Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   antivir hat trojaner gefunden (https://www.trojaner-board.de/103517-antivir-hat-trojaner-gefunden.html)

dergoe 19.09.2011 10:03
antivir hat trojaner gefunden
 
hallo,
mein rechner lief zuletzt im netz sehr langsam.
nach einem vollscan sagt mir auch antivir, dass er 7 funde fand.
(zb. TrojanDownloader Win32/Sinowal)
diese wurden in quarantäne geschoben.
nun bin ich mir unsicher, ob mein rechner wieder sauber is.
was kann ich tun, um diese sicherheit wieder zu haben?
bitte um hilfe!
mfg
chris

dergoe 19.09.2011 10:54
anbei der otl.txt

eine extra.txt habe ich nicht

dergoe 19.09.2011 12:33
malwarebytes findet auch, trotz entfernen immer wieder neue funde!

hier einige logs

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 7747

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19120

19.09.2011 13:09:35
mbam-log-2011-09-19 (13-09-35).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 195681
Laufzeit: 2 Minute(n), 46 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 12

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NvCplDaemonTool (Trojan.Sinowal) -> Value: NvCplDaemonTool -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Users\GOE\drloadwF4.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\scancdiskf29.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Local\Temp\0.3377317918253635.exe (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Local\Temp\0.46781351200474985.exe (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Local\Temp\AFC6.tmp (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Local\Temp\C4CC.tmp (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Local\Temp\Low\2E87.tmp (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Local\Temp\Low\A838.tmp (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Local\Temp\Low\install.exe (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Local\Temp\Low\wpbt0.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Local\Temp\Low\wpbt1.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\scandisk.lnk (Trojan.Downloader) -> Quarantined and deleted successfully.






Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 7747

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19120

19.09.2011 13:18:31
mbam-log-2011-09-19 (13-18-31).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 195240
Laufzeit: 3 Minute(n), 37 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 3

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NvCplDaemonTool (Trojan.Sinowal) -> Value: NvCplDaemonTool -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Users\GOE\drloadwF4.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\scancdiskf29.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\scandisk.lnk (Trojan.Downloader) -> Quarantined and deleted successfully.





Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 7747

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19120

19.09.2011 13:34:28
mbam-log-2011-09-19 (13-34-28).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 195343
Laufzeit: 2 Minute(n), 3 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 3

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NvCplDaemonTool (Trojan.Sinowal) -> Value: NvCplDaemonTool -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Users\GOE\drloadwF4.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\scancdiskf29.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\scandisk.lnk (Trojan.Downloader) -> Quarantined and deleted successfully.




Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 7747

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19120

19.09.2011 13:44:42
mbam-log-2011-09-19 (13-44-42).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 195502
Laufzeit: 3 Minute(n), 56 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 3

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NvCplDaemonTool (Trojan.Sinowal) -> Value: NvCplDaemonTool -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scancdiskf29.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\drloadwf4.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\scandisk.lnk (Trojan.Downloader) -> Quarantined and deleted successfully.

cosinus 19.09.2011 14:42
Führ bitte auch ESET aus, danach sehen wir weiter:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


dergoe 19.09.2011 20:25
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=72630ef7ac2cc44a96d1556367e5032e
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-19 05:17:36
# local_time=2011-09-19 07:17:36 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1792 16777215 100 0 36265443 36265443 0 0
# compatibility_mode=5892 16776638 100 56 5368579 153965396 0 0
# compatibility_mode=8192 67108863 100 0 142 142 0 0
# scanned=442495
# found=6
# cleaned=0
# scan_time=11166
C:\ACER\Preload\Autorun\APP\Nero Move it Essentials\Nero Move it Essentials\unit_app_75\Toolbar.exe Win32/Toolbar.AskSBar application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Trial Creator\Export\SoftDMA_Trial\Autorun.inf INF/Autorun.gen trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\GOE\drloadwF4.dll a variant of Win32/Kryptik.SVY trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scancdiskf29.dll a variant of Win32/Kryptik.SVY trojan (unable to clean) 00000000000000000000000000000000 I
D:\altes zeug\sicherheitskopie steffis eigene dateien feb 2011\downloads-proggies\ms office\Aktivieren\mini-KMS_Activator_v1.052.exe Win32/HackKMS.A application (unable to clean) 00000000000000000000000000000000 I
${Memory} a variant of Win32/Kryptik.SVY trojan 00000000000000000000000000000000 I

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=72630ef7ac2cc44a96d1556367e5032e
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-19 07:21:33
# local_time=2011-09-19 09:21:33 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1792 16777215 100 0 36277524 36277524 0 0
# compatibility_mode=5892 16776638 100 56 5380660 153977477 0 0
# compatibility_mode=8192 67108863 100 0 12223 12223 0 0
# scanned=248325
# found=4
# cleaned=0
# scan_time=6522
C:\ACER\Preload\Autorun\APP\Nero Move it Essentials\Nero Move it Essentials\unit_app_75\Toolbar.exe Win32/Toolbar.AskSBar application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Trial Creator\Export\SoftDMA_Trial\Autorun.inf INF/Autorun.gen trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\GOE\drloadwF4.dll a variant of Win32/Kryptik.SVY trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scancdiskf29.dll a variant of Win32/Kryptik.SVY trojan (unable to clean) 00000000000000000000000000000000 I

dergoe 19.09.2011 20:48
ich habe das programm 2 mal laufen lassen.
der zweite durchgang ging wesentlich schneller, obwohl ich eigentlich nur eine obsolete sicherheitskopie vom laufwerk D: gelöscht habe.

es sieht so aus, als wäre dort ein passwort-generator abgelegt gewesen.
ich versichere, so etwas nie benutzt zu haben!

ich hoffe inständig, dass sie mir glauben schenken!

cosinus 19.09.2011 20:52
Zitat:
D:\altes zeug\sicherheitskopie steffis eigene dateien feb 2011\downloads-proggies\ms office\Aktivieren\mini-KMS_Activator_v1.052.exe Win32/HackKMS.A application
Lass ich gerade mal noch so durchgehen, weil das ja offensichtlich gesicherte Fremddaten sind. http://www.trojaner-board.de/images/icons/icon32.gif

Seh ich das richtig, dass du "nur" Quickscans mit Malwarebytes gemacht hast?

dergoe 19.09.2011 20:55
ich bin mir nicht sicher, soll ich einen vollständigen scan durchführen und hier ablegen?

btw: soll nach jedem scan ein neustart durchgeführt werden?

cosinus 19.09.2011 20:56
Nein, ein Reboot ist nicht nötig

dergoe 19.09.2011 21:00
ja, es waren "nur" quickscans mit malwarebytes.

mfg
chris

dergoe 20.09.2011 00:13
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 7747

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19120

20.09.2011 00:49:02
mbam-log-2011-09-20 (00-49-02).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|L:\|)
Durchsuchte Objekte: 620835
Laufzeit: 1 Stunde(n), 44 Minute(n), 52 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 3

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NvCplDaemonTool (Trojan.Sinowal) -> Value: NvCplDaemonTool -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scancdiskf29.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\drloadwf4.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\scandisk.lnk (Trojan.Downloader) -> Quarantined and deleted successfully.


nach dem reboot kam folgendes pop-up:

Sie versuchen, eine Datei des Typs "Programmbibliothek"(.dll) zu
öffnen.
Siese Dateien werden vom Betriebssystem und verschiedenen
Programmen verwendet. Bearbeteuin oder Verändern kann
möglicerweise das System beschädigen.
Klicken Sie auf "Öffnen mit", um die Datei trotzdem zu öffnen oder auf
"Abbrechen" um den Vorgang abzubrechen.

ich wählte "Abbrechen".

sogleich habe ich noch einmal einen quick-scan mit malwarebytes durchgeführt:



Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 7747

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19120

20.09.2011 01:03:54
mbam-log-2011-09-20 (01-03-54).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 195341
Laufzeit: 2 Minute(n), 20 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 3

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NvCplDaemonTool (Trojan.Sinowal) -> Value: NvCplDaemonTool -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scancdiskf29.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\drloadwf4.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\Users\GOE\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\scandisk.lnk (Trojan.Downloader) -> Quarantined and deleted successfully.

cosinus 20.09.2011 10:12
Mach bitte ein neues OTL-Log:

CustomScan mit OTL

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
wininit.exe
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT

dergoe 20.09.2011 10:36
guten morgen arne,

ich freue mich sehr, dass sie sich so meiner annehmen!

hier der OTL.txt:OTL Logfile:
Code:
OTL logfile created on: 20.09.2011 11:18:07 - Run 4
OTL by OldTimer - Version 3.2.29.1    Folder = C:\Users\GOE\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19120)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
5,99 Gb Total Physical Memory | 4,12 Gb Available Physical Memory | 68,76% Memory free
12,18 Gb Paging File | 10,02 Gb Available in Paging File | 82,24% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 366,72 Gb Total Space | 164,99 Gb Free Space | 44,99% Space Free | Partition Type: NTFS
Drive D: | 550,13 Gb Total Space | 538,45 Gb Free Space | 97,88% Space Free | Partition Type: NTFS
Drive J: | 243,13 Mb Total Space | 230,39 Mb Free Space | 94,76% Space Free | Partition Type: FAT
Drive L: | 931,28 Gb Total Space | 597,93 Gb Free Space | 64,21% Space Free | Partition Type: FAT32
 
Computer Name: GOE3 | User Name: GOE | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2011.09.19 11:21:24 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\GOE\Desktop\OTL.exe
PRC - [2011.06.28 13:45:04 | 000,428,200 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
PRC - [2011.06.28 13:45:04 | 000,340,136 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
PRC - [2011.06.28 13:45:04 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.05.25 09:25:28 | 002,214,504 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011.05.20 22:35:16 | 000,378,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011.04.27 23:59:34 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2011.04.11 22:05:03 | 000,107,832 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe
PRC - [2011.04.11 22:04:55 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2011.03.28 11:21:16 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2010.11.02 18:34:04 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.03.22 15:00:06 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
PRC - [2009.11.11 16:17:02 | 000,771,360 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\AirPort\APAgent.exe
PRC - [2009.03.05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008.12.16 11:52:02 | 001,155,072 | ---- | M] (MAGIX AG) -- C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe
PRC - [2008.10.24 15:35:44 | 000,128,296 | ---- | M] () -- C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
PRC - [2008.07.29 18:53:00 | 000,500,784 | ---- | M] (Egis Incorporated) -- C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
PRC - [2008.05.20 18:50:50 | 000,269,448 | ---- | M] (CyberLink) -- C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
PRC - [2007.04.10 23:46:35 | 000,709,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\vVX3000.exe
PRC - [2006.12.19 10:30:26 | 000,081,920 | ---- | M] (Prolific Technology Inc.) -- C:\Windows\SysWOW64\IoctlSvc.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2011.06.24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011.06.24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - [2011.09.12 09:22:07 | 000,411,432 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011.08.07 01:51:18 | 003,542,616 | ---- | M] () [Auto | Running] -- c:\program files (x86)\common files\akamai\netsession_win_2da1ebd.dll -- (Akamai)
SRV - [2011.06.28 13:45:04 | 000,428,200 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService)
SRV - [2011.06.28 13:45:04 | 000,340,136 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe -- (AntiVirMailService)
SRV - [2011.06.28 13:45:04 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.05.25 09:25:28 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011.05.20 22:35:16 | 000,378,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011.04.27 23:59:34 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011.04.11 22:05:03 | 000,107,832 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
SRV - [2011.04.11 22:04:55 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2011.04.01 11:14:30 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.03.28 11:21:16 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.03.30 06:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService)
SRV - [2008.12.16 11:52:02 | 001,155,072 | ---- | M] (MAGIX AG) [Unknown | Running] -- C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe -- (Fabs)
SRV - [2008.10.24 15:35:44 | 000,128,296 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe -- (AAV UpdateService)
SRV - [2008.10.01 12:43:56 | 000,024,576 | ---- | M] () [Auto | Running] -- C:\Programme\Acer\Empowering Technology\Service\ETService.exe -- (ETService)
SRV - [2008.08.07 11:10:02 | 003,276,800 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2008.07.29 18:53:00 | 000,500,784 | ---- | M] (Egis Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe -- (eDataSecurity Service)
SRV - [2008.05.20 18:50:50 | 000,269,448 | ---- | M] (CyberLink) [Auto | Running] -- C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe -- (Acer HomeMedia Connect Service)
SRV - [2007.05.17 23:45:33 | 000,443,752 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc)
SRV - [2006.12.19 10:30:26 | 000,081,920 | ---- | M] (Prolific Technology Inc.) [Auto | Running] -- C:\Windows\SysWOW64\IoctlSvc.exe -- (PLFlash DeviceIoControl Service)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2011.06.28 13:45:04 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\avipbb.sys -- (avipbb)
DRV:64bit: - [2011.06.28 13:45:04 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\DRIVERS\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2011.05.13 15:37:54 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2011.05.10 08:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2010.04.23 15:42:41 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\atksgt.sys -- (atksgt)
DRV:64bit: - [2010.04.23 15:42:40 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2009.10.01 02:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
DRV:64bit: - [2009.06.30 09:37:16 | 000,033,800 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\pavboot64.sys -- (pavboot)
DRV:64bit: - [2009.05.18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GearAspiWDM)
DRV:64bit: - [2008.07.29 18:53:50 | 000,060,976 | ---- | M] (Egis Incorporated) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\PSDVdisk.sys -- (psdvdisk)
DRV:64bit: - [2008.07.29 18:53:50 | 000,021,040 | ---- | M] (Egis Incorporated) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\PSDNServ.sys -- (PSDNServ)
DRV:64bit: - [2008.07.29 18:53:48 | 000,022,064 | ---- | M] (Egis Incorporated) [File_System | Boot | Running] -- C:\Windows\SysNative\DRIVERS\psdfilter.sys -- (PSDFilter)
DRV:64bit: - [2008.06.13 10:41:54 | 000,316,544 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\e1y60x64.sys -- (e1yexpress) Intel(R)
DRV:64bit: - [2008.05.23 16:54:38 | 000,033,888 | ---- | M] (Intel Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\iqvw64e.sys -- (NAL)
DRV:64bit: - [2008.04.10 10:20:00 | 000,028,160 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\gwfilt64.sys -- (gwfilt64)
DRV:64bit: - [2008.01.30 11:48:32 | 000,016,384 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\NTIDrvr.sys -- (NTIDrvr)
DRV:64bit: - [2008.01.30 11:48:16 | 000,016,384 | ---- | M] (NewTech Infosystems Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper)
DRV:64bit: - [2007.04.10 23:46:36 | 002,105,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\VX3000.sys -- (VX3000)
DRV:64bit: - [2005.07.29 17:35:59 | 000,402,456 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\iaStor.sys -- (iaStor)
DRV - [2008.09.30 10:42:20 | 000,017,952 | ---- | M] (Acer, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\int15_64.sys -- (int15)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=0409&m=aspire_m7720
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=0409&m=aspire_m7720
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=0409&m=aspire_m7720
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=0409&m=aspire_m7720
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=0409&m=aspire_m7720
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://global.acer.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.supportersclub.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook:  - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.supportersclub.de/index.php?id=gaestebuch"
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.071303000004
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@pandasecurity.com/activescan: C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll (Panda Security)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.732: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=1.0.0.0: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.01.14 20:34:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.09.08 00:14:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.08.07 03:38:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011.08.28 11:56:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
 
