ok
20:35:32.0769 4840  [ c7cf6a6e137463219e1259e3f0f0dd6c ] pla            C:\Windows\system32\pla.dll
20:35:32.0832 4840  pla - ok
20:35:32.0878 4840  [ 25fbdef06c4d92815b353f6e792c8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
20:35:32.0941 4840  PlugPlay - ok
20:35:32.0956 4840  [ 7195581cec9bb7d12abe54036acc2e38 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
20:35:32.0972 4840  PNRPAutoReg - ok
20:35:32.0988 4840  [ 3eac4455472cc2c97107b5291e0dcafe ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
20:35:33.0003 4840  PNRPsvc - ok
20:35:33.0034 4840  [ 4f15d75adf6156bf56eced6d4a55c389 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
20:35:33.0081 4840  PolicyAgent - ok
20:35:33.0112 4840  [ 6ba9d927dded70bd1a9caded45f8b184 ] Power          C:\Windows\system32\umpo.dll
20:35:33.0144 4840  Power - ok
20:35:33.0175 4840  [ f92a2c41117a11a00be01ca01a7fcde9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
20:35:33.0222 4840  PptpMiniport - ok
20:35:33.0222 4840  [ 0d922e23c041efb1c3fac2a6f943c9bf ] Processor      C:\Windows\system32\drivers\processr.sys
20:35:33.0253 4840  Processor - ok
20:35:33.0300 4840  [ 53e83f1f6cf9d62f32801cf66d8352a8 ] ProfSvc        C:\Windows\system32\profsvc.dll
20:35:33.0378 4840  ProfSvc - ok
20:35:33.0378 4840  [ c118a82cd78818c29ab228366ebf81c3 ] ProtectedStorage C:\Windows\system32\lsass.exe
20:35:33.0393 4840  ProtectedStorage - ok
20:35:33.0409 4840  [ 0557cf5a2556bd58e26384169d72438d ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
20:35:33.0456 4840  Psched - ok
20:35:33.0487 4840  [ a53a15a11ebfd21077463ee2c7afeef0 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
20:35:33.0534 4840  ql2300 - ok
20:35:33.0549 4840  [ 4f6d12b51de1aaeff7dc58c4d75423c8 ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
20:35:33.0549 4840  ql40xx - ok
20:35:33.0580 4840  [ 906191634e99aea92c4816150bda3732 ] QWAVE          C:\Windows\system32\qwave.dll
20:35:33.0596 4840  QWAVE - ok
20:35:33.0596 4840  [ 76707bb36430888d9ce9d705398adb6c ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
20:35:33.0612 4840  QWAVEdrv - ok
20:35:33.0627 4840  [ 5a0da8ad5762fa2d91678a8a01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
20:35:33.0643 4840  RasAcd - ok
20:35:33.0658 4840  [ 7ecff9b22276b73f43a99a15a6094e90 ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
20:35:33.0690 4840  RasAgileVpn - ok
20:35:33.0705 4840  [ 8f26510c5383b8dbe976de1cd00fc8c7 ] RasAuto        C:\Windows\System32\rasauto.dll
20:35:33.0736 4840  RasAuto - ok
20:35:33.0752 4840  [ 471815800ae33e6f1c32fb1b97c490ca ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
20:35:33.0783 4840  Rasl2tp - ok
20:35:33.0799 4840  [ ee867a0870fc9e4972ba9eaad35651e2 ] RasMan          C:\Windows\System32\rasmans.dll
20:35:33.0830 4840  RasMan - ok
20:35:33.0846 4840  [ 855c9b1cd4756c5e9a2aa58a15f58c25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
20:35:33.0892 4840  RasPppoe - ok
20:35:33.0908 4840  [ e8b1e447b008d07ff47d016c2b0eeecb ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
20:35:33.0924 4840  RasSstp - ok
20:35:33.0939 4840  [ 77f665941019a1594d887a74f301fa2f ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
20:35:33.0986 4840  rdbss - ok
20:35:33.0986 4840  [ 302da2a0539f2cf54d7c6cc30c1f2d8d ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
20:35:34.0017 4840  rdpbus - ok
20:35:34.0033 4840  [ cea6cc257fc9b7715f1c2b4849286d24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
20:35:34.0064 4840  RDPCDD - ok
20:35:34.0173 4840  [ bb5971a4f00659529a5c44831af22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
20:35:34.0251 4840  RDPENCDD - ok
20:35:34.0298 4840  [ 216f3fa57533d98e1f74ded70113177a ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
20:35:34.0360 4840  RDPREFMP - ok
20:35:34.0392 4840  [ e61608aa35e98999af9aaeeea6114b0a ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
20:35:34.0438 4840  RDPWD - ok
20:35:34.0454 4840  [ 34ed295fa0121c241bfef24764fc4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
20:35:34.0470 4840  rdyboost - ok
20:35:34.0485 4840  [ 254fb7a22d74e5511c73a3f6d802f192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
20:35:34.0532 4840  RemoteAccess - ok
20:35:34.0548 4840  [ e4d94f24081440b5fc5aa556c7c62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
20:35:34.0594 4840  RemoteRegistry - ok
20:35:34.0626 4840  [ e4dc58cf7b3ea515ae917ff0d402a7bb ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
20:35:34.0672 4840  RpcEptMapper - ok
20:35:34.0688 4840  [ d5ba242d4cf8e384db90e6a8ed850b8c ] RpcLocator      C:\Windows\system32\locator.exe
20:35:34.0719 4840  RpcLocator - ok
20:35:34.0750 4840  [ 5c627d1b1138676c0a7ab2c2c190d123 ] RpcSs          C:\Windows\system32\rpcss.dll
20:35:34.0766 4840  RpcSs - ok
20:35:34.0782 4840  [ ddc86e4f8e7456261e637e3552e804ff ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
20:35:34.0813 4840  rspndr - ok
20:35:34.0860 4840  [ ee082e06a82ff630351d1e0ebbd3d8d0 ] RTL8167        C:\Windows\system32\DRIVERS\Rt64win7.sys
20:35:34.0891 4840  RTL8167 - ok
20:35:34.0906 4840  [ c118a82cd78818c29ab228366ebf81c3 ] SamSs          C:\Windows\system32\lsass.exe
20:35:34.0906 4840  SamSs - ok
20:35:34.0922 4840  [ ac03af3329579fffb455aa2daabbe22b ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
20:35:34.0938 4840  sbp2port - ok
20:35:34.0953 4840  [ 9b7395789e3791a3b6d000fe6f8b131e ] SCardSvr        C:\Windows\System32\SCardSvr.dll
20:35:34.0984 4840  SCardSvr - ok
20:35:35.0000 4840  [ 253f38d0d7074c02ff8deb9836c97d2b ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
20:35:35.0031 4840  scfilter - ok
20:35:35.0062 4840  [ 262f6592c3299c005fd6bec90fc4463a ] Schedule        C:\Windows\system32\schedsvc.dll
20:35:35.0125 4840  Schedule - ok
20:35:35.0140 4840  [ f17d1d393bbc69c5322fbfafaca28c7f ] SCPolicySvc    C:\Windows\System32\certprop.dll
20:35:35.0172 4840  SCPolicySvc - ok
20:35:35.0203 4840  [ 6ea4234dc55346e0709560fe7c2c1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
20:35:35.0265 4840  SDRSVC - ok
20:35:35.0281 4840  [ 3ea8a16169c26afbeb544e0e48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
20:35:35.0328 4840  secdrv - ok
20:35:35.0343 4840  [ bc617a4e1b4fa8df523a061739a0bd87 ] seclogon        C:\Windows\system32\seclogon.dll
20:35:35.0374 4840  seclogon - ok
20:35:35.0374 4840  [ c32ab8fa018ef34c0f113bd501436d21 ] SENS            C:\Windows\System32\sens.dll
20:35:35.0406 4840  SENS - ok
20:35:35.0421 4840  [ 0336cffafaab87a11541f1cf1594b2b2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
20:35:35.0468 4840  SensrSvc - ok
20:35:35.0484 4840  [ cb624c0035412af0debec78c41f5ca1b ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
20:35:35.0499 4840  Serenum - ok
20:35:35.0546 4840  [ c1d8e28b2c2adfaec4ba89e9fda69bd6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
20:35:35.0562 4840  Serial - ok
20:35:35.0593 4840  [ 1c545a7d0691cc4a027396535691c3e3 ] sermouse        C:\Windows\system32\drivers\sermouse.sys
20:35:35.0608 4840  sermouse - ok
20:35:35.0624 4840  [ 0b6231bf38174a1628c4ac812cc75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
20:35:35.0671 4840  SessionEnv - ok
20:35:35.0671 4840  [ a554811bcd09279536440c964ae35bbf ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
20:35:35.0686 4840  sffdisk - ok
20:35:35.0686 4840  [ ff414f0baefeba59bc6c04b3db0b87bf ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
20:35:35.0718 4840  sffp_mmc - ok
20:35:35.0718 4840  [ dd85b78243a19b59f0637dcf284da63c ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
20:35:35.0749 4840  sffp_sd - ok
20:35:35.0749 4840  [ a9d601643a1647211a1ee2ec4e433ff4 ] sfloppy        C:\Windows\system32\drivers\sfloppy.sys
20:35:35.0780 4840  sfloppy - ok
20:35:35.0811 4840  [ b95f6501a2f8b2e78c697fec401970ce ] SharedAccess    C:\Windows\System32\ipnathlp.dll
20:35:35.0858 4840  SharedAccess - ok
20:35:35.0874 4840  [ aaf932b4011d14052955d4b212a4da8d ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:35:35.0905 4840  ShellHWDetection - ok
20:35:35.0936 4840  [ 5a6019d79367043efdda228ad6fd2bb4 ] Si3114r5        C:\Windows\system32\DRIVERS\Si3114r5.sys
20:35:35.0952 4840  Si3114r5 - ok
20:35:35.0967 4840  [ bf8af19c1cc97dff50de34dbec5227f4 ] SiFilter        C:\Windows\system32\DRIVERS\SiWinAcc.sys
20:35:35.0983 4840  SiFilter - ok
20:35:35.0983 4840  [ 8141c9b48052e8198963c2e4803a3d46 ] SiRemFil        C:\Windows\system32\DRIVERS\SiRemFil.sys
20:35:35.0998 4840  SiRemFil - ok
20:35:36.0014 4840  [ 843caf1e5fde1ffd5ff768f23a51e2e1 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
20:35:36.0014 4840  SiSRaid2 - ok
