Trojaner-Board
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Warnmeldung von Avira Y: autorun.inf' - Zugriff aus Sicherheitsgründen blockiert (https://www.trojaner-board.de/103318-warnmeldung-avira-y-autorun-inf-zugriff-sicherheitsgruenden-blockiert.html)

Rheingold 12.09.2011 21:43
Hallo Arne,
hier ist das Ergebnis vom Combofix Scan. Grüße, JasminaCombofix Logfile:
Code:
ComboFix 11-09-12.02 - Administrator 12.09.2011  22:26:11.1.8 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.4010.2187 [GMT 2:00]
ausgeführt von:: c:\users\Administrator\Desktop\Combofix\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\apps
c:\program files (x86)\Setup.exe
c:\programdata\Roaming
c:\windows\SysWow64\comct332.ocx
c:\windows\SysWow64\muzapp.exe
c:\windows\SysWow64\rnaph.dll
.
.
(((((((((((((((((((((((  Dateien erstellt von 2011-08-12 bis 2011-09-12  ))))))))))))))))))))))))))))))
.
.
2011-09-12 20:31 . 2011-09-12 20:31        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp
2011-09-12 20:31 . 2011-09-12 20:31        --------        d-----w-        c:\users\Nico\AppData\Local\temp
2011-09-12 20:31 . 2011-09-12 20:31        --------        d-----w-        c:\users\Jasmina\AppData\Local\temp
2011-09-12 20:31 . 2011-09-12 20:31        --------        d-----w-        c:\users\Jasmina 2\AppData\Local\temp
2011-09-12 20:31 . 2011-09-12 20:31        --------        d-----w-        c:\users\Gast\AppData\Local\temp
2011-09-12 20:31 . 2011-09-12 20:31        --------        d-----w-        c:\users\Default\AppData\Local\temp
2011-09-11 18:27 . 2011-09-11 18:27        --------        d-----w-        c:\program files (x86)\ESET
2011-09-11 09:02 . 2011-09-11 09:02        --------        d-----w-        c:\program files\CCleaner
2011-09-11 08:19 . 2011-09-11 08:19        --------        d-----w-        c:\program files (x86)\7-Zip
2011-09-10 15:47 . 2011-09-10 15:47        --------        d-----w-        c:\users\Jasmina 2\AppData\Roaming\OpenOffice.org
2011-09-10 15:01 . 2011-09-10 15:01        --------        d-----w-        c:\users\Administrator\AppData\Roaming\Malwarebytes
2011-09-10 14:37 . 2011-09-10 14:37        --------        d-----w-        c:\users\Administrator\AppData\Local\Eastman Kodak Company
2011-09-10 14:33 . 2011-09-10 14:33        --------        d-----w-        c:\users\Administrator\AppData\Roaming\Fingertapps
2011-09-10 12:55 . 2011-09-10 13:11        --------        d-----w-        c:\users\Jasmina\AppData\Roaming\DriverFinder
2011-09-10 11:05 . 2011-09-10 11:05        --------        d-----w-        c:\users\Jasmina\AppData\Roaming\Malwarebytes
2011-09-10 11:05 . 2011-07-06 17:52        41272        ----a-w-        c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-09-10 11:05 . 2011-09-10 11:05        --------        d-----w-        c:\programdata\Malwarebytes
2011-09-10 11:05 . 2011-09-10 11:05        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2011-09-10 11:05 . 2011-07-06 17:52        25912        ----a-w-        c:\windows\system32\drivers\mbam.sys
2011-09-10 10:45 . 2011-09-10 10:45        --------        d-----w-        c:\users\Jasmina\AppData\Roaming\QuickScan
2011-09-10 10:10 . 2011-09-10 10:10        --------        d-----w-        c:\program files (x86)\redist
2011-09-10 10:10 . 2011-09-10 10:10        --------        d-----w-        c:\program files (x86)\readmes
2011-09-10 10:10 . 2011-09-10 10:10        --------        d-----w-        c:\program files (x86)\licenses
2011-09-10 09:39 . 2011-09-11 08:59        2563808        ----a-w-        c:\program files (x86)\ccsetup310_slim.exe
2011-09-09 15:22 . 2011-09-09 15:22        --------        d-----w-        c:\users\Nico\AppData\Roaming\2K Sports
2011-09-07 09:57 . 2011-09-07 09:57        --------        d-----w-        c:\users\Jasmina\AppData\Roaming\Uniblue
2011-09-07 09:57 . 2011-09-07 09:57        --------        d-----w-        c:\program files (x86)\Uniblue
2011-09-07 09:57 . 2011-09-07 09:57        --------        d-----w-        c:\users\Jasmina\AppData\Local\PackageAware
2011-09-07 09:36 . 2011-09-07 09:36        --------        d-----w-        c:\users\Jasmina 2\AppData\Local\Adobe
2011-09-06 15:02 . 2011-09-06 15:02        --------        d-----w-        c:\users\Nico\AppData\Roaming\Reallusion
2011-09-06 14:52 . 2011-09-06 14:52        --------        d-----w-        c:\users\Nico\AppData\Local\Facebook
2011-09-01 18:49 . 2011-09-01 18:49        --------        d-----w-        c:\users\Jasmina\AppData\Roaming\dvdcss
2011-09-01 17:51 . 2011-09-01 17:51        --------        d-----w-        c:\users\Jasmina\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2011-08-30 14:11 . 2011-08-30 14:11        --------        d-----w-        c:\users\Jasmina\AppData\Local\Apple
2011-08-30 14:07 . 2011-08-30 14:08        --------        d-----w-        c:\users\Jasmina\AppData\Roaming\DVDVideoSoft