[2010.09.08 15:42:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\GOE\AppData\Roaming\mozilla\Extensions
[2010.09.08 15:42:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\GOE\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011.05.07 10:39:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\GOE\AppData\Roaming\mozilla\Firefox\Profiles\shmzz143.default\extensions
[2010.04.28 17:32:57 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\GOE\AppData\Roaming\mozilla\Firefox\Profiles\shmzz143.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009.10.18 14:37:52 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Users\GOE\AppData\Roaming\mozilla\Firefox\Profiles\shmzz143.default\extensions\moveplayer@movenetworks.com
[2010.09.27 18:52:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2009.11.17 12:34:20 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files (x86)\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.06.10 06:25:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.09.27 18:52:39 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2011.09.08 00:14:32 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2009.02.11 21:16:16 | 000,054,600 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npbittorrent.dll
[2010.07.17 05:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011.05.07 10:42:34 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.05.07 10:42:34 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.05.07 10:42:34 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.05.07 10:42:34 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.05.07 10:42:34 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.05.07 10:42:34 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google ()
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
 
O1 HOSTS File: ([2010.11.16 10:39:28 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1      localhost
O1 - Hosts: ::1      localhost
O2:64bit: - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\ActiveToolBand.dll (Egis)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - No CLSID value found.
O2 - BHO: (no name) - {1ED16E0A-E8C4-40A0-8BC2-79485D21F796} - No CLSID value found.
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:64bit: - HKLM..\Run: [VX3000] C:\Windows\vVX3000.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [AirPort Base Station Agent] C:\Program Files (x86)\AirPort\APAgent.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [eRecoveryService]  File not found
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [PCMMediaSharing] C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [NvCplDaemonTool] rundll32.exe C:\Users\GOE\DRLOAD~1.DLL,_IWMPEvents File not found
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe File not found
O4 - Startup: C:\Users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scancdiskf29.dll (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~2\MI1933~1\OFFICE11\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MI1933~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~2\MI1933~1\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MI1933~1\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MI1933~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A16FB70D-991F-44D8-8ECA-A85DB8C8187B}: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\GOE\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
O24 - Desktop BackupWallPaper: C:\Users\GOE\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{85e1bac4-87ec-11de-a299-00226863b9f7}\Shell - "" = AutoRun
O33 - MountPoints2\{85e1bac4-87ec-11de-a299-00226863b9f7}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
 
MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk - C:\PROGRA~2\HP\DIGITA~1\bin\hpqtra08.exe - (Hewlett-Packard Co.)
MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SmartCopy.lnk -  - File not found
MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SmartLauncher.lnk -  - File not found
MsConfig:64bit - StartUpReg: Acer Empowering Technology Monitor - hkey= - key= - C:\Programme\Acer\Empowering Technology\SysMonitor.exe ()
MsConfig:64bit - StartUpReg: Adobe ARM - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: eDataSecurity Loader - hkey= - key= - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDSloader.exe (Egis Incorporated)
MsConfig:64bit - StartUpReg: EmpoweringTechnology - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: iTunesHelper - hkey= - key= - C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: LifeCam - hkey= - key= - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
MsConfig:64bit - StartUpReg: msnmsgr - hkey= - key= - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
MsConfig:64bit - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: RtHDVCpl - hkey= - key= - C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
MsConfig:64bit - StartUpReg: Skytel - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: SunJavaUpdateSched - hkey= - key= - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
MsConfig:64bit - StartUpReg: WinampAgent - hkey= - key= - C:\Program Files (x86)\Winamp\winampa.exe ()
MsConfig:64bit - State: "startup" - Reg Error: Key error.
 
SafeBootMin:64bit: AppMgmt - Service
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet:64bit: AppMgmt - Service
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: WudfPf - Driver
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WudfPf - Driver
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX:64bit: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Reg Error: Value error.
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.mkdmp3enc - C:\PROGRA~2\ACERAR~1\ACERVI~1\Kernel\Burner\MKDMP3Enc.ACM File not found
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.09.19 16:09:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2011.09.19 16:06:57 | 002,322,184 | ---- | C] (ESET) -- C:\Users\GOE\Desktop\esetsmartinstaller_enu.exe
[2011.09.19 13:03:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.09.19 11:21:23 | 000,582,656 | ---- | C] (OldTimer Tools) -- C:\Users\GOE\Desktop\OTL.exe
[2011.09.19 11:15:14 | 000,000,000 | ---D | C] -- C:\Users\GOE\Desktop\troja
[2011.09.18 01:20:25 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.09.01 17:45:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011.09.01 17:45:20 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2009.03.05 01:03:50 | 000,049,152 | R--- | C] ( ) -- C:\Windows\Interop.IWshRuntimeLibrary.dll
 
========== Files - Modified Within 30 Days ==========
 
[2011.09.20 11:21:39 | 000,000,885 | ---- | M] () -- C:\Users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scandisk.lnk
[2011.09.20 11:19:40 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.09.20 11:19:40 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.09.20 11:12:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2011.09.20 11:00:00 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.09.20 09:25:57 | 001,445,310 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.09.20 09:25:57 | 000,628,504 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.09.20 09:25:57 | 000,595,798 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.09.20 09:25:57 | 000,126,248 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.09.20 09:25:57 | 000,103,872 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.09.20 09:19:55 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\LogConfigTemp.xml
[2011.09.20 09:19:43 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.09.20 09:19:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.09.19 22:47:07 | 000,148,992 | ---- | M] () -- C:\Users\GOE\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.09.19 16:06:58 | 002,322,184 | ---- | M] (ESET) -- C:\Users\GOE\Desktop\esetsmartinstaller_enu.exe
[2011.09.19 13:03:39 | 000,000,952 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.09.19 11:51:00 | 000,015,755 | ---- | M] () -- C:\Users\GOE\Desktop\OTL.zip
[2011.09.19 11:21:24 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\GOE\Desktop\OTL.exe
[2011.09.19 11:18:00 | 000,000,000 | ---- | M] () -- C:\Users\GOE\defogger_reenable
[2011.09.19 11:15:04 | 000,050,477 | ---- | M] () -- C:\Users\GOE\Desktop\Defogger.exe
[2011.09.16 03:02:40 | 000,000,118 | ---- | M] () -- C:\Windows\SysNative\MRT.INI
[2011.09.01 17:45:36 | 000,001,698 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.08.31 17:00:50 | 000,025,416 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.08.25 00:04:56 | 000,002,253 | ---- | M] () -- C:\Users\GOE\Desktop\AirPort-Dienstprogramm.lnk
 
========== Files Created - No Company Name ==========
 
[2011.09.20 00:49:32 | 000,000,885 | ---- | C] () -- C:\Users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scandisk.lnk
[2011.09.19 13:03:39 | 000,000,952 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.09.19 11:51:00 | 000,015,755 | ---- | C] () -- C:\Users\GOE\Desktop\OTL.zip
[2011.09.19 11:18:00 | 000,000,000 | ---- | C] () -- C:\Users\GOE\defogger_reenable
[2011.09.19 11:15:04 | 000,050,477 | ---- | C] () -- C:\Users\GOE\Desktop\Defogger.exe
[2011.09.16 03:02:40 | 000,000,118 | ---- | C] () -- C:\Windows\SysNative\MRT.INI
[2011.09.01 17:45:36 | 000,001,698 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.08.28 11:56:04 | 000,001,953 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
[2011.05.23 11:37:35 | 000,000,030 | ---- | C] () -- C:\Program Files (x86)\Exiferupdate.ini
[2011.05.20 22:35:28 | 000,304,744 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011.04.11 22:04:37 | 000,107,832 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.04.11 22:04:36 | 002,250,024 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2011.04.11 22:04:36 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2010.09.23 18:30:03 | 000,004,096 | -H-- | C] () -- C:\Users\GOE\AppData\Local\keyfile3.drm
[2010.03.14 16:31:15 | 000,040,960 | R--- | C] () -- C:\Windows\SysWow64\psfind.dll
[2010.01.22 02:12:20 | 000,000,036 | ---- | C] () -- C:\Users\GOE\AppData\Local\housecall.guid.cache
[2010.01.14 20:33:46 | 000,023,714 | ---- | C] () -- C:\Windows\hpqins15.dat
[2009.12.16 23:44:12 | 000,078,210 | ---- | C] () -- C:\Windows\hpqins05.dat
[2009.09.18 08:00:18 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2009.09.18 08:00:00 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin
[2009.09.18 07:59:42 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.08.17 13:00:10 | 000,010,606 | ---- | C] () -- C:\Windows\hpwscr19.dat
[2009.08.17 12:58:50 | 000,202,840 | ---- | C] () -- C:\Windows\hpwins19.dat
[2009.08.17 12:58:50 | 000,000,997 | ---- | C] () -- C:\Windows\hpwmdl19.dat
[2009.08.13 14:21:28 | 000,819,200 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2009.08.13 14:21:28 | 000,180,224 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2009.08.13 14:15:35 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009.07.17 01:35:34 | 000,000,329 | ---- | C] () -- C:\Windows\wininit.ini
[2009.07.06 18:46:30 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2009.06.29 19:20:24 | 000,148,992 | ---- | C] () -- C:\Users\GOE\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.06.29 16:33:32 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009.04.14 09:04:43 | 000,000,044 | ---- | C] () -- C:\Windows\Acer(Normal).ini
[2009.04.14 09:04:43 | 000,000,042 | ---- | C] () -- C:\Windows\Acer(Wide).ini
[2009.03.04 19:02:04 | 000,000,026 | ---- | C] () -- C:\Windows\Irremote.ini
[2009.03.04 17:51:01 | 000,120,200 | ---- | C] () -- C:\Windows\SysWow64\DLLDEV32i.dll
[2009.03.04 17:51:01 | 000,007,119 | ---- | C] () -- C:\Windows\mgxoschk.ini
[2009.03.04 16:45:16 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2008.01.21 04:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
[2007.04.10 23:46:36 | 000,015,498 | ---- | C] () -- C:\Windows\VX3000.ini
[2006.11.02 17:37:05 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 14:37:14 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2006.11.02 14:24:17 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2006.11.02 14:18:17 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006.11.02 11:47:54 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.05.25 02:22:06 | 000,053,248 | ---- | C] () -- C:\Windows\bdoscandel.exe
[2005.03.02 14:12:14 | 000,000,483 | ---- | C] () -- C:\Windows\bdoscandellang.ini
[2003.02.20 17:53:42 | 000,005,702 | ---- | C] () -- C:\Windows\SysWow64\OUTLPERF.INI
 