20:35:36.0030 4840  [ 6a6c106d42e9ffff8b9fcb4f754f6da4 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
20:35:36.0045 4840  SiSRaid4 - ok
20:35:36.0061 4840  [ 548260a7b8654e024dc30bf8a7c5baa4 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
20:35:36.0092 4840  Smb - ok
20:35:36.0123 4840  [ 6313f223e817cc09aa41811daa7f541d ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
20:35:36.0139 4840  SNMPTRAP - ok
20:35:36.0186 4840  [ 3bb48f7e33c2b76184ddf233000c09cd ] Sony SCSI Helper Service C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe
20:35:36.0201 4840  Sony SCSI Helper Service ( UnsignedFile.Multi.Generic ) - warning
20:35:36.0201 4840  Sony SCSI Helper Service - detected UnsignedFile.Multi.Generic (1)
20:35:36.0217 4840  [ b9e31e5cacdfe584f34f730a677803f9 ] spldr          C:\Windows\system32\drivers\spldr.sys
20:35:36.0217 4840  spldr - ok
20:35:36.0248 4840  [ b96c17b5dc1424d56eea3a99e97428cd ] Spooler        C:\Windows\System32\spoolsv.exe
20:35:36.0279 4840  Spooler - ok
20:35:36.0342 4840  [ e17e0188bb90fae42d83e98707efa59c ] sppsvc          C:\Windows\system32\sppsvc.exe
20:35:36.0435 4840  sppsvc - ok
20:35:36.0451 4840  [ 93d7d61317f3d4bc4f4e9f8a96a7de45 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
20:35:36.0482 4840  sppuinotify - ok
20:35:36.0513 4840  [ 441fba48bff01fdb9d5969ebc1838f0b ] srv            C:\Windows\system32\DRIVERS\srv.sys
20:35:36.0607 4840  srv - ok
20:35:36.0622 4840  [ b4adebbf5e3677cce9651e0f01f7cc28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
20:35:36.0654 4840  srv2 - ok
20:35:36.0700 4840  [ 27e461f0be5bff5fc737328f749538c3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
20:35:36.0700 4840  srvnet - ok
20:35:36.0716 4840  [ 51b52fbd583cde8aa9ba62b8b4298f33 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
20:35:36.0747 4840  SSDPSRV - ok
20:35:36.0763 4840  [ ab7aebf58dad8daab7a6c45e6a8885cb ] SstpSvc        C:\Windows\system32\sstpsvc.dll
20:35:36.0794 4840  SstpSvc - ok
20:35:36.0810 4840  [ f3817967ed533d08327dc73bc4d5542a ] stexstor        C:\Windows\system32\drivers\stexstor.sys
20:35:36.0810 4840  stexstor - ok
20:35:36.0856 4840  [ 8dd52e8e6128f4b2da92ce27402871c1 ] stisvc          C:\Windows\System32\wiaservc.dll
20:35:36.0888 4840  stisvc - ok
20:35:36.0903 4840  [ d01ec09b6711a5f8e7e6564a4d0fbc90 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
20:35:36.0903 4840  swenum - ok
20:35:36.0919 4840  [ e08e46fdd841b7184194011ca1955a0b ] swprv          C:\Windows\System32\swprv.dll
20:35:36.0981 4840  swprv - ok
20:35:37.0012 4840  [ bf9ccc0bf39b418c8d0ae8b05cf95b7d ] SysMain        C:\Windows\system32\sysmain.dll
20:35:37.0075 4840  SysMain - ok
20:35:37.0090 4840  [ e3c61fd7b7c2557e1f1b0b4cec713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
20:35:37.0122 4840  TabletInputService - ok
20:35:37.0293 4840  [ 34d92e8cb04dcaeeae054fede7526282 ] TabletServiceWacom C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
20:35:37.0434 4840  TabletServiceWacom - ok
20:35:37.0449 4840  [ 40f0849f65d13ee87b9a9ae3c1dd6823 ] TapiSrv        C:\Windows\System32\tapisrv.dll
20:35:37.0496 4840  TapiSrv - ok
20:35:37.0512 4840  [ 1be03ac720f4d302ea01d40f588162f6 ] TBS            C:\Windows\System32\tbssvc.dll
20:35:37.0543 4840  TBS - ok
20:35:37.0605 4840  [ acb82bda8f46c84f465c1afa517dc4b9 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
20:35:37.0683 4840  Tcpip - ok
20:35:37.0730 4840  [ acb82bda8f46c84f465c1afa517dc4b9 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
20:35:37.0761 4840  TCPIP6 - ok
20:35:37.0777 4840  [ df687e3d8836bfb04fcc0615bf15a519 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
20:35:37.0824 4840  tcpipreg - ok
20:35:37.0824 4840  [ 3371d21011695b16333a3934340c4e7c ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
20:35:37.0886 4840  TDPIPE - ok
20:35:37.0917 4840  [ 51c5eceb1cdee2468a1748be550cfbc8 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
20:35:37.0948 4840  TDTCP - ok
20:35:37.0980 4840  [ ddad5a7ab24d8b65f8d724f5c20fd806 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
20:35:37.0995 4840  tdx - ok
20:35:38.0011 4840  [ 561e7e1f06895d78de991e01dd0fb6e5 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
20:35:38.0011 4840  TermDD - ok
20:35:38.0026 4840  [ 2e648163254233755035b46dd7b89123 ] TermService    C:\Windows\System32\termsrv.dll
20:35:38.0089 4840  TermService - ok
20:35:38.0104 4840  [ f0344071948d1a1fa732231785a0664c ] Themes          C:\Windows\system32\themeservice.dll
20:35:38.0120 4840  Themes - ok
20:35:38.0120 4840  [ e40e80d0304a73e8d269f7141d77250b ] THREADORDER    C:\Windows\system32\mmcss.dll
20:35:38.0151 4840  THREADORDER - ok
20:35:38.0167 4840  [ 7e7afd841694f6ac397e99d75cead49d ] TrkWks          C:\Windows\System32\trkwks.dll
20:35:38.0214 4840  TrkWks - ok
20:35:38.0245 4840  [ 773212b2aaa24c1e31f10246b15b276c ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:35:38.0292 4840  TrustedInstaller - ok
20:35:38.0307 4840  [ ce18b2cdfc837c99e5fae9ca6cba5d30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
20:35:38.0354 4840  tssecsrv - ok
20:35:38.0370 4840  [ d11c783e3ef9a3c52c0ebe83cc5000e9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
20:35:38.0385 4840  TsUsbFlt - ok
20:35:38.0401 4840  [ 9cc2ccae8a84820eaecb886d477cbcb8 ] TsUsbGD        C:\Windows\system32\drivers\TsUsbGD.sys
20:35:38.0416 4840  TsUsbGD - ok
20:35:38.0448 4840  [ 3566a8daafa27af944f5d705eaa64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
20:35:38.0494 4840  tunnel - ok
20:35:38.0510 4840  [ b4dd609bd7e282bfc683cec7eaaaad67 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
20:35:38.0526 4840  uagp35 - ok
20:35:38.0541 4840  [ ff4232a1a64012baa1fd97c7b67df593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
20:35:38.0588 4840  udfs - ok
20:35:38.0604 4840  [ 3cbdec8d06b9968aba702eba076364a1 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
20:35:38.0635 4840  UI0Detect - ok
20:35:38.0666 4840  [ 4bfe1bc28391222894cbf1e7d0e42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
20:35:38.0682 4840  uliagpkx - ok
20:35:38.0682 4840  [ dc54a574663a895c8763af0fa1ff7561 ] umbus          C:\Windows\system32\DRIVERS\umbus.sys
20:35:38.0713 4840  umbus - ok
20:35:38.0728 4840  [ b2e8e8cb557b156da5493bbddcc1474d ] UmPass          C:\Windows\system32\drivers\umpass.sys
20:35:38.0744 4840  UmPass - ok
20:35:38.0775 4840  [ d47ec6a8e81633dd18d2436b19baf6de ] upnphost        C:\Windows\System32\upnphost.dll
20:35:38.0822 4840  upnphost - ok
20:35:38.0869 4840  [ 6f1a3157a1c89435352ceb543cdb359c ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
20:35:38.0900 4840  usbccgp - ok
20:35:38.0916 4840  [ af0892a803fdda7492f595368e3b68e7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
20:35:38.0931 4840  usbcir - ok
20:35:38.0947 4840  [ c025055fe7b87701eb042095df1a2d7b ] usbehci        C:\Windows\system32\DRIVERS\usbehci.sys
20:35:38.0978 4840  usbehci - ok
20:35:39.0009 4840  [ 287c6c9410b111b68b52ca298f7b8c24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
20:35:39.0040 4840  usbhub - ok
20:35:39.0056 4840  [ 9840fc418b4cbd632d3d0a667a725c31 ] usbohci        C:\Windows\system32\drivers\usbohci.sys
20:35:39.0072 4840  usbohci - ok
20:35:39.0103 4840  [ 73188f58fb384e75c4063d29413cee3d ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
20:35:39.0118 4840  usbprint - ok
20:35:39.0150 4840  [ fed648b01349a3c8395a5169db5fb7d6 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:35:39.0196 4840  USBSTOR - ok
20:35:39.0212 4840  [ 62069a34518bcf9c1fd9e74b3f6db7cd ] usbuhci        C:\Windows\system32\DRIVERS\usbuhci.sys
20:35:39.0228 4840  usbuhci - ok
20:35:39.0259 4840  [ edbb23cbcf2cdf727d64ff9b51a6070e ] UxSms          C:\Windows\System32\uxsms.dll
20:35:39.0290 4840  UxSms - ok
20:35:39.0306 4840  [ c118a82cd78818c29ab228366ebf81c3 ] VaultSvc        C:\Windows\system32\lsass.exe
20:35:39.0306 4840  VaultSvc - ok
20:35:39.0352 4840  [ c5c876ccfc083ff3b128f933823e87bd ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
20:35:39.0384 4840  vdrvroot - ok
20:35:39.0399 4840  [ 8d6b481601d01a456e75c3210f1830be ] vds            C:\Windows\System32\vds.exe
20:35:39.0462 4840  vds - ok
20:35:39.0493 4840  [ da4da3f5e02943c2dc8c6ed875de68dd ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
20:35:39.0508 4840  vga - ok
20:35:39.0524 4840  [ 53e92a310193cb3c03bea963de7d9cfc ] VgaSave        C:\Windows\System32\drivers\vga.sys
20:35:39.0540 4840  VgaSave - ok
20:35:39.0555 4840  [ 2ce2df28c83aeaf30084e1b1eb253cbb ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
20:35:39.0555 4840  vhdmp - ok