2011-08-28 10:11 . 2011-08-28 10:12        51975388        ----a-w-        c:\program files (x86)\VSX4_Pro_TBYB.exe.part
2011-08-28 08:58 . 2011-08-28 08:58        --------        d-----w-        c:\users\Jasmina\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2011-08-28 08:58 . 2011-08-28 08:58        --------        d-----w-        c:\program files (x86)\Adobe Download Assistant
2011-08-28 08:55 . 2011-08-28 08:56        2466704        ----a-w-        c:\program files (x86)\AdobeDownloadAssistant.exe
2011-08-27 11:09 . 2011-08-29 17:37        --------        d-----w-        c:\programdata\regid.1986-12.com.adobe
2011-08-27 11:04 . 2011-08-28 08:58        --------        d-----w-        c:\program files (x86)\Common Files\Adobe AIR
2011-08-27 10:56 . 2011-08-27 10:56        1228384        ----a-w-        c:\program files (x86)\PremiereElements_9_LS15.exe
2011-08-27 10:23 . 2011-09-12 20:24        --------        d-----w-        c:\program files (x86)\Common Files\Akamai
2011-08-27 10:23 . 2011-08-27 10:23        8353800        ----a-w-        c:\program files (x86)\Adobe_Premiere_Elements_9-AkamaiDLM.exe
2011-08-25 16:58 . 2011-08-26 08:12        --------        d-----w-        c:\program files (x86)\Mozilla Sunbird
2011-08-25 16:58 . 2011-08-25 16:58        6716353        ----a-w-        c:\program files (x86)\Sunbird_Setup_1.0_Beta_1.exe
2011-08-24 18:15 . 2011-07-09 05:26        2048        ----a-w-        c:\windows\system32\tzres.dll
2011-08-24 18:15 . 2011-07-09 04:29        2048        ----a-w-        c:\windows\SysWow64\tzres.dll
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-10 15:40 . 2011-05-19 11:51        168166968        ----a-w-        c:\program files (x86)\OOo_3.3.0_Win_x86_install-wJRE_de.exe
2011-08-30 14:06 . 2011-05-28 12:11        14563768        ----a-w-        c:\program files (x86)\FreeYouTubeToMP3Converter.exe
2011-08-30 14:04 . 2011-05-28 12:13        14212584        ----a-w-        c:\program files (x86)\FreeYouTubeToiPodConverter.exe
2011-08-13 06:16 . 2011-05-19 13:13        404640        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-08-06 15:45 . 2010-06-24 16:33        18328        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-07-22 05:22 . 2011-08-11 06:01        1638912        ----a-w-        c:\windows\system32\mshtml.tlb
2011-07-22 04:54 . 2011-08-11 06:01        1638912        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2011-07-18 14:59 . 2011-07-18 14:59        13522064        ----a-w-        c:\program files (x86)\Firefox Setup 5.0.1.exe
2011-07-16 05:41 . 2011-08-11 06:01        362496        ----a-w-        c:\windows\system32\wow64win.dll
2011-07-16 05:41 . 2011-08-11 06:01        243200        ----a-w-        c:\windows\system32\wow64.dll
2011-07-16 05:41 . 2011-08-11 06:01        13312        ----a-w-        c:\windows\system32\wow64cpu.dll
2011-07-16 05:39 . 2011-08-11 06:01        16384        ----a-w-        c:\windows\system32\ntvdm64.dll
2011-07-16 05:37 . 2011-08-11 06:01        421888        ----a-w-        c:\windows\system32\KernelBase.dll
2011-07-16 05:21 . 2011-08-11 06:01        6144        ---ha-w-        c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        5120        ---ha-w-        c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-16 04:29 . 2011-08-11 06:01        14336        ----a-w-        c:\windows\SysWow64\ntvdm64.dll
2011-07-16 04:26 . 2011-08-11 06:01        44032        ----a-w-        c:\windows\apppatch\acwow64.dll
2011-07-16 04:25 . 2011-08-11 06:01        25600        ----a-w-        c:\windows\SysWow64\setup16.exe
2011-07-16 04:24 . 2011-08-11 06:01        5120        ----a-w-        c:\windows\SysWow64\wow32.dll
2011-07-16 04:24 . 2011-08-11 06:01        272384        ----a-w-        c:\windows\SysWow64\KernelBase.dll
2011-07-16 04:15 . 2011-08-11 06:01        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        5120        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        4608        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
2011-07-16 02:21 . 2011-08-11 06:01        7680        ----a-w-        c:\windows\SysWow64\instnm.exe
2011-07-16 02:21 . 2011-08-11 06:01        2048        ----a-w-        c:\windows\SysWow64\user.exe
2011-07-16 02:17 . 2011-08-11 06:01        6144        ---ha-w-        c:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2011-07-16 02:17 . 2011-08-11 06:01        4608        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 02:17 . 2011-08-11 06:01        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 02:17 . 2011-08-11 06:01        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2011-07-09 02:46 . 2011-08-11 06:01        288768        ----a-w-        c:\windows\system32\drivers\mrxsmb10.sys
2011-07-06 18:22 . 2011-07-06 18:22        98304        ----a-w-        c:\windows\SysWow64\CmdLineExt.dll