========== LOP Check ==========
 
[2009.03.04 18:42:09 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Acer GameZone Console
[2009.10.18 23:47:45 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Amazon
[2011.09.11 02:55:47 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Audacity
[2011.02.10 14:23:29 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\elsterformular
[2009.06.30 00:17:53 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\eSobi
[2009.07.26 22:55:28 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\FrostWire
[2009.11.17 12:39:25 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\ICQ
[2011.05.23 12:42:39 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\jStrip
[2009.10.22 00:42:09 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Mp3tag
[2011.07.25 16:16:05 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Philipp Winterberg
[2010.09.08 15:42:20 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Thunderbird
[2011.09.20 02:09:53 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2009.03.04 18:42:09 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Acer GameZone Console
[2011.02.26 17:28:05 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Adobe
[2009.10.18 23:47:45 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Amazon
[2011.06.25 13:23:50 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Apple Computer
[2011.09.11 02:55:47 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Audacity
[2010.07.26 22:30:26 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Avira
[2009.06.30 00:18:34 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\CyberLink
[2010.09.26 16:54:21 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\dvdcss
[2011.02.10 14:23:29 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\elsterformular
[2009.06.30 00:17:53 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\eSobi
[2009.07.26 22:55:28 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\FrostWire
[2009.06.29 16:15:10 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Google
[2009.08.17 13:08:53 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\HP
[2010.07.13 17:25:31 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\HpUpdate
[2009.11.17 12:39:25 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\ICQ
[2009.06.29 16:10:42 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Identities
[2011.05.23 12:42:39 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\jStrip
[2009.06.29 16:11:18 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Macromedia
[2010.11.15 12:46:25 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Malwarebytes
[2006.11.02 17:07:25 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Media Center Programs
[2011.02.26 17:28:05 | 000,000,000 | --SD | M] -- C:\Users\GOE\AppData\Roaming\Microsoft
[2009.06.29 18:10:47 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Mozilla
[2009.10.22 00:42:09 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Mp3tag
[2011.07.04 17:25:45 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Nero
[2010.10.28 00:54:16 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\NVIDIA
[2011.07.25 16:16:05 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Philipp Winterberg
[2010.03.31 09:01:50 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Real
[2009.06.29 18:54:16 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Talkback
[2010.09.08 15:42:20 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Thunderbird
[2009.08.13 14:04:46 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\U3
[2011.08.10 09:40:57 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\vlc
[2011.09.15 15:09:01 | 000,000,000 | ---D | M] -- C:\Users\GOE\AppData\Roaming\Winamp
 
< %APPDATA%\*.exe /s >
[2009.07.26 21:57:45 | 000,000,000 | ---- | M] () -- C:\Users\GOE\AppData\Roaming\FrostWire\.NetworkShare\Incomplete\T-4506256-LimeWireWin4.16.6.exe
[2010.04.19 16:52:49 | 000,443,912 | ---- | M] (RealNetworks, Inc.) -- C:\Users\GOE\AppData\Roaming\Real\Update\setup3.11\setup.exe
[2007.10.23 09:27:20 | 000,110,592 | ---- | M] () -- C:\Users\GOE\AppData\Roaming\U3\temp\cleanup.exe
[2008.05.02 10:41:48 | 003,493,888 | -H-- | M] (SanDisk Corporation) -- C:\Users\GOE\AppData\Roaming\U3\temp\Launchpad Removal.exe
 
< %SYSTEMDRIVE%\*.exe >
 
 
< MD5 for: AGP440.SYS  >
[2008.01.21 04:46:51 | 000,064,568 | ---- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 -- C:\Windows\SysNative\drivers\AGP440.sys
[2008.01.21 04:46:51 | 000,064,568 | ---- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_163188bf770e4ab0\AGP440.sys
[2008.01.21 04:46:51 | 000,064,568 | ---- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_181d01cb743015fc\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2008.01.21 04:46:50 | 000,022,584 | ---- | M] (Microsoft Corporation) MD5=1898FAE8E07D97F2F6C2D5326C633FAC -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_3956c39dd9e73fd2\atapi.sys
[2009.04.11 09:15:00 | 000,020,952 | ---- | M] (Microsoft Corporation) MD5=E68D9B3A3905619732F7FE039466A623 -- C:\Windows\SysNative\drivers\atapi.sys
[2009.04.11 09:15:00 | 000,020,952 | ---- | M] (Microsoft Corporation) MD5=E68D9B3A3905619732F7FE039466A623 -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_3b423ca9d7090b1e\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2006.11.02 13:16:48 | 000,014,848 | ---- | M] (Microsoft Corporation) MD5=21322B1A2AD337C579F4A65EA0D25193 -- C:\Windows\SysNative\cngaudit.dll
[2006.11.02 13:16:48 | 000,014,848 | ---- | M] (Microsoft Corporation) MD5=21322B1A2AD337C579F4A65EA0D25193 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_424bc4aceb06de1c\cngaudit.dll
[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\SysWOW64\cngaudit.dll
[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
 
< MD5 for: IASTOR.SYS  >
[2005.07.29 17:35:59 | 000,402,456 | ---- | M] (Intel Corporation) MD5=FC28E90F2204D8FD147FA9BFA8A51C01 -- C:\ACER\Preload\Autorun\DRV\Intel AHCI ICH10R\IaStor.sys
[2005.07.29 17:35:59 | 000,402,456 | ---- | M] (Intel Corporation) MD5=FC28E90F2204D8FD147FA9BFA8A51C01 -- C:\Windows\SysNative\drivers\iaStor.sys
 
< MD5 for: IASTORV.SYS  >
[2008.01.21 04:46:59 | 000,290,872 | ---- | M] (Intel Corporation) MD5=3E3BF3627D886736D0B4E90054F929F6 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2008.01.21 04:46:59 | 000,290,872 | ---- | M] (Intel Corporation) MD5=3E3BF3627D886736D0B4E90054F929F6 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_0b2fedfc40256bc5\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2008.01.21 04:51:03 | 000,716,800 | ---- | M] (Microsoft Corporation) MD5=5D0A4891F8CD0E9E64FF57A6A34044F5 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_59d652c6f057598d\netlogon.dll
[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\SysWOW64\netlogon.dll
[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_6616762521d9e6d4\netlogon.dll
[2009.04.11 09:11:16 | 000,717,312 | ---- | M] (Microsoft Corporation) MD5=A3F1B171702CA04744EE514243B45BFB -- C:\Windows\SysNative\netlogon.dll
[2009.04.11 09:11:16 | 000,717,312 | ---- | M] (Microsoft Corporation) MD5=A3F1B171702CA04744EE514243B45BFB -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_5bc1cbd2ed7924d9\netlogon.dll
[2008.01.21 04:48:28 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_642afd1924b81b88\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2008.01.21 04:46:54 | 000,054,328 | ---- | M] (NVIDIA Corporation) MD5=F7EA0FE82842D05EDA3EFDD376DBFDBA -- C:\Windows\SysNative\drivers\nvstor.sys
[2008.01.21 04:46:54 | 000,054,328 | ---- | M] (NVIDIA Corporation) MD5=F7EA0FE82842D05EDA3EFDD376DBFDBA -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_95f95eab775c159d\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2008.01.21 04:50:28 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_9e812831c5d9a243\scecli.dll
[2008.01.21 04:49:49 | 000,235,520 | ---- | M] (Microsoft Corporation) MD5=35F1DD99F9903BC267C2AF16B09F9BF7 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_942c7ddf9178e048\scecli.dll
[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\SysWOW64\scecli.dll
[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_a06ca13dc2fb6d8f\scecli.dll
[2009.04.11 09:11:23 | 000,235,520 | ---- | M] (Microsoft Corporation) MD5=9922ADB6DCA8F0F5EA038BEFF339C08B -- C:\Windows\SysNative\scecli.dll
[2009.04.11 09:11:23 | 000,235,520 | ---- | M] (Microsoft Corporation) MD5=9922ADB6DCA8F0F5EA038BEFF339C08B -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_9617f6eb8e9aab94\scecli.dll
 
< MD5 for: USER32.DLL  >
[2008.01.21 04:48:29 | 000,820,224 | ---- | M] (Microsoft Corporation) MD5=32B87D215905F648EBE36A621978442C -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_295707c525b9f068\user32.dll
[2008.01.21 04:49:14 | 000,648,192 | ---- | M] (Microsoft Corporation) MD5=3D691030DBD3BD75DE1501BE54F0D425 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_33abb2175a1ab263\user32.dll
[2009.04.11 08:26:45 | 000,648,704 | ---- | M] (Microsoft Corporation) MD5=D29FDB5DEDBDC1BD882164DC6DC4DD53 -- C:\Windows\SysWOW64\user32.dll
[2009.04.11 08:26:45 | 000,648,704 | ---- | M] (Microsoft Corporation) MD5=D29FDB5DEDBDC1BD882164DC6DC4DD53 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_35972b23573c7daf\user32.dll
[2009.04.11 09:11:27 | 000,820,224 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysNative\user32.dll
[2009.04.11 09:11:27 | 000,820,224 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_2b4280d122dbbbb4\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2008.01.21 04:50:36 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\SysWOW64\userinit.exe
[2008.01.21 04:50:36 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
[2008.01.21 04:49:46 | 000,028,160 | ---- | M] (Microsoft Corporation) MD5=A0AB2BB9A92293D9CE66E252719AB5FE -- C:\Windows\SysNative\userinit.exe
[2008.01.21 04:49:46 | 000,028,160 | ---- | M] (Microsoft Corporation) MD5=A0AB2BB9A92293D9CE66E252719AB5FE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_384755998a0d6941\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2008.01.21 04:48:04 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\SysWOW64\wininit.exe
[2008.01.21 04:48:04 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe
[2008.01.21 04:50:23 | 000,123,904 | ---- | M] (Microsoft Corporation) MD5=117EA87DF785CA1B9D821F6F213DCE07 -- C:\Windows\SysNative\wininit.exe
[2008.01.21 04:50:23 | 000,123,904 | ---- | M] (Microsoft Corporation) MD5=117EA87DF785CA1B9D821F6F213DCE07 -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.04.11 09:11:08 | 000,405,504 | ---- | M] (Microsoft Corporation) MD5=6D0773A3A65D28B663F334C90441D01A -- C:\Windows\SysNative\winlogon.exe
[2009.04.11 09:11:08 | 000,405,504 | ---- | M] (Microsoft Corporation) MD5=6D0773A3A65D28B663F334C90441D01A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_cdcd15a68a70b877\winlogon.exe
[2008.01.21 04:49:47 | 000,406,016 | ---- | M] (Microsoft Corporation) MD5=856491FCED98093D824B9EB2892F564A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_cbe19c9a8d4eed2b\winlogon.exe
[2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\SysWOW64\winlogon.exe
[2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2008.01.21 04:50:38 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2008.01.21 04:49:42 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=8A900348370E359B6BFF6A550E4649E1 -- C:\Windows\SysNative\drivers\ws2ifsl.sys
[2008.01.21 04:49:42 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=8A900348370E359B6BFF6A550E4649E1 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_aba53c58802b1777\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >

< End of report >
--- --- ---

cosinus 20.09.2011 10:46
Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html