20:35:39.0571 4840  [ e5689d93ffe4e5d66c0178761240dd54 ] viaide          C:\Windows\system32\drivers\viaide.sys
20:35:39.0586 4840  viaide - ok
20:35:39.0602 4840  [ d2aafd421940f640b407aefaaebd91b0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
20:35:39.0602 4840  volmgr - ok
20:35:39.0618 4840  [ a255814907c89be58b79ef2f189b843b ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
20:35:39.0633 4840  volmgrx - ok
20:35:39.0649 4840  [ 0d08d2f3b3ff84e433346669b5e0f639 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
20:35:39.0664 4840  volsnap - ok
20:35:39.0680 4840  [ 5e2016ea6ebaca03c04feac5f330d997 ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
20:35:39.0680 4840  vsmraid - ok
20:35:39.0727 4840  [ b60ba0bc31b0cb414593e169f6f21cc2 ] VSS            C:\Windows\system32\vssvc.exe
20:35:39.0805 4840  VSS - ok
20:35:39.0805 4840  [ 36d4720b72b5c5d9cb2b9c29e9df67a1 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
20:35:39.0836 4840  vwifibus - ok
20:35:39.0852 4840  [ 1c9d80cc3849b3788048078c26486e1a ] W32Time        C:\Windows\system32\w32time.dll
20:35:39.0883 4840  W32Time - ok
20:35:39.0930 4840  [ fe75777289278a4941fe6139e82b3bd9 ] wacmoumonitor  C:\Windows\system32\DRIVERS\wacmoumonitor.sys
20:35:39.0976 4840  wacmoumonitor - ok
20:35:40.0023 4840  [ e04d43c7d1641e95d35cae6086c7e350 ] wacommousefilter C:\Windows\system32\DRIVERS\wacommousefilter.sys
20:35:40.0023 4840  wacommousefilter - ok
20:35:40.0023 4840  [ 4e9440f4f152a7b944cb1663d3935a3e ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
20:35:40.0054 4840  WacomPen - ok
20:35:40.0101 4840  [ ec1ceb237e365330c1fcfc4876aa0ac0 ] wacomvhid      C:\Windows\system32\DRIVERS\wacomvhid.sys
20:35:40.0117 4840  wacomvhid - ok
20:35:40.0132 4840  [ 356afd78a6ed4457169241ac3965230c ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
20:35:40.0179 4840  WANARP - ok
20:35:40.0195 4840  [ 356afd78a6ed4457169241ac3965230c ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
20:35:40.0210 4840  Wanarpv6 - ok
20:35:40.0257 4840  [ 78f4e7f5c56cb9716238eb57da4b6a75 ] wbengine        C:\Windows\system32\wbengine.exe
20:35:40.0320 4840  wbengine - ok
20:35:40.0351 4840  [ 3aa101e8edab2db4131333f4325c76a3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
20:35:40.0366 4840  WbioSrvc - ok
20:35:40.0382 4840  [ 7368a2afd46e5a4481d1de9d14848edd ] wcncsvc        C:\Windows\System32\wcncsvc.dll
20:35:40.0429 4840  wcncsvc - ok
20:35:40.0429 4840  [ 20f7441334b18cee52027661df4a6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
20:35:40.0491 4840  WcsPlugInService - ok
20:35:40.0507 4840  [ 72889e16ff12ba0f235467d6091b17dc ] Wd              C:\Windows\system32\drivers\wd.sys
20:35:40.0522 4840  Wd - ok
20:35:40.0538 4840  [ 441bd2d7b4f98134c3a4f9fa570fd250 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
20:35:40.0554 4840  Wdf01000 - ok
20:35:40.0569 4840  [ bf1fc3f79b863c914687a737c2f3d681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
20:35:40.0647 4840  WdiServiceHost - ok
20:35:40.0647 4840  [ bf1fc3f79b863c914687a737c2f3d681 ] WdiSystemHost  C:\Windows\system32\wdi.dll
20:35:40.0663 4840  WdiSystemHost - ok
20:35:40.0678 4840  [ 3db6d04e1c64272f8b14eb8bc4616280 ] WebClient      C:\Windows\System32\webclnt.dll
20:35:40.0710 4840  WebClient - ok
20:35:40.0741 4840  [ c749025a679c5103e575e3b48e092c43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
20:35:40.0788 4840  Wecsvc - ok
20:35:40.0788 4840  [ 7e591867422dc788b9e5bd337a669a08 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
20:35:40.0819 4840  wercplsupport - ok
20:35:40.0850 4840  [ 6d137963730144698cbd10f202e9f251 ] WerSvc          C:\Windows\System32\WerSvc.dll
20:35:40.0866 4840  WerSvc - ok
20:35:40.0897 4840  [ 611b23304bf067451a9fdee01fbdd725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
20:35:40.0912 4840  WfpLwf - ok
20:35:40.0928 4840  [ 05ecaec3e4529a7153b3136ceb49f0ec ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
20:35:40.0944 4840  WIMMount - ok
20:35:40.0959 4840  WinDefend - ok
20:35:40.0959 4840  WinHttpAutoProxySvc - ok
20:35:40.0990 4840  [ 19b07e7e8915d701225da41cb3877306 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
20:35:41.0022 4840  Winmgmt - ok
20:35:41.0037 4840  WinRing0_1_2_0 - ok
20:35:41.0084 4840  [ bcb1310604aa415c4508708975b3931e ] WinRM          C:\Windows\system32\WsmSvc.dll
20:35:41.0162 4840  WinRM - ok
20:35:41.0209 4840  [ 4fada86e62f18a1b2f42ba18ae24e6aa ] Wlansvc        C:\Windows\System32\wlansvc.dll
20:35:41.0256 4840  Wlansvc - ok
20:35:41.0271 4840  [ f6ff8944478594d0e414d3f048f0d778 ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
20:35:41.0287 4840  WmiAcpi - ok
20:35:41.0318 4840  [ 38b84c94c5a8af291adfea478ae54f93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
20:35:41.0349 4840  wmiApSrv - ok
20:35:41.0380 4840  WMPNetworkSvc - ok
20:35:41.0380 4840  [ 96c6e7100d724c69fcf9e7bf590d1dca ] WPCSvc          C:\Windows\System32\wpcsvc.dll
20:35:41.0427 4840  WPCSvc - ok
20:35:41.0443 4840  [ 93221146d4ebbf314c29b23cd6cc391d ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
20:35:41.0474 4840  WPDBusEnum - ok
20:35:41.0490 4840  [ 6bcc1d7d2fd2453957c5479a32364e52 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
20:35:41.0521 4840  ws2ifsl - ok
20:35:41.0521 4840  [ e8b1fe6669397d1772d8196df0e57a9e ] wscsvc          C:\Windows\System32\wscsvc.dll
20:35:41.0552 4840  wscsvc - ok
20:35:41.0552 4840  WSearch - ok
20:35:41.0630 4840  [ d9ef901dca379cfe914e9fa13b73b4c4 ] wuauserv        C:\Windows\system32\wuaueng.dll
20:35:41.0708 4840  wuauserv - ok
20:35:41.0724 4840  [ d3381dc54c34d79b22cee0d65ba91b7c ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
20:35:41.0755 4840  WudfPf - ok
20:35:41.0786 4840  [ cf8d590be3373029d57af80914190682 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
20:35:41.0833 4840  WUDFRd - ok
20:35:41.0848 4840  [ 7a95c95b6c4cf292d689106bcae49543 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
20:35:41.0880 4840  wudfsvc - ok
20:35:41.0895 4840  [ 9a3452b3c2a46c073166c5cf49fad1ae ] WwanSvc        C:\Windows\System32\wwansvc.dll
20:35:41.0926 4840  WwanSvc - ok
20:35:41.0942 4840  ================ Scan global ===============================
20:35:41.0958 4840  (ba0cd8c393e8c9f83354106093832c7b) C:\Windows\system32\basesrv.dll
20:35:41.0989 4840  (eb6a48cc998e1090e44e8e7f1009a640) C:\Windows\system32\winsrv.dll
20:35:41.0989 4840  (eb6a48cc998e1090e44e8e7f1009a640) C:\Windows\system32\winsrv.dll
20:35:42.0020 4840  (d6160f9d869ba3af0b787f971db56368) C:\Windows\system32\sxssrv.dll
20:35:42.0036 4840  (24acb7e5be595468e3b9aa488b9b4fcb) C:\Windows\system32\services.exe
20:35:42.0036 4840  [Global] - ok
20:35:42.0036 4840  ================ Scan MBR ==================================
20:35:42.0051 4840  MBR (0x1B8)    (72b8ce41af0de751c946802b3ed844b4) \Device\Harddisk3\DR3
20:35:42.0114 4840  \Device\Harddisk3\DR3 - ok
20:35:42.0114 4840  MBR (0x1B8)    (8f558eb6672622401da993e1e865c861) \Device\Harddisk2\DR2
20:35:42.0192 4840  \Device\Harddisk2\DR2 - ok
20:35:42.0192 4840  MBR (0x1B8)    (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
20:35:42.0488 4840  \Device\Harddisk0\DR0 - ok
20:35:42.0488 4840  MBR (0x1B8)    (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1
20:35:43.0112 4840  \Device\Harddisk1\DR1 - ok
20:35:43.0112 4840  ================ Scan VBR ==================================
20:35:43.0112 4840  Boot (0x1200)  (eb18d0f696bdb11c93c007d84b5015ec) \Device\Harddisk3\DR3\Partition1
20:35:43.0112 4840  \Device\Harddisk3\DR3\Partition1 - ok
20:35:43.0112 4840  Boot (0x1200)  (ccf7a9bf17db74f7fa02370f245e8d96) \Device\Harddisk0\DR0\Partition1
20:35:43.0112 4840  \Device\Harddisk0\DR0\Partition1 - ok
20:35:43.0112 4840  Boot (0x1200)  (0e8a5513e8f54b0d946c20e57df98b85) \Device\Harddisk0\DR0\Partition2
20:35:43.0112 4840  \Device\Harddisk0\DR0\Partition2 - ok
20:35:43.0128 4840  Boot (0x1200)  (9ce049df542e05701c169f63b8fef1d5) \Device\Harddisk1\DR1\Partition1
20:35:43.0128 4840  \Device\Harddisk1\DR1\Partition1 - ok
20:35:43.0128 4840  ============================================================
20:35:43.0128 4840  Scan finished
20:35:43.0128 4840  ============================================================
20:35:43.0128 2916  Detected object count: 2
20:35:43.0128 2916  Actual detected object count: 2
20:36:21.0551 2916  Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user
20:36:21.0551 2916  Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:36:21.0551 2916  Sony SCSI Helper Service ( UnsignedFile.Multi.Generic ) - skipped by user
20:36:21.0551 2916  Sony SCSI Helper Service ( UnsignedFile.Multi.Generic ) - User select action: Skip