2011-06-29 09:25 . 2011-05-22 13:54        88288        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2011-06-29 09:25 . 2011-05-22 13:54        123784        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2011-06-26 07:14 . 2009-07-14 02:36        175616        ----a-w-        c:\windows\system32\msclmd.dll
2011-06-26 07:14 . 2009-07-14 02:36        152576        ----a-w-        c:\windows\SysWow64\msclmd.dll
2011-06-24 05:34 . 2011-08-11 06:01        214528        ----a-w-        c:\windows\system32\winsrv.dll
2011-06-24 05:25 . 2011-08-11 06:01        338432        ----a-w-        c:\windows\system32\conhost.exe
2011-06-23 05:43 . 2011-08-11 06:01        5561216        ----a-w-        c:\windows\system32\ntoskrnl.exe
2011-06-23 04:33 . 2011-08-11 06:01        3912576        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe
2011-06-23 04:33 . 2011-08-11 06:01        3967872        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe
2011-06-21 19:48 . 2011-05-19 14:17        348160        ----a-w-        c:\windows\SysWow64\msvcr71.dll
2011-06-21 06:34 . 2011-08-11 06:01        1923968        ----a-w-        c:\windows\system32\drivers\tcpip.sys
2011-06-21 06:20 . 2011-08-11 06:01        1188864        ----a-w-        c:\windows\system32\wininet.dll
2011-06-21 05:28 . 2011-08-11 06:01        981504        ----a-w-        c:\windows\SysWow64\wininet.dll
2011-06-20 05:59 . 2011-05-21 18:35        2300696        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2011-06-20 05:59 . 2011-05-21 18:35        42776        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2011-06-15 10:02 . 2011-08-11 06:01        212992        ----a-w-        c:\windows\system32\odbctrac.dll
2011-06-15 10:02 . 2011-08-11 06:01        163840        ----a-w-        c:\windows\system32\odbccp32.dll
2011-06-15 10:02 . 2011-08-11 06:01        106496        ----a-w-        c:\windows\system32\odbccu32.dll
2011-06-15 10:02 . 2011-08-11 06:01        106496        ----a-w-        c:\windows\system32\odbccr32.dll
2011-06-15 08:55 . 2011-08-11 06:01        86016        ----a-w-        c:\windows\SysWow64\odbccu32.dll
2011-06-15 08:55 . 2011-08-11 06:01        81920        ----a-w-        c:\windows\SysWow64\odbccr32.dll
2011-06-15 08:55 . 2011-08-11 06:01        319488        ----a-w-        c:\windows\SysWow64\odbcjt32.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-07-29 17361032]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-06-06 35736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2010-08-19 487562]
"Dell DataSafe Online"="c:\program files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe" [2010-08-26 1117528]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]
"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [2010-11-17 514544]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-04-14 421160]
"TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2011-05-19 273544]
"Bing Bar"="c:\program files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe" [2010-04-27 243544]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-11-11 288088]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-03-28 281768]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"SMSTray"="c:\program files (x86)\Samsung\EmoDio\SMSTray.exe" [2009-04-16 479232]
"AccuWeatherWidget"="c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" [2011-05-30 885760]
"EKIJ5000StatusMonitor"="c:\windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe" [2011-03-03 2922496]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-07-06 449584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe" [2010-08-11 163040]
"DSUpdateLauncher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe" [2010-07-21 18240]
.
c:\users\Jasmina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\users\Jasmina 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
šberwachungstool fr die Intel© Turbo-Boost-Technik 2.0.lnk - c:\program files\Intel\TurboBoost\SignalIslandUi.exe [2010-11-29 204288]
.
c:\users\Nico\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages        REG_MULTI_SZ          kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-19 136176]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-19 136176]
R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2010-12-17 340240]
R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\DRIVERS\nvstusb.sys [x]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [x]
S2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-03-28 136360]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-01-24 901184]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-01-24 991296]
S2 DBService;DATA BECKER Update Service;c:\program files (x86)\Common Files\DATA BECKER Shared\DBService.exe [2010-05-28 2650112]
S2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files (x86)\Kodak\AiO\Center\EKAiOHostService.exe [2011-03-09 366000]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-06 366640]