Das Tool so einstellen wie unten im Bild angegeben - also beide Haken setzen, auf Start scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

http://www.trojaner-board.de/attachm...rnen-start.png


Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, Verknüpfungen auf dem Desktop oder im Startmenü unter "alle Programme" fehlen, bitte unhide ausführen:
Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop.
Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )
http://www.trojaner-board.de/images/icons/icon4.gif Windows-Vista und Windows-7-User müssen das Tool per Rechtsklick als Administrator ausführen! http://www.trojaner-board.de/images/icons/icon4.gif

dergoe 20.09.2011 10:53
2011/09/20 11:51:40.0429 3064 TDSS rootkit removing tool 2.5.23.0 Sep 20 2011 08:53:10
2011/09/20 11:51:40.0603 3064 ================================================================================
2011/09/20 11:51:40.0603 3064 SystemInfo:
2011/09/20 11:51:40.0603 3064
2011/09/20 11:51:40.0603 3064 OS Version: 6.0.6002 ServicePack: 2.0
2011/09/20 11:51:40.0603 3064 Product type: Workstation
2011/09/20 11:51:40.0604 3064 ComputerName: GOE3
2011/09/20 11:51:40.0604 3064 UserName: GOE
2011/09/20 11:51:40.0604 3064 Windows directory: C:\Windows
2011/09/20 11:51:40.0604 3064 System windows directory: C:\Windows
2011/09/20 11:51:40.0604 3064 Running under WOW64
2011/09/20 11:51:40.0604 3064 Processor architecture: Intel x64
2011/09/20 11:51:40.0604 3064 Number of processors: 8
2011/09/20 11:51:40.0604 3064 Page size: 0x1000
2011/09/20 11:51:40.0604 3064 Boot type: Normal boot
2011/09/20 11:51:40.0604 3064 ================================================================================
2011/09/20 11:51:41.0011 3064 Initialize success
2011/09/20 11:51:45.0598 1164 ================================================================================
2011/09/20 11:51:45.0599 1164 Scan started
2011/09/20 11:51:45.0599 1164 Mode: Manual;
2011/09/20 11:51:45.0599 1164 ================================================================================
2011/09/20 11:51:46.0156 1164 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys
2011/09/20 11:51:46.0200 1164 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
2011/09/20 11:51:46.0225 1164 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
2011/09/20 11:51:46.0255 1164 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
2011/09/20 11:51:46.0280 1164 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
2011/09/20 11:51:46.0336 1164 AFD (0cc146c4addea45791b18b1e2659f4a9) C:\Windows\system32\drivers\afd.sys
2011/09/20 11:51:46.0370 1164 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
2011/09/20 11:51:46.0419 1164 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
2011/09/20 11:51:46.0464 1164 aliide (157d0898d4b73f075ce9fa26b482df98) C:\Windows\system32\drivers\aliide.sys
2011/09/20 11:51:46.0493 1164 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
2011/09/20 11:51:46.0519 1164 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys
2011/09/20 11:51:46.0638 1164 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
2011/09/20 11:51:46.0681 1164 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
2011/09/20 11:51:46.0721 1164 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
2011/09/20 11:51:46.0745 1164 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys
2011/09/20 11:51:46.0792 1164 atksgt (fc0e8778c000291caf60eb88c011e931) C:\Windows\system32\DRIVERS\atksgt.sys
2011/09/20 11:51:46.0842 1164 avgntflt (b1224e6b086cd6548315b04ab575a23e) C:\Windows\system32\DRIVERS\avgntflt.sys
2011/09/20 11:51:46.0861 1164 avipbb (ed45f12cfa62b83765c9c1496758cc87) C:\Windows\system32\DRIVERS\avipbb.sys
2011/09/20 11:51:46.0917 1164 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
2011/09/20 11:51:46.0978 1164 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys
2011/09/20 11:51:47.0001 1164 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
2011/09/20 11:51:47.0019 1164 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
2011/09/20 11:51:47.0057 1164 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
2011/09/20 11:51:47.0079 1164 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
2011/09/20 11:51:47.0099 1164 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
2011/09/20 11:51:47.0113 1164 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys
2011/09/20 11:51:47.0141 1164 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
2011/09/20 11:51:47.0169 1164 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
2011/09/20 11:51:47.0207 1164 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys
2011/09/20 11:51:47.0243 1164 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\drivers\circlass.sys
2011/09/20 11:51:47.0288 1164 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys
2011/09/20 11:51:47.0336 1164 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
2011/09/20 11:51:47.0355 1164 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\drivers\compbatt.sys
2011/09/20 11:51:47.0380 1164 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
2011/09/20 11:51:47.0445 1164 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys
2011/09/20 11:51:47.0521 1164 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys
2011/09/20 11:51:47.0585 1164 Dot4 (74c02b1717740c3b8039539e23e4b53f) C:\Windows\system32\DRIVERS\Dot4.sys
2011/09/20 11:51:47.0607 1164 Dot4Print (08321d1860235bf42cf2854234337aea) C:\Windows\system32\DRIVERS\Dot4Prt.sys
2011/09/20 11:51:47.0644 1164 dot4usb (4adccf0124f2b6911d3786a5d0e779e5) C:\Windows\system32\DRIVERS\dot4usb.sys
2011/09/20 11:51:47.0685 1164 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
2011/09/20 11:51:47.0729 1164 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys
2011/09/20 11:51:47.0821 1164 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
2011/09/20 11:51:47.0876 1164 e1yexpress (b37f6853d6e0c6f5f8efde33e831b5f8) C:\Windows\system32\DRIVERS\e1y60x64.sys
2011/09/20 11:51:47.0938 1164 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys
2011/09/20 11:51:48.0012 1164 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
2011/09/20 11:51:48.0055 1164 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys
2011/09/20 11:51:48.0119 1164 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys
2011/09/20 11:51:48.0164 1164 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys
2011/09/20 11:51:48.0203 1164 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
2011/09/20 11:51:48.0226 1164 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
2011/09/20 11:51:48.0257 1164 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
2011/09/20 11:51:48.0284 1164 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
2011/09/20 11:51:48.0340 1164 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys
2011/09/20 11:51:48.0415 1164 fssfltr (dc0dce4ec2c5d2cf6472f9fd6aa9a7dc) C:\Windows\system32\DRIVERS\fssfltr.sys
2011/09/20 11:51:48.0445 1164 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys
2011/09/20 11:51:48.0467 1164 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
2011/09/20 11:51:49.0044 1164 GearAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\drivers\GEARAspiWDM.sys
2011/09/20 11:51:49.0197 1164 gwfilt64 (5e114600f350f3bee3f92516e51144f1) C:\Windows\system32\drivers\gwfilt64.sys
2011/09/20 11:51:49.0243 1164 HdAudAddService (df45f8142dc6df9d18c39b3effbd0409) C:\Windows\system32\drivers\HdAudio.sys
2011/09/20 11:51:49.0327 1164 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys
2011/09/20 11:51:49.0423 1164 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
2011/09/20 11:51:49.0443 1164 HidIr (4e77a77e2c986e8f88f996bb3e1ad829) C:\Windows\system32\drivers\hidir.sys
2011/09/20 11:51:49.0469 1164 HidUsb (443bdd2d30bb4f00795c797e2cf99edf) C:\Windows\system32\DRIVERS\hidusb.sys
2011/09/20 11:51:49.0535 1164 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
2011/09/20 11:51:49.0646 1164 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys
2011/09/20 11:51:49.0702 1164 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
2011/09/20 11:51:49.0741 1164 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
2011/09/20 11:51:49.0764 1164 iaStor (fc28e90f2204d8fd147fa9bfa8a51c01) C:\Windows\system32\DRIVERS\iaStor.sys
2011/09/20 11:51:49.0802 1164 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
2011/09/20 11:51:49.0848 1164 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
2011/09/20 11:51:49.0934 1164 int15 (8c7fa71cb1ebcd3ede8958d27b1bf0b4) C:\Windows\SysWOW64\drivers\int15_64.sys
2011/09/20 11:51:50.0011 1164 IntcAzAudAddService (6fdf709500c20362ffc5057f0d1e0c8d) C:\Windows\system32\drivers\RTKVHD64.sys
2011/09/20 11:51:50.0121 1164 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys
2011/09/20 11:51:50.0148 1164 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
2011/09/20 11:51:50.0211 1164 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2011/09/20 11:51:50.0304 1164 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
2011/09/20 11:51:50.0338 1164 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
2011/09/20 11:51:50.0365 1164 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
2011/09/20 11:51:50.0400 1164 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
2011/09/20 11:51:50.0433 1164 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys
2011/09/20 11:51:50.0479 1164 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
2011/09/20 11:51:50.0523 1164 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
2011/09/20 11:51:50.0560 1164 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
2011/09/20 11:51:50.0592 1164 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys
2011/09/20 11:51:50.0647 1164 KSecDD (476e2c1dcea45895994bef11c2a98715) C:\Windows\system32\Drivers\ksecdd.sys
2011/09/20 11:51:50.0709 1164 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
2011/09/20 11:51:50.0816 1164 lirsgt (156ab2e56dc3ca0b582e3362e07cded7) C:\Windows\system32\DRIVERS\lirsgt.sys
2011/09/20 11:51:50.0842 1164 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
2011/09/20 11:51:50.0884 1164 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
2011/09/20 11:51:50.0912 1164 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
2011/09/20 11:51:50.0949 1164 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
2011/09/20 11:51:50.0989 1164 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
2011/09/20 11:51:51.0047 1164 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
2011/09/20 11:51:51.0088 1164 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
2011/09/20 11:51:51.0139 1164 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
2011/09/20 11:51:51.0182 1164 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
2011/09/20 11:51:51.0207 1164 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
2011/09/20 11:51:51.0243 1164 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
2011/09/20 11:51:51.0265 1164 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
2011/09/20 11:51:51.0292 1164 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
2011/09/20 11:51:51.0324 1164 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
2011/09/20 11:51:51.0358 1164 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
2011/09/20 11:51:51.0402 1164 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys
2011/09/20 11:51:51.0436 1164 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys
2011/09/20 11:51:51.0475 1164 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2011/09/20 11:51:51.0488 1164 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2011/09/20 11:51:51.0552 1164 msahci (aa459f2ab3ab603c357ff117cae3d818) C:\Windows\system32\drivers\msahci.sys
2011/09/20 11:51:51.0592 1164 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
2011/09/20 11:51:51.0614 1164 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
2011/09/20 11:51:51.0640 1164 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys
2011/09/20 11:51:51.0689 1164 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
2011/09/20 11:51:51.0704 1164 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
2011/09/20 11:51:51.0722 1164 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
2011/09/20 11:51:51.0760 1164 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys
2011/09/20 11:51:51.0783 1164 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys
2011/09/20 11:51:51.0804 1164 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
2011/09/20 11:51:51.0828 1164 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys
2011/09/20 11:51:51.0873 1164 NAL (b5a7ded4455d6d694091827dc91fed99) C:\Windows\system32\Drivers\iqvw64e.sys
2011/09/20 11:51:51.0917 1164 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys
2011/09/20 11:51:51.0966 1164 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys
2011/09/20 11:51:52.0013 1164 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys
2011/09/20 11:51:52.0038 1164 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys
2011/09/20 11:51:52.0073 1164 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys
2011/09/20 11:51:52.0096 1164 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
2011/09/20 11:51:52.0140 1164 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys
2011/09/20 11:51:52.0180 1164 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys
2011/09/20 11:51:52.0228 1164 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys
2011/09/20 11:51:52.0269 1164 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys
2011/09/20 11:51:52.0295 1164 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys
2011/09/20 11:51:52.0350 1164 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys
2011/09/20 11:51:52.0419 1164 NTIDrvr (7d397449aaf52b0e7c79b64f6ad4473e) C:\Windows\system32\Drivers\NTIDrvr.sys
2011/09/20 11:51:52.0435 1164 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
2011/09/20 11:51:52.0700 1164 nvlddmkm (b34e9bfbd9c61048ef6281c3e7ec210a) C:\Windows\system32\DRIVERS\nvlddmkm.sys
2011/09/20 11:51:52.0939 1164 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys
2011/09/20 11:51:52.0961 1164 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys
2011/09/20 11:51:52.0995 1164 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys
2011/09/20 11:51:53.0071 1164 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys
2011/09/20 11:51:53.0135 1164 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys
2011/09/20 11:51:53.0174 1164 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys
2011/09/20 11:51:53.0201 1164 pavboot (8a0f8a9580d9f2fc512a35d5709088a9) C:\Windows\system32\drivers\pavboot64.sys
2011/09/20 11:51:53.0240 1164 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys
2011/09/20 11:51:53.0262 1164 pciide (8d618c829034479985a9ed56106cc732) C:\Windows\system32\drivers\pciide.sys
2011/09/20 11:51:53.0294 1164 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
2011/09/20 11:51:53.0339 1164 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
2011/09/20 11:51:53.0469 1164 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys
2011/09/20 11:51:53.0502 1164 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
2011/09/20 11:51:53.0532 1164 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys
2011/09/20 11:51:53.0552 1164 PSDFilter (2cfd31d41cde75328acaeee2d4f4b836) C:\Windows\system32\DRIVERS\psdfilter.sys
2011/09/20 11:51:53.0569 1164 PSDNServ (51a585f999672d8bb07f22ae12b40846) C:\Windows\system32\DRIVERS\PSDNServ.sys
2011/09/20 11:51:53.0593 1164 psdvdisk (db50d3f5c31b1a848b04f7f2a6ff2709) C:\Windows\system32\DRIVERS\PSDVdisk.sys
2011/09/20 11:51:53.0639 1164 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
2011/09/20 11:51:53.0679 1164 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
2011/09/20 11:51:53.0707 1164 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
2011/09/20 11:51:53.0718 1164 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
2011/09/20 11:51:53.0757 1164 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys
2011/09/20 11:51:53.0792 1164 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys
2011/09/20 11:51:53.0822 1164 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys
2011/09/20 11:51:53.0852 1164 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys
2011/09/20 11:51:53.0868 1164 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
2011/09/20 11:51:53.0906 1164 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
2011/09/20 11:51:53.0918 1164 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
2011/09/20 11:51:53.0962 1164 RDPWD (b1d741c87cea8d7282146366cc9c3f81) C:\Windows\system32\drivers\RDPWD.sys
2011/09/20 11:51:54.0029 1164 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
2011/09/20 11:51:54.0061 1164 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
2011/09/20 11:51:54.0105 1164 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
2011/09/20 11:51:54.0123 1164 Serenum (2449316316411d65bd2c761a6ffb2ce2) C:\Windows\system32\DRIVERS\serenum.sys
2011/09/20 11:51:54.0136 1164 Serial (4b438170be2fc8e0bd35ee87a960f84f) C:\Windows\system32\DRIVERS\serial.sys
2011/09/20 11:51:54.0172 1164 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
2011/09/20 11:51:54.0200 1164 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys
2011/09/20 11:51:54.0224 1164 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
2011/09/20 11:51:54.0245 1164 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys
2011/09/20 11:51:54.0265 1164 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
2011/09/20 11:51:54.0294 1164 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
2011/09/20 11:51:54.0322 1164 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
2011/09/20 11:51:54.0355 1164 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys
2011/09/20 11:51:54.0388 1164 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys
2011/09/20 11:51:54.0436 1164 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys
2011/09/20 11:51:54.0470 1164 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys
2011/09/20 11:51:54.0511 1164 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys
2011/09/20 11:51:54.0564 1164 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys
2011/09/20 11:51:54.0585 1164 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys
2011/09/20 11:51:54.0604 1164 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys
2011/09/20 11:51:54.0627 1164 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys
2011/09/20 11:51:54.0702 1164 Tcpip (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\drivers\tcpip.sys
2011/09/20 11:51:54.0772 1164 Tcpip6 (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\DRIVERS\tcpip.sys
2011/09/20 11:51:54.0809 1164 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys
2011/09/20 11:51:54.0835 1164 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys
2011/09/20 11:51:54.0855 1164 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys
2011/09/20 11:51:54.0892 1164 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys
2011/09/20 11:51:54.0930 1164 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys
2011/09/20 11:51:54.0974 1164 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys
2011/09/20 11:51:54.0986 1164 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys
2011/09/20 11:51:55.0011 1164 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys
2011/09/20 11:51:55.0032 1164 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys
2011/09/20 11:51:55.0053 1164 UBHelper (00c8ce31657624a125fdb90efd554371) C:\Windows\system32\drivers\UBHelper.sys
2011/09/20 11:51:55.0097 1164 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys
2011/09/20 11:51:55.0131 1164 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys
2011/09/20 11:51:55.0171 1164 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys
2011/09/20 11:51:55.0201 1164 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys
2011/09/20 11:51:55.0230 1164 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys
2011/09/20 11:51:55.0260 1164 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys
2011/09/20 11:51:55.0292 1164 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys
2011/09/20 11:51:55.0338 1164 usbaudio (c6ba890de6e41857fbe84175519cae7d) C:\Windows\system32\drivers\usbaudio.sys
2011/09/20 11:51:55.0373 1164 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys
2011/09/20 11:51:55.0404 1164 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys
2011/09/20 11:51:55.0439 1164 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys
2011/09/20 11:51:55.0476 1164 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys
2011/09/20 11:51:55.0501 1164 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys
2011/09/20 11:51:55.0530 1164 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys
2011/09/20 11:51:55.0554 1164 usbscan (ea0bf666868964fbe8cb10e50c97b9f1) C:\Windows\system32\DRIVERS\usbscan.sys
2011/09/20 11:51:55.0589 1164 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS
2011/09/20 11:51:55.0623 1164 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys
2011/09/20 11:51:55.0669 1164 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys
2011/09/20 11:51:55.0693 1164 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys
2011/09/20 11:51:55.0713 1164 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys
2011/09/20 11:51:55.0745 1164 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys
2011/09/20 11:51:55.0781 1164 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys
2011/09/20 11:51:55.0823 1164 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys
2011/09/20 11:51:55.0858 1164 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys
2011/09/20 11:51:55.0951 1164 VX3000 (b19333c00b64edc5a53bd4a38f55fe95) C:\Windows\system32\DRIVERS\VX3000.sys
2011/09/20 11:51:56.0036 1164 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys
2011/09/20 11:51:56.0083 1164 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
2011/09/20 11:51:56.0095 1164 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
2011/09/20 11:51:56.0131 1164 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys
2011/09/20 11:51:56.0170 1164 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys
2011/09/20 11:51:56.0275 1164 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\DRIVERS\wmiacpi.sys
2011/09/20 11:51:56.0328 1164 WpdUsb (5e2401b3fc1089c90e081291357371a9) C:\Windows\system32\DRIVERS\wpdusb.sys
2011/09/20 11:51:56.0360 1164 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys
2011/09/20 11:51:56.0405 1164 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys
2011/09/20 11:51:56.0436 1164 MBR (0x1B8) (ef9cdc51b437d322d54016b68f003416) \Device\Harddisk0\DR0
2011/09/20 11:51:57.0545 1164 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1
2011/09/20 11:52:01.0877 1164 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk2\DR2
2011/09/20 11:52:01.0920 1164 Boot (0x1200) (7956dffaebefca8974947c211ec135d8) \Device\Harddisk0\DR0\Partition0
2011/09/20 11:52:01.0941 1164 Boot (0x1200) (7659079a6e488e8544f17f3ba61fbb24) \Device\Harddisk0\DR0\Partition1
2011/09/20 11:52:01.0950 1164 Boot (0x1200) (1e48d5d0feeb395b047826a94e53ccd8) \Device\Harddisk1\DR1\Partition0
2011/09/20 11:52:01.0972 1164 Boot (0x1200) (3817528a462fa8bba78525fb455d814d) \Device\Harddisk2\DR2\Partition0
2011/09/20 11:52:01.0980 1164 ================================================================================
2011/09/20 11:52:01.0980 1164 Scan finished
2011/09/20 11:52:01.0980 1164 ================================================================================
2011/09/20 11:52:01.0988 4076 Detected object count: 0
2011/09/20 11:52:01.0989 4076 Actual detected object count: 0