cosinus 15.08.2012 19:16
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

gruffelo 16.08.2012 21:26
Sorry, war die letzten Tage nicht fit - habe deshalb auch einen Bogen um den Computer gemacht.

Combofix Logfile:
Code:
ComboFix 12-08-16.01 - Wunstorf 16.08.2012  22:02:27.1.2 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.2046.1165 [GMT 2:00]
ausgeführt von:: c:\users\Wunstorf\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk
c:\windows\IsUn0407.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-07-16 bis 2012-08-16  ))))))))))))))))))))))))))))))
.
.
2012-08-15 04:50 . 2012-02-11 06:43        751104        ----a-w-        c:\windows\system32\win32spl.dll
2012-08-15 04:50 . 2012-02-11 06:36        559104        ----a-w-        c:\windows\system32\spoolsv.exe
2012-08-15 04:50 . 2012-02-11 06:36        67072        ----a-w-        c:\windows\splwow64.exe
2012-08-15 04:50 . 2012-02-11 05:43        492032        ----a-w-        c:\windows\SysWow64\win32spl.dll
2012-08-14 20:02 . 2012-05-05 08:36        503808        ----a-w-        c:\windows\system32\srcore.dll
2012-08-14 20:02 . 2012-05-05 07:46        43008        ----a-w-        c:\windows\SysWow64\srclient.dll
2012-08-14 20:02 . 2012-07-04 22:16        73216        ----a-w-        c:\windows\system32\netapi32.dll
2012-08-14 20:02 . 2012-07-04 22:13        59392        ----a-w-        c:\windows\system32\browcli.dll
2012-08-14 20:02 . 2012-07-04 22:13        136704        ----a-w-        c:\windows\system32\browser.dll
2012-08-14 20:02 . 2012-07-04 21:14        41984        ----a-w-        c:\windows\SysWow64\browcli.dll
2012-08-14 20:02 . 2012-07-18 18:15        3148800        ----a-w-        c:\windows\system32\win32k.sys
2012-08-14 20:02 . 2012-05-14 05:26        956928        ----a-w-        c:\windows\system32\localspl.dll
2012-08-14 05:20 . 2012-08-14 05:20        --------        d-----w-        C:\_OTL
2012-07-31 22:41 . 2012-08-02 04:25        --------        d-----w-        C:\01 Viren Scan-Ergebnisse
2012-07-31 04:16 . 2012-07-31 04:16        --------        d-----w-        c:\program files (x86)\ESET
2012-07-31 04:10 . 2012-07-31 04:10        --------        d-----w-        c:\users\Birgit\AppData\Roaming\Malwarebytes
2012-07-30 20:26 . 2012-07-30 20:26        --------        d-----w-        c:\users\Wunstorf\AppData\Roaming\Malwarebytes
2012-07-30 20:26 . 2012-07-30 20:26        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2012-07-30 20:26 . 2012-07-30 20:26        --------        d-----w-        c:\programdata\Malwarebytes
2012-07-30 20:26 . 2012-07-03 11:46        24904        ----a-w-        c:\windows\system32\drivers\mbam.sys
2012-07-29 14:17 . 2012-07-29 14:17        --------        d-----w-        c:\users\Default\AppData\Local\Microsoft Help
2012-07-29 07:36 . 2012-07-29 07:36        --------        d-----w-        c:\windows\SysWow64\wbem\en-US
2012-07-29 07:36 . 2012-07-29 07:36        --------        d-----w-        c:\windows\system32\wbem\en-US
2012-07-29 07:13 . 2012-05-04 11:00        366592        ----a-w-        c:\windows\system32\qdvd.dll
2012-07-29 07:13 . 2012-05-04 09:59        514560        ----a-w-        c:\windows\SysWow64\qdvd.dll
2012-07-28 11:12 . 2012-07-28 11:12        --------        d-----w-        c:\users\Birgit\AppData\Roaming\Avira
2012-07-28 11:01 . 2012-07-28 11:01        --------        d-----w-        c:\users\Birgit neu
2012-07-28 10:40 . 2012-07-28 10:40        --------        d-----w-        c:\program files (x86)\Avira
2012-07-28 10:40 . 2012-07-18 16:04        27760        ----a-w-        c:\windows\system32\drivers\avkmgr.sys
2012-07-26 18:22 . 2012-07-26 18:22        --------        d-----w-        c:\users\Wunstorf\AppData\Roaming\Avira
2012-07-26 17:59 . 2012-07-26 17:59        --------        d-----w-        c:\users\Wunstorf\AppData\Local\Macromedia
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-14 20:56 . 2011-07-13 13:37        62134624        ----a-w-        c:\windows\system32\MRT.exe
2012-07-18 16:04 . 2011-06-15 20:38        132832        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2012-07-18 16:04 . 2011-06-15 20:38        98848        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2012-06-14 17:12 . 2012-04-12 21:43        426184        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2012-06-14 17:12 . 2011-06-17 23:17        70344        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-06-09 05:43 . 2012-07-10 23:01        14172672        ----a-w-        c:\windows\system32\shell32.dll
2012-06-06 06:49 . 2012-06-06 06:49        1070152        ----a-w-        c:\windows\SysWow64\MSCOMCTL.OCX
2012-06-06 06:06 . 2012-07-10 23:01        2004480        ----a-w-        c:\windows\system32\msxml6.dll
2012-06-06 06:06 . 2012-07-10 23:01        1881600        ----a-w-        c:\windows\system32\msxml3.dll
2012-06-06 06:02 . 2012-07-10 23:01        1133568        ----a-w-        c:\windows\system32\cdosys.dll
2012-06-06 05:05 . 2012-07-10 23:01        1390080        ----a-w-        c:\windows\SysWow64\msxml6.dll
2012-06-06 05:05 . 2012-07-10 23:01        1236992        ----a-w-        c:\windows\SysWow64\msxml3.dll
2012-06-06 05:03 . 2012-07-10 23:01        805376        ----a-w-        c:\windows\SysWow64\cdosys.dll
2012-06-02 22:19 . 2012-06-21 10:20        38424        ----a-w-        c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-21 10:20        2428952        ----a-w-        c:\windows\system32\wuaueng.dll
2012-06-02 22:19 . 2012-06-21 10:20        57880        ----a-w-        c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-21 10:20        44056        ----a-w-        c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-21 10:20        701976        ----a-w-        c:\windows\system32\wuapi.dll
2012-06-02 22:15 . 2012-06-21 10:20        2622464        ----a-w-        c:\windows\system32\wucltux.dll
2012-06-02 22:15 . 2012-06-21 10:20        99840        ----a-w-        c:\windows\system32\wudriver.dll
2012-06-02 13:19 . 2012-06-21 10:19        186752        ----a-w-        c:\windows\system32\wuwebv.dll
2012-06-02 13:15 . 2012-06-21 10:19        36864        ----a-w-        c:\windows\system32\wuapp.exe
2012-06-02 05:50 . 2012-07-10 23:01        458704        ----a-w-        c:\windows\system32\drivers\cng.sys
2012-06-02 05:48 . 2012-07-10 23:01        95600        ----a-w-        c:\windows\system32\drivers\ksecdd.sys
2012-06-02 05:48 . 2012-07-10 23:01        151920        ----a-w-        c:\windows\system32\drivers\ksecpkg.sys
2012-06-02 05:45 . 2012-07-10 23:01        340992        ----a-w-        c:\windows\system32\schannel.dll
2012-06-02 05:44 . 2012-07-10 23:01        307200        ----a-w-        c:\windows\system32\ncrypt.dll
2012-06-02 04:40 . 2012-07-10 23:01        22016        ----a-w-        c:\windows\SysWow64\secur32.dll
2012-06-02 04:40 . 2012-07-10 23:01        225280        ----a-w-        c:\windows\SysWow64\schannel.dll
2012-06-02 04:39 . 2012-07-10 23:01        219136        ----a-w-        c:\windows\SysWow64\ncrypt.dll
2012-06-02 04:34 . 2012-07-10 23:01        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Messenger (Yahoo!)"="d:\yahoo\Messenger\YahooMessenger.exe" [2011-11-23 6497592]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-11-25 98304]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296]
"Adobe Acrobat Speed Launcher"="d:\adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2011-06-07 40376]
"Acrobat Assistant 8.0"="d:\adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2010-09-22 640440]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-29 937920]
"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2011-06-18 611712]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"Reader Application Helper"="c:\program files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe" [2012-01-31 892928]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-07-18 348664]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2011-6-15 110592]
ScreenManager Pro for LCD Ver3.2.0.lnk - d:\eizo\ScreenManager Pro for LCD\Lcdctrl.exe [2010-11-9 9114992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-06-15 1038088]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys [2011-03-17 13312]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\users\Wunstorf\Desktop\RealTemp_360\WinRing0x64.sys [x]
R4 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2012-07-18 27760]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-11-26 203776]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-07-18 86224]
S2 TabletServiceWacom;TabletServiceWacom;c:\program files\Tablet\Wacom\Wacom_Tablet.exe [2011-06-06 6438264]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-11-26 8120320]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-11-26 289792]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2012-07-28 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-12 17:12]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2010-11-03 1580368]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - d:\micros~1\Office14\ONBttnIE.dll/105
IE: An vorhandene PDF-Datei anfügen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: In Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Linkziel in Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Nach Microsoft E&xcel exportieren - d:\micros~1\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.178.1
DPF: {B07F54E6-0806-47DB-B5D8-398F240776F2} - file:///Z:/viewer/ORDcmViewCD.ocx
FF - ProfilePath - c:\users\Wunstorf\AppData\Roaming\Mozilla\Firefox\Profiles\81y6cuj1.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - c:\users\Birgit\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - c:\users\Birgit\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - c:\users\Birgit\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - c:\users\Birgit\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
AddRemove-Adobe Photoshop 6.0 - c:\windows\ISUN0407.EXE
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-08-16  22:12:22 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-08-16 20:12
.
Vor Suchlauf: 15 Verzeichnis(se), 21.595.537.408 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 35.007.242.240 Bytes frei
.
- - End Of File - - 0593E8B28B2CE9E667976A786CC634AE
--- --- ---

cosinus 17.08.2012 19:38
Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

gruffelo 31.08.2012 19:07
Liste der Anhänge anzeigen (Anzahl: 1)
Hallo cosinus, hoffe Du hast Dich gut erholt und hattest einen schönen Urlaub.

GMER hat nicht gemacht, was erwartet wurde. Starten, scannen --> alles normal. Nur war kein Log oder, was man kopieren oder abspeichern konnte, da. Habe es zweimal mit zwei unterschiedlich herunter geladenen Dateien versucht. Nix.
Mir ist nur aufgefallen, dass die Oberfläche etwas anders aussah. Vielleicht lag es daran. Auf der rechten Seite waren die Optionen System bis Libaries ausgegraut. Habe davon ein Bild gemacht, dass Du Dir im Anhang ansehen kannst.


OSAM funktionierte ohne Beanstandung. Hier ist der Log.

OSAM Logfile:
Code:
Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 19:39:26 on 31.08.2012

OS: Windows 7 Home Premium Edition Service Pack 1 (Build 7601), 64-bit
Default Browser: Mozilla Corporation Firefox 15.0

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"Adobe Flash Player Updater.job" - "Adobe Systems Incorporated" - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"adfs" (adfs) - "Adobe Systems, Inc." - C:\Windows\system32\drivers\adfs.sys
"avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys
"avkmgr" (avkmgr) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avkmgr.sys
"catchme" (catchme) - ? - C:\ComboFix\catchme.sys  (File not found)
"gdrv" (gdrv) - "Windows (R) Server 2003 DDK provider" - C:\Windows\gdrv.sys
"Hidmantl" (Hidmantl) - ? - C:\Windows\system32\drivers\Hidmantl.sys  (File not found)
"MBAMProtector" (MBAMProtector) - "Malwarebytes Corporation" - C:\Windows\system32\drivers\mbam.sys
"SiI-3114 SoftRaid 5 Controller" (Si3114r5) - "Silicon Image, Inc" - C:\Windows\System32\DRIVERS\Si3114r5.sys
"WinRing0_1_2_0" (WinRing0_1_2_0) - ? - C:\Users\Wunstorf\Desktop\RealTemp_360\WinRing0x64.sys  (File not found)