S2 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2010-11-30 1997416]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2010-08-20 689472]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-11-29 378472]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys [x]
S3 AVer7231_x64;AVerMedia 7231 capture service;c:\windows\system32\DRIVERS\AVer7231_x64.sys [x]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-01-24 1298496]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [x]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [x]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NETwNs64;___ Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 qicflt;upper Device Filter Driver;c:\windows\system32\DRIVERS\qicflt.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
Akamai        REG_MULTI_SZ          Akamai
.
Inhalt des "geplante Tasks" Ordners
.
2011-09-10 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3230886925-126132133-2629391164-1004Core.job
- c:\users\Nico\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-09-06 14:52]
.
2011-09-12 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3230886925-126132133-2629391164-1004UA.job
- c:\users\Nico\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-09-06 14:52]
.
2011-09-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-19 11:46]
.
2011-09-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-19 11:46]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2010-12-14 6561384]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-12-11 2186856]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2010-11-29 312936]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-12 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-12 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-12 418328]
"FreeFallProtection"="c:\program files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe" [2010-12-17 686704]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-01-24 10355200]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-12-17 1933584]
"QuickSet"="c:\program files\Dell\QuickSet\QuickSet.exe" [2011-01-25 4479648]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"EKIJ5000StatusMonitor"="c:\windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe" [2011-03-03 2922496]
"DellStage"="c:\program files (x86)\Dell Stage\Dell Stage\stage_primary.exe" [2011-05-30 2055816]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-07-28 497648]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mLocal Page =
uInternet Settings,ProxyOverride = *.local
IE: Free YouTube to iPod Converter - c:\users\Administrator\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetoipodconverter.htm
IE: Free YouTube to MP3 Converter - c:\users\Administrator\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\3cers2zs.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine -
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-Conime - c:\windows\system32\conime.exe
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
  d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,48,df,76,3e,52,58,79,42,bd,6e,1b,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
  d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,48,df,76,3e,52,58,79,42,bd,6e,1b,\
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (Administrator)
"Progid"="ThunderbirdEML"
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Opera.HTML"
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Opera.HTML"
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mht\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Opera.HTML"
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mhtml\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Opera.HTML"
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpdp\UserChoice]
@Denied: (2) (Administrator)
"Progid"="NCH.MixPad.mpdp"
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (Administrator)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wdseml\UserChoice]
@Denied: (2) (Administrator)
"Progid"="ThunderbirdEML"
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wpp\UserChoice]
@Denied: (2) (Administrator)
"Progid"="NCH.WavePad.wpp"
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Opera.HTML"
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Opera.HTML"
.
[HKEY_USERS\S-1-5-21-3230886925-126132133-2629391164-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Opera.HTML"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
  00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2011-09-12  22:34:40
ComboFix-quarantined-files.txt  2011-09-12 20:34
.
Vor Suchlauf: 15 Verzeichnis(se), 136.793.264.128 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 136.465.199.104 Bytes frei
.
- - End Of File - - E42A9B362C837E0FA4912581552AF6C8
--- --- ---