cosinus 20.09.2011 11:17
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

dergoe 20.09.2011 11:40
hier das combofix-log
Combofix Logfile:
Code:
ComboFix 11-09-19.05 - GOE 20.09.2011  12:27:50.1.8 - x64
Microsoft® Windows Vista™ Home Premium  6.0.6002.2.1252.49.1031.18.6134.4018 [GMT 2:00]
ausgeführt von:: c:\users\GOE\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scancdiskf29.dll
c:\users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scandisk.lnk
.
.
(((((((((((((((((((((((  Dateien erstellt von 2011-08-20 bis 2011-09-20  ))))))))))))))))))))))))))))))
.
.
2011-09-20 10:32 . 2011-09-20 10:32        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp
2011-09-20 10:32 . 2011-09-20 10:32        --------        d-----w-        c:\users\GOE\AppData\Local\temp
2011-09-20 10:32 . 2011-09-20 10:32        --------        d-----w-        c:\users\Default\AppData\Local\temp
2011-09-19 19:26 . 2011-08-16 06:48        8862544        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{98F644FE-C2C4-4A53-9EB0-41352B3390C0}\mpengine.dll
2011-09-19 14:09 . 2011-09-19 14:09        --------        d-----w-        c:\program files (x86)\ESET
2011-09-15 03:04 . 2011-08-10 12:14        2409784        ----a-w-        c:\program files (x86)\Windows Mail\OESpamFilter.dat
2011-09-15 03:04 . 2011-08-10 12:14        2409784        ----a-w-        c:\program files\Windows Mail\OESpamFilter.dat
2011-09-03 05:32 . 2011-09-03 05:32        1138440        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-09-01 15:45 . 2011-09-01 15:45        --------        d-----w-        c:\program files\iTunes
2011-08-24 09:07 . 2011-07-11 13:45        2048        ----a-w-        c:\windows\system32\tzres.dll
2011-08-24 09:07 . 2011-07-11 13:25        2048        ----a-w-        c:\windows\SysWow64\tzres.dll
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-15 09:22 . 2011-05-16 06:36        404640        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-08-31 15:00 . 2010-11-15 10:46        25416        ----a-w-        c:\windows\system32\drivers\mbam.sys
2011-07-23 11:31 . 2011-08-10 15:42        1147904        ----a-w-        c:\windows\system32\wininet.dll
2011-07-23 11:24 . 2011-08-10 15:42        56832        ----a-w-        c:\windows\system32\licmgr10.dll
2011-07-23 11:23 . 2011-08-10 15:42        1538560        ----a-w-        c:\windows\system32\inetcpl.cpl
2011-07-23 11:23 . 2011-08-10 15:42        132096        ----a-w-        c:\windows\system32\iesysprep.dll
2011-07-23 11:23 . 2011-08-10 15:42        77312        ----a-w-        c:\windows\system32\iesetup.dll
2011-07-23 11:04 . 2011-08-10 15:42        916480        ----a-w-        c:\windows\SysWow64\wininet.dll
2011-07-23 11:00 . 2011-08-10 15:42        43520        ----a-w-        c:\windows\SysWow64\licmgr10.dll
2011-07-23 10:59 . 2011-08-10 15:42        1469440        ----a-w-        c:\windows\SysWow64\inetcpl.cpl
2011-07-23 10:59 . 2011-08-10 15:42        71680        ----a-w-        c:\windows\SysWow64\iesetup.dll
2011-07-23 10:59 . 2011-08-10 15:42        109056        ----a-w-        c:\windows\SysWow64\iesysprep.dll
2011-07-23 10:31 . 2011-08-10 15:42        479232        ----a-w-        c:\windows\system32\html.iec
2011-07-23 10:03 . 2011-08-10 15:42        385024        ----a-w-        c:\windows\SysWow64\html.iec
2011-07-23 09:50 . 2011-08-10 15:42        162816        ----a-w-        c:\windows\system32\ieUnatt.exe
2011-07-23 09:48 . 2011-08-10 15:42        1638912        ----a-w-        c:\windows\system32\mshtml.tlb
2011-07-23 09:27 . 2011-08-10 15:42        133632        ----a-w-        c:\windows\SysWow64\ieUnatt.exe
2011-07-23 09:25 . 2011-08-10 15:42        1638912        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2011-07-12 09:34 . 2011-07-12 09:34        96104        ----a-w-        c:\windows\system32\dns-sd.exe
2011-07-12 09:34 . 2011-07-12 09:34        85864        ----a-w-        c:\windows\system32\dnssd.dll
2011-07-12 09:20 . 2011-07-12 09:20        83816        ----a-w-        c:\windows\SysWow64\dns-sd.exe
2011-07-12 09:20 . 2011-07-12 09:20        73064        ----a-w-        c:\windows\SysWow64\dnssd.dll
2011-07-08 09:09 . 2011-03-28 16:36        18328        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-07-06 15:49 . 2011-08-10 15:42        275456        ----a-w-        c:\windows\system32\drivers\mrxsmb10.sys
2011-07-05 16:37 . 2011-07-05 16:37        94208        ----a-w-        c:\windows\SysWow64\QuickTimeVR.qtx
2011-07-05 16:37 . 2011-07-05 16:37        69632        ----a-w-        c:\windows\SysWow64\QuickTime.qts
2011-06-28 11:45 . 2010-07-26 20:27        88288        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2011-06-28 11:45 . 2010-07-26 20:27        123784        ----a-w-        c:\windows\system32\drivers\avipbb.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-07-29 16:52        121392        ----a-w-        c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-06-29 68856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PCMMediaSharing"="c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-05-20 204908]
"TkBellExe"="c:\program files (x86)\Common Files\Real\Update_OB\realsched.exe" [2010-03-22 202256]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-11-02 281768]
"AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"AirPort Base Station Agent"="c:\program files (x86)\AirPort\APAgent.exe" [2009-11-11 771360]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-07-05 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-08-18 421736]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbam.exe" [2011-08-31 1047208]
.
c:\users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
scancdiskf29.dll [2011-4-12 1219072]
scandisk.lnk - c:\windows\system32\rundll32.exe [2006-11-2 46592]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate1ca1466a21734d0;Google Update Service (gupdate1ca1466a21734d0);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-08-03 133104]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-04-01 183560]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Shared\Database2\bin\fbserver.exe [2008-08-07 3276800]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-08-03 133104]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-09-23 50424]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
S0 pavboot;pavboot;c:\windows\system32\drivers\pavboot64.sys [x]
S2 AAV UpdateService;AAV UpdateService;c:\program files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [2008-10-24 128296]
S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-05-20 269448]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2008-01-21 27648]
S2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe [2011-06-28 340136]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-04-27 136360]
S2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [2011-06-28 428200]
S2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [2008-10-01 24576]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe [2008-12-16 1155072]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-09-23 144632]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-25 2214504]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-05-20 378472]
S3 e1yexpress;Intel(R) Gigabit Network Connections Driver;c:\windows\system32\DRIVERS\e1y60x64.sys [x]
S3 gwfilt64;gwfilt64;c:\windows\system32\drivers\gwfilt64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 72735925
*Deregistered* - 72735925
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt        REG_MULTI_SZ          hpqcxs08 hpqddsvc
Akamai        REG_MULTI_SZ          Akamai
.
Inhalt des "geplante Tasks" Ordners
.
2011-09-20 c:\windows\Tasks\Google Software Updater.job
- c:\program files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-29 15:11]
.
2011-09-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-08-03 18:17]
.
2011-09-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-08-03 18:17]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-07-29 16:53        50736        ----a-w-        c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VX3000"="c:\windows\vVX3000.exe" [2007-04-10 709992]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.supportersclub.de/
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=0409&m=aspire_m7720
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Nach Microsoft &Excel exportieren - c:\progra~2\MI1933~1\OFFICE11\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MI1933~1\Office12\EXCEL.EXE/3000
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 192.168.178.1
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll
FF - ProfilePath - c:\users\GOE\AppData\Roaming\Mozilla\Firefox\Profiles\shmzz143.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.supportersclub.de/index.php?id=gaestebuch
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{1ED16E0A-E8C4-40A0-8BC2-79485D21F796} - (no file)
Wow6432Node-HKCU-Run-WMPNSCFG - c:\program files (x86)\Windows Media Player\WMPNSCFG.exe
Wow6432Node-HKLM-Run-eRecoveryService - (no file)
HKLM-Run-Windows Defender - c:\program files (x86)\Windows Defender\MSASCui.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-562977904-3008332237-249228847-1000\¬ î**]
@Allowed: (Read) (RestrictedCode)
"MachineID"=hex:bf,88,b7,36,63,b9,f7,00
DUMPHIVE0.003 (REGF)
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@SACL=
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid]
@Denied: (A 2) (Everyone)
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
  00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
Zeit der Fertigstellung: 2011-09-20  12:33:48
ComboFix-quarantined-files.txt  2011-09-20 10:33
.
Vor Suchlauf: 13 Verzeichnis(se), 177.701.220.352 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 177.633.902.592 Bytes frei
.
- - End Of File - - B0E37859449B70A3B29675D97C96D85E
--- --- ---