[Explorer]
-----( HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -  (File not found | COM-object registry key not found)
{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -  (File not found | COM-object registry key not found)
{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -  (File not found | COM-object registry key not found)
{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -  (File not found | COM-object registry key not found)
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{807573E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
-----( HKLM\Software\Classes\Protocols\Handler )-----
{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} "Acrobat Elements Context Menu" - "Adobe Systems Inc." - D:\Adobe\Acrobat 9.0\Acrobat Elements\ContextMenu.dll
{5E2121EE-0300-11D4-8D3B-444553540000} "Catalyst Context Menu extension" - ? -  (File not found | COM-object registry key not found)
{D66DC78C-4F61-447F-942B-3FB6980118CF} "CInfoTipShellExt Class" - "Microsoft Corporation" - D:\Microsoft Office\Office14\VISSHE.DLL
{506F4668-F13E-4AA1-BB04-B43203AB3CC0} "ImageExtractorShellExt Class" - "Microsoft Corporation" - D:\Microsoft Office\Office14\VISSHE.DLL
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - D:\Microsoft Office\Office14\msohevi.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\msoshext.dll
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\msoshext.dll
{0875DCB6-C686-4243-9432-ADCCF0B9F2D7} "Microsoft OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - D:\Microsoft Office\Office14\ONFILTER.DLL

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
<binary data> "Adobe PDF" - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
ITBar7Height "ITBar7Height" - ? -  (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -  (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} "Java Plug-in 1.6.0_22" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_31" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} "Java Plug-in 1.6.0_31" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_31" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\npjpi160_31.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
{B07F54E6-0806-47DB-B5D8-398F240776F2} "ORDcmViewCD Control" - "Oehm & Rehbein GmbH" - C:\Windows\DOWNLO~1\ORDCMV~1.OCX / file:///Z:/viewer/ORDcmViewCD.ocx
{E2883E8F-472F-4FB0-9522-AC9BF37916A7} "{E2883E8F-472F-4FB0-9522-AC9BF37916A7}" - ? -  (File not found | COM-object registry key not found) / hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - D:\Microsoft Office\Office14\ONBttnIE.dll
{FFFDC614-B694-4AE6-AB38-5D6374584B52} "Verknüpfte &OneNote-Notizen" - "Microsoft Corporation" - D:\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----
<binary data> "Adobe PDF" - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{AE7CD045-E861-484f-8273-0445EE161910} "Adobe PDF Conversion Toolbar Helper" - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} "Java(tm) Plug-In SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
{B4F3A835-0E21-4959-BA22-42B3008E02FF} "Office Document Cache Handler" - "Microsoft Corporation" - D:\MICROS~1\Office14\URLREDIR.DLL
{F4971EE7-DAA0-4053-9964-665D8EE6A077} "SmartSelect Class" - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\Users\Wunstorf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"Adobe Gamma Loader.lnk" - "Adobe Systems, Inc." - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe  (Shortcut exists | File exists)
"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"ScreenManager Pro for LCD Ver3.2.0.lnk" - "EIZO NANAO CORPORATION" - D:\EIZO\ScreenManager Pro for LCD\Lcdctrl.exe  (Shortcut exists | File exists)
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Acrobat Assistant 8.0" - "Adobe Systems Inc." - "D:\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
"Adobe Acrobat Speed Launcher" - "Adobe Systems Incorporated" - "D:\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"AdobeCS4ServiceManager" - "Adobe Systems Incorporated" - "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
"ATICustomerCare" - "Advanced Micro Devices, Inc." - "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
"avgnt" - "Avira Operations GmbH & Co. KG" - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"JMB36X IDE Setup" - ? - C:\Windows\RaidTool\xInsIDE.exe  (File found, but it contains no detailed information)
"Reader Application Helper" - "Sony Corporation" - C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
"StartCCC" - "Advanced Micro Devices, Inc." - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

[Network Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order )-----
"Adobe Drive CS4 Network" - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"Adobe PDF Port Monitor" - "Adobe Systems Inc" - C:\Windows\system32\AdobePDF.dll

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103" (WinDefend) - ? - C:\Program Files (x86)\Windows Defender\mpsvc.dll  (File not found)
"@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101" (WMPNetworkSvc) - ? - "C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe"  (File not found)
"Adobe LM Service" (Adobe LM Service) - ? - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
"Avira Echtzeit Scanner" (AntiVirService) - "Avira Operations GmbH & Co. KG" - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
"Avira Planer" (AntiVirSchedulerService) - "Avira Operations GmbH & Co. KG" - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
"FLEXnet Licensing Service" (FLEXnet Licensing Service) - "Acresso Software Inc." - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
"FLEXnet Licensing Service 64" (FLEXnet Licensing Service 64) - "Acresso Software Inc." - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
"Microsoft .NET Framework NGEN v4.0.30319_X64" (clr_optimization_v4.0.30319_64) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
"Office  Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
"Office Software Protection Platform" (osppsvc) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
"Sony SCSI Helper Service" (Sony SCSI Helper Service) - "Sony Corporation" - C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe
"TabletServiceWacom" (TabletServiceWacom) - "Wacom Technology, Corp." - C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru

aswMBR lief auch ohne Probleme:
Code:
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-31 20:08:12
-----------------------------
20:08:12.613    OS Version: Windows x64 6.1.7601 Service Pack 1
20:08:12.613    Number of processors: 2 586 0x170A
20:08:12.613    ComputerName: WUNSTORF-PC  UserName: Wunstorf
20:08:13.190    Initialize success
20:11:57.666    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-5
20:11:57.666    Disk 0 Vendor: WDC_WD2500AAKS-60L9A0 02.03E02 Size: 238475MB BusType: 11
20:11:57.666    Disk 1  \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP4T0L0-6
20:11:57.666    Disk 1 Vendor: WDC_WD20EARS-00MVWB0 51.0AB51 Size: 1907728MB BusType: 11
20:11:57.666    Disk 2  \Device\Harddisk2\DR2 -> \Device\Scsi\Si3114r51Port6Path0Target10Lun0
20:11:57.666    Disk 2 Vendor: SiImage_ 0000 Size: 476939MB BusType: 8
20:11:57.681    Disk 3  \Device\Harddisk3\DR3 -> \Device\Scsi\jraid1Port7Path0Target0Lun0
20:11:57.681    Disk 3 Vendor: RAID1___ 0000 Size: 476928MB BusType: 8
20:11:57.681    Disk 0 MBR read successfully
20:11:57.681    Disk 0 MBR scan
20:11:57.697    Disk 0 Windows 7 default MBR code
20:11:57.697    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS        78050 MB offset 63
20:11:57.697    Disk 0 Partition - 00    05    Extended            160422 MB offset 159846750
20:11:57.713    Disk 0 Partition 2 00    07    HPFS/NTFS NTFS      160422 MB offset 159846813
20:11:57.744    Disk 0 scanning C:\Windows\system32\drivers
20:12:03.578    Service scanning
20:12:12.767    Modules scanning
20:12:12.767    Disk 0 trace - called modules:
20:12:12.782    ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
20:12:12.782    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8002b57060]
20:12:12.782    3 CLASSPNP.SYS[fffff88001b5443f] -> nt!IofCallDriver -> [0xfffffa80026880c0]
20:12:12.782    5 ACPI.sys[fffff88000f167a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP3T0L0-5[0xfffffa8002561060]
20:12:12.798    Scan finished successfully
20:12:29.350    Disk 0 MBR has been saved successfully to "C:\Users\Wunstorf\Desktop\MBR.dat"
20:12:29.365    The log file has been saved successfully to "C:\Users\Wunstorf\Desktop\aswMBR.txt"

cosinus 31.08.2012 20:37
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

gruffelo 04.09.2012 19:27
Klingt gut.

Habe den Scan mit Malwarebytes am Sonntag gemacht. War wieder eine längere Aktion. Super-dingsbums mache heute abend.

Code:
Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.09.02.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Wunstorf :: WUNSTORF-PC [Administrator]

02.09.2012 22:14:55
mbam-log-2012-09-02 (22-14-55).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|K:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 849279
Laufzeit: 3 Stunde(n), 49 Minute(n), 13 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
Hier kommt der Rest. Konnte leider den obrigen Beitrag nicht mehr editieren. Deshalb geteilt.

Wenn wir mal fertig sind, wäre es dann möglich Tipps zum richtigen Antiviren-Programm und so auszutauschen?

Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 09/05/2012 at 08:08 AM

Application Version : 5.5.1012

Core Rules Database Version : 9171
Trace Rules Database Version: 6983

Scan type      : Complete Scan
Total Scan Time : 09:43:45

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Administrator

Memory items scanned      : 756
Memory threats detected  : 0
Registry items scanned    : 64991
Registry threats detected : 0
File items scanned        : 371028
File threats detected    : 929

Adware.Tracking Cookie
        C:\Users\Wunstorf\AppData\Roaming\Microsoft\Windows\Cookies\0LC1IO91.txt [ /ad.zanox.com ]
        C:\Users\Wunstorf\AppData\Roaming\Microsoft\Windows\Cookies\FCPE9OQH.txt [ /smartadserver.com ]
        C:\Users\Wunstorf\AppData\Roaming\Microsoft\Windows\Cookies\NS1XKBVL.txt [ /apmebf.com ]
        C:\Users\Wunstorf\AppData\Roaming\Microsoft\Windows\Cookies\DLK8ZDQI.txt [ /mediaplex.com ]
        C:\Users\Wunstorf\AppData\Roaming\Microsoft\Windows\Cookies\B8ULVO93.txt [ /doubleclick.net ]
        C:\Users\Wunstorf\AppData\Roaming\Microsoft\Windows\Cookies\R01F75QC.txt [ /adfarm1.adition.com ]
        C:\Users\Wunstorf\AppData\Roaming\Microsoft\Windows\Cookies\RJATTE3B.txt [ /ad1.adfarm1.adition.com ]
        C:\Users\Wunstorf\AppData\Roaming\Microsoft\Windows\Cookies\XEDOYZU6.txt [ /atdmt.com ]
        C:\Users\Wunstorf\AppData\Roaming\Microsoft\Windows\Cookies\BGM7NKU7.txt [ /zanox.com ]
        C:\Users\Wunstorf\AppData\Roaming\Microsoft\Windows\Cookies\O3NHU7C3.txt [ /fastclick.net ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\E2VRPX70.txt [ Cookie:birgit@www.zanox-affiliate.de/ ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\4JWJ0T31.txt [ Cookie:birgit@ad.zanox.com/ ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\1CMORZE0.txt [ Cookie:birgit@ad1.adfarm1.adition.com/ ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\VXM55ABQ.txt [ Cookie:birgit@partypoker.com/ ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\1EEIGJOG.txt [ Cookie:birgit@mediaplex.com/ ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\5OONR2B1.txt [ Cookie:birgit@adfarm1.adition.com/ ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\8L6TB7S0.txt [ Cookie:birgit@rts.pgmediaserve.com/ ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\KDVC6J5F.txt [ Cookie:birgit@zanox.com/ ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\U1GWGCC3.txt [ Cookie:birgit@zanox-affiliate.de/ ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\330BZ41Z.txt [ Cookie:birgit@de.partypoker.com/ ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\ZUHDEZLY.txt [ Cookie:birgit@zedo.com/ ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\GQ9NAF7T.txt [ Cookie:birgit@imrworldwide.com/cgi-bin ]
        C:\USERS\BIRGIT\AppData\Roaming\Microsoft\Windows\Cookies\OXQQIVNM.txt [ Cookie:birgit@fastclick.net/ ]
        C:\USERS\BIRGIT\Cookies\E2VRPX70.txt [ Cookie:birgit@www.zanox-affiliate.de/ ]
        C:\USERS\BIRGIT\Cookies\4JWJ0T31.txt [ Cookie:birgit@ad.zanox.com/ ]
        C:\USERS\BIRGIT\Cookies\1CMORZE0.txt [ Cookie:birgit@ad1.adfarm1.adition.com/ ]
        C:\USERS\BIRGIT\Cookies\VXM55ABQ.txt [ Cookie:birgit@partypoker.com/ ]
        C:\USERS\BIRGIT\Cookies\1EEIGJOG.txt [ Cookie:birgit@mediaplex.com/ ]
        C:\USERS\BIRGIT\Cookies\5OONR2B1.txt [ Cookie:birgit@adfarm1.adition.com/ ]
        C:\USERS\BIRGIT\Cookies\8L6TB7S0.txt [ Cookie:birgit@rts.pgmediaserve.com/ ]
        C:\USERS\BIRGIT\Cookies\KDVC6J5F.txt [ Cookie:birgit@zanox.com/ ]
        C:\USERS\BIRGIT\Cookies\U1GWGCC3.txt [ Cookie:birgit@zanox-affiliate.de/ ]
        C:\USERS\BIRGIT\Cookies\330BZ41Z.txt [ Cookie:birgit@de.partypoker.com/ ]
        C:\USERS\BIRGIT\Cookies\ZUHDEZLY.txt [ Cookie:birgit@zedo.com/ ]
        C:\USERS\BIRGIT\Cookies\GQ9NAF7T.txt [ Cookie:birgit@imrworldwide.com/cgi-bin ]
        C:\USERS\BIRGIT\Cookies\OXQQIVNM.txt [ Cookie:birgit@fastclick.net/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\FNRR3JDQ.txt [ Cookie:birgit neu@fastclick.net/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\BGPLF5R7.txt [ Cookie:birgit neu@partypoker.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\POQYCX5D.txt [ Cookie:birgit neu@apmebf.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\5U2C3QRL.txt [ Cookie:birgit neu@adfarm1.adition.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\PVITY3KY.txt [ Cookie:birgit neu@c.atdmt.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\29J36WRH.txt [ Cookie:birgit neu@ru4.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\4P5DH40Y.txt [ Cookie:birgit neu@serving-sys.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\F9KSMDNG.txt [ Cookie:birgit neu@msnportal.112.2o7.net/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\ILM29X92.txt [ Cookie:birgit neu@tracking.quisma.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\GGK4SRSX.txt [ Cookie:birgit neu@exoclick.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\BR3YBE0N.txt [ Cookie:birgit neu@webmasterplan.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\9GS7GPT1.txt [ Cookie:birgit neu@rts.pgmediaserve.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\FDW8036W.txt [ Cookie:birgit neu@ad2.adfarm1.adition.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\K8US0ZW2.txt [ Cookie:birgit neu@partypoker.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\SWGQQSPL.txt [ Cookie:birgit neu@invitemedia.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\AI3Z8G2W.txt [ Cookie:birgit neu@atdmt.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\PYBWXM3E.txt [ Cookie:birgit neu@de.partypoker.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\4DW518ZY.txt [ Cookie:birgit neu@tradedoubler.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\TCJUXT0N.txt [ Cookie:birgit neu@bs.serving-sys.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\9U4AQRGZ.txt [ Cookie:birgit neu@ad.yieldmanager.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\E5DX40ME.txt [ Cookie:birgit neu@doubleclick.net/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\3GYQMH39.txt [ Cookie:birgit neu@unitymedia.de/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\GDNMN3Q2.txt [ Cookie:birgit neu@apmebf.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\0V59074U.txt [ Cookie:birgit neu@lucidmedia.com/ ]
        C:\USERS\BIRGIT NEU\AppData\Roaming\Microsoft\Windows\Cookies\Low\3PX5UAG1.txt [ Cookie:birgit neu@adfarm1.adition.com/ ]
        C:\USERS\BIRGIT NEU\Cookies\FNRR3JDQ.txt [ Cookie:birgit neu@fastclick.net/ ]
        C:\USERS\BIRGIT NEU\Cookies\BGPLF5R7.txt [ Cookie:birgit neu@partypoker.com/ ]
        C:\USERS\BIRGIT NEU\Cookies\POQYCX5D.txt [ Cookie:birgit neu@apmebf.com/ ]
        C:\USERS\BIRGIT NEU\Cookies\5U2C3QRL.txt [ Cookie:birgit neu@adfarm1.adition.com/ ]
        C:\USERS\WUNSTORF\AppData\Roaming\Microsoft\Windows\Cookies\Low\BB7SHUNM.txt [ Cookie:wunstorf@apmebf.com/ ]
        C:\USERS\WUNSTORF\AppData\Roaming\Microsoft\Windows\Cookies\Low\wunstorf@doubleclick[1].txt [ Cookie:wunstorf@doubleclick.net/ ]
        C:\USERS\WUNSTORF\AppData\Roaming\Microsoft\Windows\Cookies\Low\U1YE36HU.txt [ Cookie:wunstorf@mediaplex.com/ ]
        C:\USERS\WUNSTORF\AppData\Roaming\Microsoft\Windows\Cookies\Low\wunstorf@atdmt[1].txt [ Cookie:wunstorf@atdmt.com/ ]
        C:\USERS\WUNSTORF\AppData\Roaming\Microsoft\Windows\Cookies\Low\wunstorf@tradedoubler[2].txt [ Cookie:wunstorf@tradedoubler.com/ ]
        C:\USERS\WUNSTORF\AppData\Roaming\Microsoft\Windows\Cookies\Low\wunstorf@msnportal.112.2o7[1].txt [ Cookie:wunstorf@msnportal.112.2o7.net/ ]
        C:\USERS\WUNSTORF\Cookies\0LC1IO91.txt [ Cookie:wunstorf@ad.zanox.com/ ]
        C:\USERS\WUNSTORF\Cookies\NS1XKBVL.txt [ Cookie:wunstorf@apmebf.com/ ]
        C:\USERS\WUNSTORF\Cookies\DLK8ZDQI.txt [ Cookie:wunstorf@mediaplex.com/ ]
        C:\USERS\WUNSTORF\Cookies\B8ULVO93.txt [ Cookie:wunstorf@doubleclick.net/ ]
        C:\USERS\WUNSTORF\Cookies\R01F75QC.txt [ Cookie:wunstorf@adfarm1.adition.com/ ]
        C:\USERS\WUNSTORF\Cookies\XEDOYZU6.txt [ Cookie:wunstorf@atdmt.com/ ]
        C:\USERS\WUNSTORF\Cookies\BGM7NKU7.txt [ Cookie:wunstorf@zanox.com/ ]
        C:\USERS\WUNSTORF\Cookies\O3NHU7C3.txt [ Cookie:wunstorf@fastclick.net/ ]
        cdn1.static.youporn.phncdn.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PYDYZV5T ]
        delivery.ibanner.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PYDYZV5T ]
        ia.media-imdb.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PYDYZV5T ]
        .imrworldwide.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .paypal.112.2o7.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .eyewonder.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .traffichaus.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ww251.smartadserver.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .a.revenuemax.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ads.crakmedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .eyewonder.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        fr.sitestat.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        fr.sitestat.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        accounts.youtube.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .aka-cdn-ns.adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .banners.adultfriendfinder.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .bdsm28.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .googleads.g.doubleclick.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        secure.img-cdn.mediaplex.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ad-emea.doubleclick.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tto2.traffictrack.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .guj.122.2o7.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .moviepilot.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .moviepilot.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .112.2o7.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .lucidmedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        stats.vertriebsassistent.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .handwerkerfinden.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .handwerkerfinden.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .yieldmanager.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6wjl4wkdzibp.stats.esomniture.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6wgmywldzghp.stats.esomniture.