Rheingold 12.09.2011 21:53
Echt nett, dass du dir so viel Mühe gibst. Bis morgen :sleepy:
Jasmina

cosinus 12.09.2011 22:01
Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung) Vista und Win7 User mit Rechtsklick "als Admininstartor starten"
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Rheingold 13.09.2011 07:47
Guten Morgen,
hier der aswMBR file:
aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-09-13 08:31:31
-----------------------------
08:31:31.884 OS Version: Windows x64 6.1.7601 Service Pack 1
08:31:31.884 Number of processors: 8 586 0x2A07
08:31:31.884 ComputerName: DELL-PC UserName:
08:31:33.772 Initialize success
08:34:07.295 AVAST engine defs: 11091201
08:34:23.768 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
08:34:23.784 Disk 0 Vendor: ST950042 D005 Size: 476940MB BusType: 3
08:34:23.799 Disk 0 MBR read successfully
08:34:23.799 Disk 0 MBR scan
08:34:23.815 Disk 0 Windows VISTA default MBR code
08:34:23.815 Service scanning
08:34:24.813 Modules scanning
08:34:24.813 Disk 0 trace - called modules:
08:34:24.845 ntoskrnl.exe CLASSPNP.SYS disk.sys stdcfltn.sys ACPI.sys iaStor.sys hal.dll
08:34:24.860 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80065dd790]
08:34:24.876 3 CLASSPNP.SYS[fffff8800185143f] -> nt!IofCallDriver -> [0xfffffa8006501cb0]
08:34:24.876 5 stdcfltn.sys[fffff88001b92c52] -> nt!IofCallDriver -> [0xfffffa8004b36590]
08:34:24.876 7 ACPI.sys[fffff88000e0b7a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004b3d050]
08:34:28.261 AVAST engine scan C:\Windows
08:34:30.710 AVAST engine scan C:\Windows\system32
08:36:16.151 AVAST engine scan C:\Windows\system32\drivers
08:36:29.130 AVAST engine scan C:\Users\Administrator
08:37:26.663 AVAST engine scan C:\ProgramData
08:39:10.434 Scan finished successfully
08:39:36.269 Disk 0 MBR has been saved successfully to "C:\Users\Administrator\Desktop\MBR.dat"
08:39:36.269 The log file has been saved successfully to "C:\Users\Administrator\Desktop\aswMBR.txt"