cosinus 20.09.2011 11:44
Combofix - Scripten

1. Starte das Notepad (Start / Ausführen / notepad[Enter])

2. Jetzt füge mit copy/paste den ganzen Inhalt der untenstehenden Codebox in das Notepad Fenster ein.

Code:
Regnull::
[HKEY_USERS\S-1-5-21-562977904-3008332237-249228847-1000\¬ î**]
3. Speichere im Notepad als CFScript.txt auf dem Desktop.

4. Deaktivere den Guard Deines Antivirenprogramms und eine eventuell vorhandene Software Firewall.
(Auch Guards von Ad-, Spyware Programmen und den Tea Timer (wenn vorhanden) !)

5. Dann ziehe die CFScript.txt auf die cofi.exe, so wie es im unteren Bild zu sehen ist. Damit wird Combofix neu gestartet.

http://users.pandora.be/bluepatchy/m...s/CFScript.gif

6. Nach dem Neustart (es wird gefragt ob Du neustarten willst), poste bitte die folgenden Log Dateien:
Combofix.txt

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

dergoe 20.09.2011 12:04
es fand kein neustart statt, da ich nicht danach gefragt wurde!

soll ich einen neustart vornehmen?

außerdem bin ich mir nicht sicher ob spybot und teatimer vorhanden sind und abgeschaltet waren...

hier das (neue) combofix-log
Combofix Logfile:
Code:
ComboFix 11-09-19.05 - GOE 20.09.2011  12:55:05.1.8 - x64
Microsoft® Windows Vista™ Home Premium  6.0.6002.2.1252.49.1031.18.6134.3719 [GMT 2:00]
ausgeführt von:: c:\users\GOE\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\users\GOE\Desktop\CFScript.txt
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scancdiskf29.dll
c:\users\GOE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scandisk.lnk
.
.
(((((((((((((((((((((((  Dateien erstellt von 2011-08-20 bis 2011-09-20  ))))))))))))))))))))))))))))))
.
.
2011-09-20 10:59 . 2011-09-20 10:59        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp
2011-09-20 10:59 . 2011-09-20 10:59        --------        d-----w-        c:\users\GOE\AppData\Local\temp
2011-09-20 10:59 . 2011-09-20 10:59        --------        d-----w-        c:\users\Default\AppData\Local\temp
2011-09-19 19:26 . 2011-08-16 06:48        8862544        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{98F644FE-C2C4-4A53-9EB0-41352B3390C0}\mpengine.dll
2011-09-19 14:09 . 2011-09-19 14:09        --------        d-----w-        c:\program files (x86)\ESET
2011-09-15 03:04 . 2011-08-10 12:14        2409784        ----a-w-        c:\program files (x86)\Windows Mail\OESpamFilter.dat
2011-09-15 03:04 . 2011-08-10 12:14        2409784        ----a-w-        c:\program files\Windows Mail\OESpamFilter.dat
2011-09-03 05:32 . 2011-09-03 05:32        1138440        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-09-01 15:45 . 2011-09-01 15:45        --------        d-----w-        c:\program files\iTunes
2011-08-24 09:07 . 2011-07-11 13:45        2048        ----a-w-        c:\windows\system32\tzres.dll
2011-08-24 09:07 . 2011-07-11 13:25        2048        ----a-w-        c:\windows\SysWow64\tzres.dll
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-15 09:22 . 2011-05-16 06:36        404640        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-08-31 15:00 . 2010-11-15 10:46        25416        ----a-w-        c:\windows\system32\drivers\mbam.sys
2011-07-23 11:31 . 2011-08-10 15:42        1147904        ----a-w-        c:\windows\system32\wininet.dll
2011-07-23 11:24 . 2011-08-10 15:42        56832        ----a-w-        c:\windows\system32\licmgr10.dll
2011-07-23 11:23 . 2011-08-10 15:42        1538560        ----a-w-        c:\windows\system32\inetcpl.cpl
2011-07-23 11:23 . 2011-08-10 15:42        132096        ----a-w-        c:\windows\system32\iesysprep.dll
2011-07-23 11:23 . 2011-08-10 15:42        77312        ----a-w-        c:\windows\system32\iesetup.dll
2011-07-23 11:04 . 2011-08-10 15:42        916480        ----a-w-        c:\windows\SysWow64\wininet.dll
2011-07-23 11:00 . 2011-08-10 15:42        43520        ----a-w-        c:\windows\SysWow64\licmgr10.dll
2011-07-23 10:59 . 2011-08-10 15:42        1469440        ----a-w-        c:\windows\SysWow64\inetcpl.cpl
2011-07-23 10:59 . 2011-08-10 15:42        71680        ----a-w-        c:\windows\SysWow64\iesetup.dll
2011-07-23 10:59 . 2011-08-10 15:42        109056        ----a-w-        c:\windows\SysWow64\iesysprep.dll
2011-07-23 10:31 . 2011-08-10 15:42        479232        ----a-w-        c:\windows\system32\html.iec
2011-07-23 10:03 . 2011-08-10 15:42        385024        ----a-w-        c:\windows\SysWow64\html.iec
2011-07-23 09:50 . 2011-08-10 15:42        162816        ----a-w-        c:\windows\system32\ieUnatt.exe
2011-07-23 09:48 . 2011-08-10 15:42        1638912        ----a-w-        c:\windows\system32\mshtml.tlb
2011-07-23 09:27 . 2011-08-10 15:42        133632        ----a-w-        c:\windows\SysWow64\ieUnatt.exe
2011-07-23 09:25 . 2011-08-10 15:42        1638912        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2011-07-12 09:34 . 2011-07-12 09:34        96104        ----a-w-        c:\windows\system32\dns-sd.exe
2011-07-12 09:34 . 2011-07-12 09:34        85864        ----a-w-        c:\windows\system32\dnssd.dll
2011-07-12 09:20 . 2011-07-12 09:20        83816        ----a-w-        c:\windows\SysWow64\dns-sd.exe
2011-07-12 09:20 . 2011-07-12 09:20        73064        ----a-w-        c:\windows\SysWow64\dnssd.dll
2011-07-08 09:09 . 2011-03-28 16:36        18328        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-07-06 15:49 . 2011-08-10 15:42        275456        ----a-w-        c:\windows\system32\drivers\mrxsmb10.sys
2011-07-05 16:37 . 2011-07-05 16:37        94208        ----a-w-        c:\windows\SysWow64\QuickTimeVR.qtx
2011-07-05 16:37 . 2011-07-05 16:37        69632        ----a-w-        c:\windows\SysWow64\QuickTime.qts
2011-06-28 11:45 . 2010-07-26 20:27        88288        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2011-06-28 11:45 . 2010-07-26 20:27        123784        ----a-w-        c:\windows\system32\drivers\avipbb.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-07-29 16:52        121392        ----a-w-        c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-06-29 68856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PCMMediaSharing"="c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-05-20 204908]
"TkBellExe"="c:\program files (x86)\Common Files\Real\Update_OB\realsched.exe" [2010-03-22 202256]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-11-02 281768]
"AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"AirPort Base Station Agent"="c:\program files (x86)\AirPort\APAgent.exe" [2009-11-11 771360]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-07-05 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-08-18 421736]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbam.exe" [2011-08-31 1047208]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate1ca1466a21734d0;Google Update Service (gupdate1ca1466a21734d0);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-08-03 133104]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-04-01 183560]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Shared\Database2\bin\fbserver.exe [2008-08-07 3276800]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-08-03 133104]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-09-23 50424]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
S0 pavboot;pavboot;c:\windows\system32\drivers\pavboot64.sys [x]
S2 AAV UpdateService;AAV UpdateService;c:\program files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [2008-10-24 128296]
S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-05-20 269448]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2008-01-21 27648]
S2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe [2011-06-28 340136]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-04-27 136360]
S2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [2011-06-28 428200]
S2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [2008-10-01 24576]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe [2008-12-16 1155072]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-09-23 144632]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-25 2214504]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-05-20 378472]
S3 e1yexpress;Intel(R) Gigabit Network Connections Driver;c:\windows\system32\DRIVERS\e1y60x64.sys [x]
S3 gwfilt64;gwfilt64;c:\windows\system32\drivers\gwfilt64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 72735925
*Deregistered* - 72735925
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt        REG_MULTI_SZ          hpqcxs08 hpqddsvc
Akamai        REG_MULTI_SZ          Akamai
.
Inhalt des "geplante Tasks" Ordners
.
2011-09-20 c:\windows\Tasks\Google Software Updater.job
- c:\program files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-29 15:11]
.
2011-09-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-08-03 18:17]
.
2011-09-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-08-03 18:17]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-07-29 16:53        50736        ----a-w-        c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VX3000"="c:\windows\vVX3000.exe" [2007-04-10 709992]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.supportersclub.de/
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=0409&m=aspire_m7720
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Nach Microsoft &Excel exportieren - c:\progra~2\MI1933~1\OFFICE11\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MI1933~1\Office12\EXCEL.EXE/3000
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 192.168.178.1
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll
FF - ProfilePath - c:\users\GOE\AppData\Roaming\Mozilla\Firefox\Profiles\shmzz143.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.supportersclub.de/index.php?id=gaestebuch
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{1ED16E0A-E8C4-40A0-8BC2-79485D21F796} - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-562977904-3008332237-249228847-1000\¬ î**]
@Allowed: (Read) (RestrictedCode)
"MachineID"=hex:bf,88,b7,36,63,b9,f7,00
DUMPHIVE0.003 (REGF)
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@SACL=
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid]
@Denied: (A 2) (Everyone)
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
  00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
Zeit der Fertigstellung: 2011-09-20  13:01:06
ComboFix-quarantined-files.txt  2011-09-20 11:01
ComboFix2.txt  2011-09-20 10:33
.
Vor Suchlauf: 17 Verzeichnis(se), 177.667.018.752 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 177.636.093.952 Bytes frei
.
- - End Of File - - ACF5B01B62080F3165CAF93DDD55FC4D
--- --- ---