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        banner.testberichte.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6aekiqkajcep.stats.esomniture.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.youporn.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .enoratraffic.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .traveladvertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .traveladvertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        adserver.adreactor.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .mywebsearch.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ad-emea.doubleclick.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6wgkoeocjggp.stats.esomniture.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6wjmyemcpmao.stats.esomniture.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        openx.sexsearch.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tribalfusion.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        stats.vertriebsassistent.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .fliesendiscount.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .fliesendiscount.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        adx2.chip.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.sexandsubmission.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.sexandsubmission.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        bdsmfucktube.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.madsextube.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.madsextube.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .madsextube.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .madsextube.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adultadworld.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adultadworld.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .hardbondageporn.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .hardbondageporn.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        server.adformdsp.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adinterax.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .sexuallybroken.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .sexuallybroken.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        statse.webtrendslive.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .unister-adservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        api.zanox.ws [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        stat.dealtime.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .toplist.cz [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .quartermedia.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        server.adform.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ads2.zeusclicks.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .conrad.122.2o7.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .blogads.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .blogads.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ads.crakmedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.youporn.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        trafficjunky.xtube.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ads.trafficjunky.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        adserver.tiervermittlung.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        stat.onestat.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        stat.onestat.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        rts.pgmediaserve.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        rts.pgmediaserve.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        rts.pgmediaserve.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .de.partypoker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .sexad.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ads.ventivmedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .questionmarket.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .questionmarket.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        server.adformdsp.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adformdsp.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        server.adform.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .overture.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .clickfuse.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        s1.trafficmaxx.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.bannerstop.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .bannerstop.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .bannerstop.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .nikonjp.112.2o7.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        panzertraffic.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ads.crakmedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tracker.vinsight.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        tracking.sim-technik.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .stats.paypal.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        partners.webmasterplan.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        api.zanox.ws [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        tomtailor.dyntracker.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adxpansion.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ox-d.secure-clicks.org [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .syndication.traffichaus.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .syndication.traffichaus.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .exoclick.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adinterax.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ww251.smartadserver.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .bdsm28.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .bdsm28.de [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OU2QYADL.DEFAULT\COOKIES.SQLITE ]
        .microsoftwllivemkt.112.2o7.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6wjlygmdpicp.stats.esomniture.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .bdsm28.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .c1.atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .c1.atdmt.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .quartermedia.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .quartermedia.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ww251.smartadserver.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .skydeutschland.122.2o7.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        server.lon.liveperson.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        statse.webtrendslive.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        accounts.youtube.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .accounts.google.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .accounts.google.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .accounts.google.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .tracking.dsmmadvantage.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .avgtechnologies.112.2o7.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .tracker.vinsight.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        tomtailor.dyntracker.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .toplist.cz [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        accounts.youtube.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .bdsm28.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .bdsm28.de [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\BIRGIT NEU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XH7B31M3.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .paypal.112.2o7.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        stat.dealtime.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .a.revenuemax.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .content.yieldmanager.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        sales.liveperson.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .dmtracker.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .content.yieldmanager.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .euros4click.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        banner.testberichte.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .micron.112.2o7.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        www.usenext.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6aekogjdpcfp.stats.esomniture.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .verticaltechmedia.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .kontera.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .kontera.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .kontera.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6wflokic5glo.stats.esomniture.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.adserver01.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .bdsm28.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .bdsm28.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .bdsm28.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adserver.gs [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .nikonjp.112.2o7.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .dyntracker.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        tracking.mlsat02.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .aka-cdn-ns.adtech.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ww251.smartadserver.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tracking.mindshare.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        adx2.chip.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        adx2.chip.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        adx2.chip.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tribalfusion.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        tomtailor.dyntracker.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .tracker.vinsight.de [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        statse.webtrendslive.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\WUNSTORF\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\81Y6CUJ1.DEFAULT\COOKIES.SQLITE ]