VIele Grüße
Jasmina

cosinus 13.09.2011 13:36
Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!


Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Rheingold 14.09.2011 06:44
Hallo,
hier nun der file von Super Anti Spyware:

SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 09/14/2011 at 00:25 AM

Application Version : 5.0.1118

Core Rules Database Version : 7683
Trace Rules Database Version: 5495

Scan type : Complete Scan
Total Scan Time : 01:32:56

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC Off - Administrator

Memory items scanned : 777
Memory threats detected : 0
Registry items scanned : 77044
Registry threats detected : 0
File items scanned : 234057
File threats detected : 264

Adware.Tracking Cookie
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@ad.adserver01[1].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@ad.zanox[1].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@ad2.adfarm1.adition[1].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@adfarm1.adition[2].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@adform[2].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@adx.chip[2].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@apmebf[2].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@atdmt[1].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@doubleclick[1].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@fastclick[1].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@mediaplex[1].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@microsoftwlsearchcrm.112.2o7[1].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@msnportal.112.2o7[1].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@serving-sys[1].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@track.adform[1].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@tradedoubler[1].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@tribalfusion[2].txt
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\administrator@zanox[1].txt
C:\USERS\JASMINA 2\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\JASMINA_2@MEDIAPLEX[1].TXT
C:\USERS\JASMINA 2\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\JASMINA_2@APMEBF[2].TXT
C:\USERS\JASMINA 2\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\JASMINA_2@FASTCLICK[1].TXT
.adfarm1.adition.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
tracking.gameforge.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
www.trafficjmp.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
www.trafficjmp.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.adviva.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.zanox.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
track.adform.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.bs.serving-sys.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.adserver.gs [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
track.adform.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.adform.net [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
ad3.adfarm1.adition.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
ad1.adfarm1.adition.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
ad2.adfarm1.adition.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
ww251.smartadserver.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.traffictrack.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
www.active-tracking.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
www.active-tracking.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
www.active-tracking.de [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\JASMINA 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZDEDLR67.DEFAULT\COOKIES.SQLITE ]
C:\USERS\NICO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\NICO@APMEBF[2].TXT
C:\USERS\NICO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\NICO@DOUBLECLICK[1].TXT
C:\USERS\NICO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\NICO@FASTCLICK[1].TXT
C:\USERS\NICO\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\NICO@MEDIAPLEX[1].TXT
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
statse.webtrendslive.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
adserv.brandaffinity.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
adserv.brandaffinity.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.tripod.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.c.gigcount.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
www.active-tracking.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ads2.net2day.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ads3.net2day.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ads3.net2day.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ads2.net2day.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.a.revenuemax.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
isparkmedia.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
on.isparkmedia.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adviva.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.olympiaverlag.122.2o7.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.server.cpmstar.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.server.cpmstar.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.server.cpmstar.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
studivz.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.nike.112.2o7.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adserver.adtechus.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.tribalfusion.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
adserver2.clipkit.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.clickfuse.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.clickfuse.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.clickfuse.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.clickfuse.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ad3.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ad4.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ad2.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ad1.adfarm1.adition.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ww251.smartadserver.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\NICO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3X0XNX0B.DEFAULT\COOKIES.SQLITE ]

Rheingold 14.09.2011 06:50
... und der malwarebeytes log file:

Malwarebytes' Anti-Malware 1.51.2.1300
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Datenbank Version: 7710

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

14.09.2011 01:23:34
mbam-log-2011-09-14 (01-23-34).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 437169
Laufzeit: 36 Minute(n), 43 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Rheingold 14.09.2011 08:29
hallo arne
der eset scan folgt noch.
viele grüße
jasmina

Rheingold 14.09.2011 09:56
so, jetzt der log file vom eset scan.
viele grüße
jasmina

:dankeschoen:


ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=69081a717b6703468f3d7f83e414fbb1
# end=stopped
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-11 06:42:28
# local_time=2011-09-11 08:42:28 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=1797 16775165 100 94 178930 52302693 115963 0
# compatibility_mode=5893 16776574 100 94 6693113 67395722 0 0
# compatibility_mode=8192 67108863 100 0 225 225 0 0
# scanned=7921
# found=0
# cleaned=0
# scan_time=676
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=69081a717b6703468f3d7f83e414fbb1
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-11 08:16:39
# local_time=2011-09-11 10:16:39 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=1797 16775165 100 94 179678 52303441 116711 0
# compatibility_mode=5893 16776574 100 94 6693861 67396470 0 0
# compatibility_mode=8192 67108863 100 0 973 973 0 0
# scanned=203845
# found=1
# cleaned=0
# scan_time=5578
C:\Program Files (x86)\Uniblue\RegistryBooster\rb_ubm.exe Win32/RegistryBooster application (unable to clean) 00000000000000000000000000000000 I
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=69081a717b6703468f3d7f83e414fbb1
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-14 05:28:43
# local_time=2011-09-14 07:28:43 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=1797 16775165 100 94 386028 52509791 140713 0
# compatibility_mode=5893 16776574 100 94 6900211 67602820 0 0
# compatibility_mode=8192 67108863 100 0 207323 207323 0 0
# scanned=189864
# found=1
# cleaned=0
# scan_time=5153
C:\Program Files (x86)\Uniblue\RegistryBooster\rb_ubm.exe Win32/RegistryBooster application (unable to clean) 00000000000000000000000000000000 I
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=69081a717b6703468f3d7f83e414fbb1
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-14 05:33:55
# local_time=2011-09-14 07:33:55 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=1797 16775165 100 94 391414 52515177 146099 0
# compatibility_mode=5893 16776574 100 94 6905597 67608206 0 0
# compatibility_mode=8192 67108863 100 0 212709 212709 0 0
# scanned=5960
# found=0
# cleaned=0
# scan_time=79
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=69081a717b6703468f3d7f83e414fbb1
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-14 07:10:39
# local_time=2011-09-14 09:10:39 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=1797 16775165 100 94 392704 52516467 147389 0
# compatibility_mode=5893 16776574 100 94 6906887 67609496 0 0
# compatibility_mode=8192 67108863 100 0 213999 213999 0 0
# scanned=189863
# found=1
# cleaned=0
# scan_time=4592
C:\Program Files (x86)\Uniblue\RegistryBooster\rb_ubm.exe Win32/RegistryBooster application (unable to clean) 00000000000000000000000000000000 I
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=69081a717b6703468f3d7f83e414fbb1
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-14 08:49:34
# local_time=2011-09-14 10:49:34 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=1797 16775165 100 94 398573 52522336 153258 0
# compatibility_mode=5893 16776574 100 94 6912756 67615365 0 0
# compatibility_mode=8192 67108863 100 0 219868 219868 0 0
# scanned=189865
# found=1
# cleaned=0
# scan_time=4658
C:\Program Files (x86)\Uniblue\RegistryBooster\rb_ubm.exe Win32/RegistryBooster application (unable to clean) 00000000000000000000000000000000 I

cosinus 14.09.2011 12:30
Sieht ok aus, da wurden nur Cookies gefunden.
Noch Probleme oder weitere Funde in der Zwischenzeit?

Rheingold 14.09.2011 18:36
Das Hauptproblem, als die Meldung zu Y:autorun.inf ist nicht mehr aufgetaucht, auch sonst keine neuen Meldungen. Zu Denken gibt mir, dass ich im Benutzerkonto "Nico" einige Programme (Open Office) nicht öffnen kann, obwohl ich sie freigegeben habe. Kann das unter Umständen eine Nachwirkung von WIndows Live Family Safety (Jugendschutz) sein? Überhaupt, ist das Programm empfehlenswert oder habe ich damit auch daneben gegriffen?

Viele Grüße
Jasmina

cosinus 14.09.2011 21:04
Zitat:
Zu Denken gibt mir, dass ich im Benutzerkonto "Nico" einige Programme (Open Office) nicht öffnen kann, obwohl ich sie freigegeben habe.
Was verstehst du unter "freigeben"?
Eine Freigabe ist ein Netzwerke-Share, damit andere Rechner auf diese "Freigabe" (und das ist ein Ordner!) zugreifen können!
Auf einem und demselben Rechner muss man keine Freigaben erstellen, damit andere Benutzer diese Programme nutzen können!

Rheingold 15.09.2011 06:00
okaaaay .... :confused: gut zu wissen ....
jedenfalls kann nicht mehr auf alle programme (open office, real player) und dateien zugegriffen werden. Fehlermeldungen, die auftauchten, dass bestimmte exe-Dateien nicht geöffnet werden können, kommen nicht mehr, aber die programme lassen sich eben nicht öffnen.

Aber das ist vielleicht gar kein Viren Problem? Vielleicht sollte ich das Konto einfach löschen und neu einrichten? Bei den anderen Benutzerkonten laufen die Programme nämlich.

Danke, auch dafür, dass du meine Unwissenheit erträgst.

Viele Grüße
Jasmina

cosinus 15.09.2011 09:49
Einfach mal die Programme neu installieren...

Rheingold 16.09.2011 15:58
Hallo Arne,
Neuinstallation habe ich probiert, ändert aber nichts. Dann habe ich das Konto von Standard in Administrator geändert und noch mal Open Office installiert. Das hat aber auch nicht geholfen. Vielleicht sollte ich es einfach löschen und dann neu einrichten? Denn das scheint ja das letzte Problem zu sein. Oder spricht was dagegen.

Danke und viele Grüße
Jasmina


Alle Zeitangaben in WEZ +1. Es ist jetzt 15:50 Uhr.
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131