cosinus 20.09.2011 12:55
Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung) Vista und Win7 User mit Rechtsklick "als Admininstartor starten"
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

dergoe 20.09.2011 13:22
hier das aswMBR-file

aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-09-20 14:05:50
-----------------------------
14:05:50.722 OS Version: Windows x64 6.0.6002 Service Pack 2
14:05:50.722 Number of processors: 8 586 0x1A04
14:05:50.723 ComputerName: GOE3 UserName: GOE
14:05:51.864 Initialize success
14:07:07.440 AVAST engine defs: 11092000
14:07:14.061 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
14:07:14.064 Disk 0 Vendor: WDC_WD10 01.0 Size: 953869MB BusType: 3
14:07:14.088 Disk 0 MBR read successfully
14:07:14.091 Disk 0 MBR scan
14:07:14.095 Disk 0 unknown MBR code
14:07:14.098 Service scanning
14:07:15.498 Modules scanning
14:07:15.501 Disk 0 trace - called modules:
14:07:15.516 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
14:07:15.519 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006a98340]
14:07:15.522 3 CLASSPNP.SYS[fffffa60011d1c33] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8006587050]
14:07:16.990 AVAST engine scan C:\Windows
14:07:23.334 AVAST engine scan C:\Windows\system32
14:09:09.635 AVAST engine scan C:\Windows\system32\drivers
14:09:19.424 AVAST engine scan C:\Users\GOE
14:17:10.404 File: C:\Users\GOE\drloadwF4.dll **INFECTED** Win32:Sinowal-JE [Trj]
14:18:19.699 AVAST engine scan C:\ProgramData
14:19:30.515 Scan finished successfully
14:19:50.865 Disk 0 MBR has been saved successfully to "C:\Users\GOE\Desktop\MBR.dat"
14:19:50.869 The log file has been saved successfully to "C:\Users\GOE\Desktop\aswMBR.txt"

cosinus 20.09.2011 13:44
Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":Files" muss mitkopiert werden!!!)

Code:
:Files
C:\Users\GOE\drloadwF4.dll
:Commands
[emptytemp]
[resethosts]
Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

dergoe 20.09.2011 14:11
nach dem fix wurde der rechner neu gestartet.
(dauerte länger als üblich - wegen des fixes nehm ich an)

es poppte folgende meldung auf:
"RUNDLL
Fehler beim Laden von C:\Users\GOE\DRLOAD~1.DLL
Das angegebene Modul wurde nicht gefunden"

außerdem poppte die benutzersteuerung für malwarebytes auf, verschwand aber nach kurzer zeit wieder.

hier das logfile:

All processes killed
========== FILES ==========
C:\Users\GOE\drloadwF4.dll moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: GOE
->Temp folder emptied: 47673021 bytes
->Temporary Internet Files folder emptied: 47979882 bytes
->Java cache emptied: 7239122 bytes
->FireFox cache emptied: 408796436 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 5854 bytes

User: Public
->Temp folder emptied: 0 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 568 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 32902 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 488,00 mb

File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.29.1 log created on 09202011_145156

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\CLDigitalHome\CLMS_AGENT_LOG1.txt scheduled to be moved on reboot.
File move failed. C:\Windows\temp\CLDigitalHome\PCMMediaServer.log scheduled to be moved on reboot.
File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.

Registry entries deleted on Reboot...

cosinus 20.09.2011 14:27
Wir sollten den MBR fixen, sichere für den Fall der Fälle ALLE wichtigen Daten, auch wenn meistens alles glatt geht.
Starte nach der Datensicherung aswmbr erneut und klick auf den Button FIXMBR.
Anschließend Windows neu starten und ein neues Log mit aswMBR machen.

dergoe 20.09.2011 14:50
nach dem fix wurde der rechner neu gestartet.

es poppte folgende meldung auf:
"RUNDLL
Fehler beim Laden von C:\Users\GOE\DRLOAD~1.DLL
Das angegebene Modul wurde nicht gefunden"

hier das log-file vor dem neustart:

aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-09-20 15:39:35
-----------------------------
15:39:35.645 OS Version: Windows x64 6.0.6002 Service Pack 2
15:39:35.645 Number of processors: 8 586 0x1A04
15:39:35.645 ComputerName: GOE3 UserName: GOE
15:39:36.919 Initialize success
15:40:19.501 AVAST engine defs: 11092000
15:40:53.261 Verifying
15:41:03.272 Disk 0 Windows 600 MBR fixed successfully
15:42:31.607 Disk 0 MBR has been saved successfully to "C:\Users\GOE\Desktop\MBR.dat"
15:42:31.608 The log file has been saved successfully to "C:\Users\GOE\Desktop\aswMBRvorneustart.txt"


hier das logfile nach dem neustart:

aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-09-20 15:47:03
-----------------------------
15:47:03.923 OS Version: Windows x64 6.0.6002 Service Pack 2
15:47:03.923 Number of processors: 8 586 0x1A04
15:47:03.923 ComputerName: GOE3 UserName: GOE
15:47:05.897 Initialize success
15:47:13.727 AVAST engine defs: 11092000
15:47:27.154 The log file has been saved successfully to "C:\Users\GOE\Desktop\aswMBRnachneustart.txt"

cosinus 20.09.2011 15:28
Naja, das letzte aswMBR Log sieht aber zu kurz aus. Bitte so machen wie am Anfang:

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung) Vista und Win7 User mit Rechtsklick "als Admininstartor starten"
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

dergoe 20.09.2011 15:36
aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-09-20 16:30:06
-----------------------------
16:30:06.022 OS Version: Windows x64 6.0.6002 Service Pack 2
16:30:06.022 Number of processors: 8 586 0x1A04
16:30:06.022 ComputerName: GOE3 UserName: GOE
16:30:07.207 Initialize success
16:30:10.486 AVAST engine defs: 11092000
16:30:18.123 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
16:30:18.126 Disk 0 Vendor: WDC_WD10 01.0 Size: 953869MB BusType: 3
16:30:18.133 Disk 0 MBR read successfully
16:30:18.136 Disk 0 MBR scan
16:30:18.140 Disk 0 Windows VISTA default MBR code
16:30:18.142 Service scanning
16:30:21.327 Modules scanning
16:30:21.330 Disk 0 trace - called modules:
16:30:21.344 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
16:30:21.347 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006a9a790]
16:30:21.349 3 CLASSPNP.SYS[fffffa60011d2c33] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8006587050]
16:30:22.406 AVAST engine scan C:\Windows
16:30:29.617 AVAST engine scan C:\Windows\system32
16:32:32.906 AVAST engine scan C:\Windows\system32\drivers
16:32:51.582 AVAST engine scan C:\Users\GOE
16:35:20.190 Disk 0 MBR has been saved successfully to "C:\Users\GOE\Desktop\MBR.dat"
16:35:20.205 The log file has been saved successfully to "C:\Users\GOE\Desktop\aswMBR.txt"

cosinus 20.09.2011 15:46
Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!


Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


dergoe 20.09.2011 18:20
malwarebytes-logfile:

Malwarebytes' Anti-Malware 1.51.2.1300
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Datenbank Version: 7755

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19120

20.09.2011 19:18:51
mbam-log-2011-09-20 (19-18-51).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|L:\|)
Durchsuchte Objekte: 619717
Laufzeit: 1 Stunde(n), 57 Minute(n), 9 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 2

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NvCplDaemonTool (Trojan.Agent.WIMP) -> Value: NvCplDaemonTool -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Qoobox\quarantine\C\Users\GOE\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\scancdiskf29.dll.vir (Trojan.Sinowal) -> Quarantined and deleted successfully.
c:\_OTL\movedfiles\09202011_145156\C_Users\GOE\drloadwf4.dll (Trojan.Sinowal) -> Quarantined and deleted successfully.

cosinus 20.09.2011 18:52
Ok, das waren noch die Überreste. Einer in der Registry, die zwei Dateien sind isoliert, die haben wir mit OTL und CF gelöscht und liegen da in der Q isoliert herum und sind damit nicht mehr aktiv. Warten wir die anderen Logs ab.

dergoe 21.09.2011 05:15
superantispyware logfile:

SUPERAntiSpyware Scan Log
SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Generated 09/21/2011 at 00:09 AM

Application Version : 5.0.1118

Core Rules Database Version : 7711
Trace Rules Database Version: 5523

Scan type : Complete Scan
Total Scan Time : 04:36:22

Operating System Information
Windows Vista Home Premium 64-bit, Service Pack 2 (Build 6.00.6002)
UAC On - Administrator

Memory items scanned : 600
Memory threats detected : 0
Registry items scanned : 77232
Registry threats detected : 0
File items scanned : 438959
File threats detected : 706

Adware.Tracking Cookie
secure-uk.imrworldwide.com [ C:\USERS\GOE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\NY7N7PCW ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.klicktel.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.klicktel.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.bs.serving-sys.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.paypal.112.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.stats.paypal.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.skydeutschland.122.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.olympiaverlag.122.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
appfinder.lisisoft.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
appfinder.lisisoft.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.mlsat02.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wjloskc5shq.stats.esomniture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.fashionfinder.asos.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.fashionfinder.asos.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.fashionfinder.asos.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fashionfinder.asos.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.countomat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sexypantyhose.sensualwriter.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.premiumtv.122.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.a.revenuemax.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
zbox.zanox.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adserver2.clipkit.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Amateur Porno Videos direkt von echten Amateuren. Filme, Telefonsex, Privatnachrichten und LiveCams [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornme.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornme.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornme.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.adform.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.BurstMedia [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wjmiagdjgho.stats.esomniture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wnmisjd5agp.stats.esomniture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.overture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.yieldmanager.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.chicagosuntimes.122.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.overture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter12.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.stats4free.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.stats4free.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediabrandsww.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.xiti.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter11.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
server.lon.liveperson.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediamgr.ugo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediamgr.ugo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediamgr.ugo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediamgr.ugo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adxpose.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.daimlerag.122.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.mindshare.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
studivz.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
banner.celleheute.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.truition-wf-de.122.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
serve.advertonic.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
nfm-adserver.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wfloanazobo.stats.esomniture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tns-counter.ru [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
media.gan-online.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter7.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter5.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
m1.webstats.motigo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.lego.112.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.yahoogroups.112.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adcentriconline.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
media.gan-online.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.autoscout24.112.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adserver.tattooscout.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
int.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
int.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.getclicky.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.static.getclicky.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mysexylegs.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
in.getclicky.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.traffichaus.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
netdebit.counter [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.gostats.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.gostats.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
www.zanox-affiliate.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
www.zanox-affiliate.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.112.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wjkoogcpwcp.stats.esomniture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Porn Tube, Free Porn Movies, Porno Videos, Hot XXX Clips, Pussy Pics [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sunporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sunporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sunporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sunporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.youporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn Videos, Porn Tube, Sex Videos, Sex & Free XXX Porno Clips [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mofosex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn Videos, Porn Tube, Sex Videos, Sex & Free XXX Porno Clips [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mofosex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mofosex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mofosex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.bdsms.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.bdsms.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.bdsms.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn Videos & Sex Movies - Porno, XXX, Porn Tube and Pussy Porn [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornhub.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn Videos - XXX, Porn Tube [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
pornbananalive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
pornbananalive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
pornbananalive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
pornbananalive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
pornbananalive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
pornbananalive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Long Porn Tube &ndash; Adult Sex Tube Videos [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.longporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.longporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.longporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornhub.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornhub.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornhub.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornhub.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornhub.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.chokertraffic.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
PORN.COM - The Best Free Porn Tube, XXX, Porno and Sex Videos [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ww251.smartadserver.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.aim4media.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.aim4media.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.secmedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.secmedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.secmedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
statse.webtrendslive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
dev.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.adserver01.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn Tube pornper Movies Free Pussy Hot Sex Videos Streaming Porn Video! [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornper.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornper.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornper.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.categorizedcunt.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.categorizedcunt.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.categorizedcunt.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.homemadesextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.homemadesextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.homemadesextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adnetxchange.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adnetxchange.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Alpha Porno - Free XXX porn TUBE MOVIES. Free Sex Video [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Hard Sex Tube - for every fan of hot porn videos and free porn [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.geobanner.bookofsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.geobanner.bookofsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.geobanner.bookofsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.geobanner.bookofsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.geobanner.bookofsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.geobanner.bookofsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.youporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.youporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Porn Videos, Sex, XXX, Free Porn - YouPorn [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.youporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.youporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.youporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.goldporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.goldporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.goldporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Porn Tube, Porn Tube Videos, Free Porn Clips [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.dizzyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
new-porn-video.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
new-porn-video.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Gold Porn Tube [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Gold Porn Tube [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adserver2.exgfnetwork.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
maniacporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
maniacporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
maniacporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
maniacporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
maniacporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
maniacporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
FPCTraffic - turning traffic into cash [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
hdpornotubes.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hdpornotubes.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hdpornotubes.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
go.trafficshop.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
go.trafficshop.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.buyalltraffic.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ads.ventivmedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.girlsteachsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn Videos - XXX, Porn Tube [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornbanana.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornbanana.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornbanana.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.freeporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.freeporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.freeporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.gridlockparadise.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.track.gridlockparadise.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.track.gridlockparadise.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.track.gridlockparadise.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ads.crakmedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ads.crakmedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ads.crakmedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ads.crakmedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn, Porn Tube, Free Porn Videos, Sex Movie, Porn - FreePorn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ads.trafficjunky.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.exoclick.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
media.sensis.com.au [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Hard Sex Tube - for every fan of hot porn videos and free porn [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.exoclick.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adserver.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adxpansion.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediamarkt.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter14.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter11.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter10.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.overture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter11.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter3.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter7.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter8.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter15.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter2.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
banner.testberichte.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
banner.testberichte.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
banner.testberichte.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.verticaltechmedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.r1-ads.ace.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter6.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.adform.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adform.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hightraffic.hugoboss.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hightraffic.hugoboss.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hightraffic.hugoboss.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.adition.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fr.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fr.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.traffictrack.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad3.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad1.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
UseNeXT | In vollem DSL-Speed aus dem Usenet downloaden! [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adserv.kwick.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adserv.kwick.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sexlist.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter9.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter1.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter15.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter6.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter15.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad4.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad2.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adviva.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zanox-affiliate.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zanox.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.clickfuse.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]