gruffelo 15.09.2012 22:02
Hallo Cosinus,
geht es irgendwann wieder weiter?

cosinus 16.09.2012 18:13
Hab deinen Strang übersehen, hier ist einfach zuviel los

Sieht ok aus, da wurden nur Cookies gefunden.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )


Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

gruffelo 19.09.2012 21:36
Hallo, jetzt war ich etwas verhindert.

Nein, dass System scheint in Ordnung zu sein. Hat ab und zu Hänger beim Abspeichern, aber das scheint an der veralteten Hardware mit Windows 7 zu liegen. Live Security Platinium hat sich nicht mehr gemeldet.

MVPS scheint ein von Vertrauenswürdigen gefüllte Liste mit zu sperrenden Seiten und Aktionen zu sein. Habe ich das richtig verstanden? Macht das das System nicht langsamer?

Zur Zeit haben wir nur Avira Free Antivirus installiert. Macht es Sinn eine Vollversion zu installieren und wenn ja, welche?
Ich liebäugle mit Kaspersky Internet Security 2012?
Kann man auf die Firewall von Windows 7 verzichten, wenn man sich eine solche Suit kauft?


Vielen Dank für Deine Hilfe.

cosinus 20.09.2012 13:26
Zitat:
Macht das das System nicht langsamer?
Wenn überhaupt nur unwesentlich, spürbare Verlangsamungen hab ich weder unter WindowsXP, Win7 bzw. Linux gemerkt. Übrigens macht Spybot S&D mit deiner Immunisierung nichts anderes, da werden auch Tausende neue Zeilen in die Hostsdatei geschrieben.

Zitat:
Zur Zeit haben wir nur Avira Free Antivirus installiert. Macht es Sinn eine Vollversion zu installieren und wenn ja, welche?
Ich liebäugle mit Kaspersky Internet Security 2012?
Kann man auf die Firewall von Windows 7 verzichten, wenn man sich eine solche Suit kauft?
Also sry, aber du machst dir Gedanken so eine einfache Textdatei hosts mit vielen Einträgen könne den Rechner verlangsamen, aber bzgl einer Suite denkst du keine Sekunde daran? Schonmal die tw. haarstäubenden Testberichte zu Suites gelesen? :wtf: :confused:

Lass die Finger davon, belass es bei einem reinen Virenscanner, es muss auch nicht die Nagware (nörgelnd) Avira Free sein. Kannst ja Avast oder MSE nehmen oder reinen Virenscanner zum Bezahlen/Abonnieren zB Kaspersky AV


Zitat:
Kann man auf die Firewall von Windows 7 verzichten, wenn man sich eine solche Suit kauft?
Wenn überhaupt sollte man definitiv auf andere sog. Personal-Firewalls (PFW, auch als Desktop-Firewalls bekannt) verzichten und zum Einsatz sollte nur die von Windows kommen. Man sollte seinen Rechner nicht mit übertriebenen überflüssigen Schrott vermüllen. Die Windows-Firewall deckt alle Funktionen ab, die eine Software in die Kategorie noch vernünftig und zuverlässig erfüllen kann.

Rein theoretisch bräuchte man auf seinem Rechner gar keinen Paketfilter wie zB die Windows-Firewall wenn man nur zu Hause hinter seinem sauber konfigurierten Router arbeitet.


Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. Mit Hilfe von OTL kannst du auch viele Tools entfernen:

Starte bitte OTL und klicke auf Bereinigung.
Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen.


Malwarebytes zu behalten ist zu empfehlen. Kannst ja 1x im Monat damit einen Vollscan machen, aber immer vorher ans Update denken.


Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks => Adobe Flash Player Distribution | Adobe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.


Alle Zeitangaben in WEZ +1. Es ist jetzt 18:56 Uhr.
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55