dergoe 21.09.2011 05:16
superantispyware logfile:

SUPERAntiSpyware Scan Log
SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Generated 09/21/2011 at 00:09 AM

Application Version : 5.0.1118

Core Rules Database Version : 7711
Trace Rules Database Version: 5523

Scan type : Complete Scan
Total Scan Time : 04:36:22

Operating System Information
Windows Vista Home Premium 64-bit, Service Pack 2 (Build 6.00.6002)
UAC On - Administrator

Memory items scanned : 600
Memory threats detected : 0
Registry items scanned : 77232
Registry threats detected : 0
File items scanned : 438959
File threats detected : 706

Adware.Tracking Cookie
secure-uk.imrworldwide.com [ C:\USERS\GOE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\NY7N7PCW ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.klicktel.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.klicktel.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.bs.serving-sys.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.paypal.112.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.stats.paypal.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.skydeutschland.122.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.olympiaverlag.122.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
appfinder.lisisoft.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
appfinder.lisisoft.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.mlsat02.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wjloskc5shq.stats.esomniture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.fashionfinder.asos.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.fashionfinder.asos.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.fashionfinder.asos.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fashionfinder.asos.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.countomat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sexypantyhose.sensualwriter.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.premiumtv.122.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.a.revenuemax.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
zbox.zanox.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adserver2.clipkit.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Amateur Porno Videos direkt von echten Amateuren. Filme, Telefonsex, Privatnachrichten und LiveCams [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornme.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornme.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornme.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.adform.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.BurstMedia [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wjmiagdjgho.stats.esomniture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wnmisjd5agp.stats.esomniture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.overture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.yieldmanager.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.chicagosuntimes.122.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.overture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter12.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.stats4free.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.stats4free.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediabrandsww.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ad.adnet.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.xiti.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter11.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
server.lon.liveperson.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediamgr.ugo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediamgr.ugo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediamgr.ugo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediamgr.ugo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adxpose.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.daimlerag.122.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.mindshare.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
studivz.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
banner.celleheute.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.truition-wf-de.122.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fl01.ct2.comclick.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
serve.advertonic.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
nfm-adserver.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wfloanazobo.stats.esomniture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tns-counter.ru [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
media.gan-online.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter7.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter5.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
m1.webstats.motigo.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.lego.112.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.yahoogroups.112.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adcentriconline.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
media.gan-online.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.autoscout24.112.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adserver.tattooscout.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
int.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
int.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.getclicky.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.static.getclicky.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mysexylegs.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
in.getclicky.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.traffichaus.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
netdebit.counter [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.gostats.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.gostats.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
www.zanox-affiliate.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
www.zanox-affiliate.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.112.2o7.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.e-2dj6wjkoogcpwcp.stats.esomniture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Porn Tube, Free Porn Movies, Porno Videos, Hot XXX Clips, Pussy Pics [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sunporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sunporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sunporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sunporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.youporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn Videos, Porn Tube, Sex Videos, Sex & Free XXX Porno Clips [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mofosex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn Videos, Porn Tube, Sex Videos, Sex & Free XXX Porno Clips [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mofosex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mofosex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mofosex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.bdsms.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.bdsms.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.bdsms.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn Videos & Sex Movies - Porno, XXX, Porn Tube and Pussy Porn [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornhub.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn Videos - XXX, Porn Tube [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
pornbananalive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
pornbananalive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
pornbananalive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
pornbananalive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
pornbananalive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
pornbananalive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Long Porn Tube &ndash; Adult Sex Tube Videos [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.longporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.longporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.longporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornhub.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornhub.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornhub.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornhub.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornhub.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.chokertraffic.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
PORN.COM - The Best Free Porn Tube, XXX, Porno and Sex Videos [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ww251.smartadserver.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.aim4media.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.aim4media.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.secmedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.secmedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.secmedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
statse.webtrendslive.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
dev.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.adserver01.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn Tube pornper Movies Free Pussy Hot Sex Videos Streaming Porn Video! [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornper.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornper.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornper.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.categorizedcunt.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.categorizedcunt.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.categorizedcunt.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.homemadesextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.homemadesextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.homemadesextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adnetxchange.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adnetxchange.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Alpha Porno - Free XXX porn TUBE MOVIES. Free Sex Video [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Hard Sex Tube - for every fan of hot porn videos and free porn [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.geobanner.bookofsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.geobanner.bookofsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.geobanner.bookofsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.geobanner.bookofsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.geobanner.bookofsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.geobanner.bookofsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.youporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.youporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Porn Videos, Sex, XXX, Free Porn - YouPorn [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.youporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.youporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.youporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.goldporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.goldporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.goldporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Porn Tube, Porn Tube Videos, Free Porn Clips [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.dizzyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
new-porn-video.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
new-porn-video.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Gold Porn Tube [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Gold Porn Tube [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adserver2.exgfnetwork.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
maniacporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
maniacporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
maniacporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
maniacporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
maniacporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
maniacporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
toyporntube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
FPCTraffic - turning traffic into cash [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
hdpornotubes.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hdpornotubes.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hdpornotubes.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.trafficholder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
go.trafficshop.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
go.trafficshop.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.buyalltraffic.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ads.ventivmedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.girlsteachsex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn Videos - XXX, Porn Tube [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornbanana.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornbanana.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.pornbanana.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.freeporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.freeporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.freeporn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.gridlockparadise.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.track.gridlockparadise.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.track.gridlockparadise.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.track.gridlockparadise.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ads.crakmedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ads.crakmedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ads.crakmedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ads.crakmedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Free Porn, Porn Tube, Free Porn Videos, Sex Movie, Porn - FreePorn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ads.trafficjunky.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.exoclick.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.effiliation.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
media.sensis.com.au [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.h2porn.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.alphaporno.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Hard Sex Tube - for every fan of hot porn videos and free porn [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adultfriendfinder.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.exoclick.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adserver.hardsextube.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adxpansion.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.mediamarkt.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter14.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter11.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter10.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.overture.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter11.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter3.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter7.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter8.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter15.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter2.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
banner.testberichte.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
banner.testberichte.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
banner.testberichte.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.verticaltechmedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.r1-ads.ace.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter6.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
track.adform.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adform.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hightraffic.hugoboss.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hightraffic.hugoboss.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.hightraffic.hugoboss.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.adition.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adx.chip.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
etracker Home - forget log-file analysis, this is real-time Web Analytics and online market research [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fr.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
fr.sitestat.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
Google [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.traffictrack.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.unitymedia.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tracking.quisma.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad3.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad1.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
UseNeXT | In vollem DSL-Speed aus dem Usenet downloaden! [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adserv.kwick.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
adserv.kwick.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sexlist.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter9.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter1.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter15.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter6.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
counter15.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.sextracker.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad4.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
ad2.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adviva.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zanox-affiliate.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.zanox.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.adfarm1.adition.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]
.clickfuse.com [ C:\USERS\GOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SHMZZ143.DEFAULT\COOKIES.SQLITE ]

cosinus 21.09.2011 09:47
Nur Cookies, aber davon viele :crazy:
Was ist mit ESET?

dergoe 21.09.2011 09:58
hallo arne,
das dachte ich mir...
habe die cookies im firefox gelöscht und lasse gerade noch einmal superantispyware laufen. das dauert recht lange.
werde dann ESET laufen lassen und beide files posten.

dergoe 21.09.2011 15:34
hallo arne, hier die beiden logfiles von superantispyware und eset:

cosinus 21.09.2011 15:45
Nur Fehlalarme bei ESET.
Rechner wieder im Lot?

dergoe 21.09.2011 16:07
vermag ich nicht wirklich zu beurteilen...
glaub schon...

heißt das, mein rechner ist wieder sauber?

wie kann ich die cookies restlos löschen?
kann ich die quarantänen löschen?

was mach ich mit den programmen superantispyware und malwarebytes?
die jetzt rechts unten in der taskleiste...

und: würdest du eine cccleaner und eine fragmentierung empfehlen?

cosinus 21.09.2011 19:47
Zitat:
wie kann ich die cookies restlos löschen?
kann ich die quarantänen löschen?
Die Cookies sind harmlos, müssen nicht weg. Wenn du die aber loswerden willst, kann dir dabei der CCleaner helfen. Und die Schädlinge sind in der Q bestens aufgehoben.


Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. CF kann über Start, Ausführen mit combofix /uninstall entfernt werden. Melde dich falls es da Fehlermeldungen zu gibt.
Malwarebytes zu behalten ist kein Fehler. Kannst ja 1x im Monat damit scannen, aber immer vorher ans Update denken.

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers, hier der direkte Downloadlink:

Mozilla und andere Browser => http://filepony.de/?q=Flash+Player
Internet Explorer => http://fpdownload.adobe.com/get/flas..._player_ax.exe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.

dergoe 22.09.2011 07:40
ganz vielen dank darne!
großartig, wie du mir geholfen hast!
viele grüße
goe

EDIT:
"combofix/uninstall" konnte nicht gefunden werden. Stellen Sie sicher, dass Sie den Namen
richtig eingegeben haben und wiederholen Sie den Vorgang.

ist das nicht eine .exe, die ich einfach löschen kann?

cosinus 22.09.2011 10:47
Zitat:
"combofix/uninstall" konnte nicht gefunden werden. Stellen Sie sicher, dass Sie den Namen
Falsch: "combofix/uninstall"

Richtig: "combofix /uninstall"

dergoe 22.09.2011 11:05
:)

wird trotzdem nicht gefunden!

cosinus 22.09.2011 11:52
Dann lass es sein, CF stört nicht weiter.


Alle Zeitangaben in WEZ +1. Es ist jetzt 20:54 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19