[code] HitmanPro 3.7.15.281 www.hitmanpro.com Computer name . . . . : PCTOMMY Windows . . . . . . . : 6.0.2.6002.X86/2 User name . . . . . . : pcTOMMY\Tommy UAC . . . . . . . . . : Disabled License . . . . . . . : Trial (Expired) Scan date . . . . . . : 2017-01-25 22:48:47 Scan mode . . . . . . : Normal Scan duration . . . . : 18m 18s Disk access mode . . : Direct disk access (SRB) Cloud . . . . . . . . : Internet Reboot . . . . . . . : No Threats . . . . . . . : 2 Traces . . . . . . . : 286 Objects scanned . . . : 2.352.575 Files scanned . . . . : 54.931 Remnants scanned . . : 388.458 files / 1.909.186 keys Malware _____________________________________________________________________ C:\Users\Tommy\Desktop\MOJE DOKUMENTY\FastActivate-28-07-2013\FastActivate.exe Size . . . . . . . : 1.662.976 bytes Age . . . . . . . : 1273.1 days (2013-08-01 21:12:29) Entropy . . . . . : 8.0 SHA-256 . . . . . : 8561B2DF0B95656D23422BDAD658EE3D070FD5E4B76B10025DB60F814B51708E Needs elevation . : Yes Product . . . . . : FastActivate Publisher . . . . : TT Description . . . : Activate Maps,Voices, Speedcams & Fuel prices. Patch Navcore & HOME. Check current meta code. Update QuickGPSfix Version . . . . . : 28,07,2013,0 Copyright . . . . : TT LanguageID . . . . : 1033 > HitmanPro . . . . : Malware Fuzzy . . . . . . : 111.0 Suspicious files ____________________________________________________________ C:\Users\Tommy\Desktop\frst\FRST.exe Size . . . . . . . : 1.761.280 bytes Age . . . . . . . : 15.4 days (2017-01-10 13:18:55) Entropy . . . . . : 7.6 SHA-256 . . . . . : 8F8C091D63FE317EC9390E1D7C842904CE73E534A7E291EBD43F48237B236853 Needs elevation . : Yes Fuzzy . . . . . . : 23.0 Program has no publisher information but prompts the user for permission elevation. Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs. Authors name is missing in version info. This is not common to most programs. Version control is missing. This file is probably created by an individual. This is not typical for most programs. Time indicates that the file appeared recently on this computer. References HKU\S-1-5-21-365035492-1695249228-1794944439-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\Users\Tommy\Desktop\frst\FRST.exe C:\Users\Tommy\Downloads\FRST.exe Size . . . . . . . : 1.762.816 bytes Age . . . . . . . : -0.0 days (2017-01-25 22:50:55) Entropy . . . . . : 7.6 SHA-256 . . . . . : FD2432E285DA8DC501C594E0302267519B784461E3FBE9C6EF92AC53978FC9CA Needs elevation . : Yes Fuzzy . . . . . . : 26.0 Program has no publisher information but prompts the user for permission elevation. Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs. Time indicates that the file appeared recently on this computer. Authors name is missing in version info. This is not common to most programs. Version control is missing. This file is probably created by an individual. This is not typical for most programs. Forensic Cluster -27.5s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\E35610D545C1AD6360312275F44A212EC38BA0B5 -16.0s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\BFC09A6C0275B0E9515423DC11473A4463D03C51 -15.5s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\FA7DD15BD8C8FEC72AD5BCDA0B51F906CCCA70F1 -15.0s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\E35ED834990FB75707D3A057816C00F76C9FDCA8 -13.5s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\132958150C600829079984B9411D4DD8BD0F6CA3 -13.4s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\58146B6133B712B9F09AF4B85F72C3E0EA989519 -12.7s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\9246903FAC649B16215A2B29C4F4520683EC9F7C -12.7s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\E022CE1CED12F1CE2EF37513BB1F8DE2834AF94E -9.9s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\F0AFB675F55CEBA7BDEC159176AD9570055B371C -9.8s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\C396660E9B39F42F32F3E64E82759382A95A3837 -9.7s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\1F078DA87A352A6AA03850CCD964AC2B48A1651B -9.7s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\1329D2D641F6B9D46C46A92140215F47001F9F2A -9.7s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\3C811133AB8834953E9EB3B95E2151407C5CB736 -9.4s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\CD94812CB7DCB13B6A7CCE7E776346FFCF2A19DF -6.0s C:\Users\Tommy\Downloads\FRST.exe -1.1s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\30A88F8E234E7107D8BDCD09F3E3E605FE2AA066 Malware remnants ____________________________________________________________ HKU\S-1-5-21-365035492-1695249228-1794944439-501\Software\Microsoft\Internet Explorer\DOMStorage\superfish.com\ (SuperFish) Potential Unwanted Programs _________________________________________________ HKLM\SOFTWARE\Classes\Interface\{94952EC4-DB66-3F32-BE4C-F0BB875EA98E}\ (Iminent) HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{27F69C85-64E1-43CE-98B5-3C9F22FB408E}\ (Bandoo) HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B543EF05-9758-464E-9F37-4C28525B4A4C}\ (Bandoo) HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{BB76A90B-2B4C-4378-8506-9A2B6E16943C}\ (Bandoo) HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{C3AB94A4-BFD0-4BBA-A331-DE504F07D2DB}\ (Bandoo) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\18C9E3869A16248439FE3FF9EB02207A\ (Iminent) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D8011310B2622942868A458964FFDC5\ (Iminent) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C63F7979DCC2154CB9591969A5CB89D\ (Iminent) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DD31E6C1A73B334383DF186676F4D20\ (Iminent) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB3204F747B20694B8D49EF92D8DC94B\ (Iminent) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C81E33A400B6F814E90C7A3354E2A3A5\ (Iminent) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EDBF68C5F16790341B7C6FD7C7F8E4FC\ (Iminent) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFA531D0F3A71504DA7AC6A11CE33739\ (Iminent) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{58124A0B-DC32-4180-9BFF-E0E21AE34026} (Iminent) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (Iminent) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (Iminent) HKLM\SYSTEM\ControlSet002\Services\IBUpdaterService\ (Sweetpacks) HKLM\SYSTEM\ControlSet003\Services\Eventlog\Application\Wpm\ (FTDownloader) HKLM\SYSTEM\ControlSet004\Services\Eventlog\Application\Wpm\ (FTDownloader) HKLM\SYSTEM\ControlSet005\Services\Eventlog\Application\Wpm\ (FTDownloader) HKLM\SYSTEM\ControlSet006\Services\Eventlog\Application\Wpm\ (FTDownloader) HKLM\SYSTEM\ControlSet007\Services\Eventlog\Application\Wpm\ (FTDownloader) HKLM\SYSTEM\ControlSet008\Services\IBUpdaterService\ (Sweetpacks) HKLM\SYSTEM\ControlSet009\Services\Eventlog\Application\Wpm\ (FTDownloader) HKU\S-1-5-21-365035492-1695249228-1794944439-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} (Claro) HKU\S-1-5-21-365035492-1695249228-1794944439-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectNewTabPageShow (22Find) HKU\S-1-5-21-365035492-1695249228-1794944439-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectShowTabsWelcome (22Find) HKU\S-1-5-21-365035492-1695249228-1794944439-1006\Software\Microsoft\Windows\CurrentVersion\Uninstall\Softonic for Windows\ (Softonic) HKU\S-1-5-21-365035492-1695249228-1794944439-1006\Software\Softonic\ (Softonic) HKU\S-1-5-21-365035492-1695249228-1794944439-501\Software\Conduit\ (Conduit) HKU\S-1-5-21-365035492-1695249228-1794944439-501\Software\IM\ (Sweetpacks) HKU\S-1-5-21-365035492-1695249228-1794944439-501\Software\ImInstaller\ (Sweetpacks) HKU\S-1-5-21-365035492-1695249228-1794944439-501\Software\Microsoft\Internet Explorer\DOMStorage\ask.com\ (MindSpark) HKU\S-1-5-21-365035492-1695249228-1794944439-501\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ (Incredibar) HKU\S-1-5-21-365035492-1695249228-1794944439-501\Software\SweetIM\ (Sweetpacks) HKU\S-1-5-21-365035492-1695249228-1794944439-501\Software\WNLT\ (Sweetpacks) Cookies _____________________________________________________________________ C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:2o7.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:abmr.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:acuityplatform.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:acxiom-online.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.360yield.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.adocean.pl C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.gameflow.pl C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.jmg.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.yieldmanager.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad3.adfarm1.adition.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:addthis.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adfarm1.adition.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adlegend.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adnxs.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.businessclick.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.mail3x.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.ngo.pl C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.o2.pl C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.pubmatic.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.trafficjunky.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.undertone.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.yahoo.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adsby.bidtheatre.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adscale.de C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adsrvr.org C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtech.de C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtechus.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adultadworld.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertisegame.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertising.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:agkn.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:amgdgt.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:apmebf.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:atdmt.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:audienceiq.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:bidswitch.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:bluekai.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:burstnet.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:casalemedia.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:chango.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:connexity.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:contextweb.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:crwdcntrl.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ctnsnet.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:cxense.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:d.adroll.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:demdex.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:dotomi.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:dpm.demdex.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ero-advertising.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:espressoporno.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:everesttech.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:fastclick.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:gwallet.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:hornytube.xxx C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ib.mookie1.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ibeu2.mookie1.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ibillboard.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ih.adscale.de C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:imrworldwide.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:invitemedia.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:it.pornoid.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:korrelate.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:lijit.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:lupoporno.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:mathtag.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:mediaplex.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:metrigo.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:mookie1.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:nexac.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:openx.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:partypoker.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:pixel.rubiconproject.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:pornoid.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:pubmatic.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:rfihub.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:rlcdn.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:rtbidder.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ru4.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:rubiconproject.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:rvty.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:scorecardresearch.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:server.cpmstar.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:serving-sys.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:sexad.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:simpli.fi C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:sitescout.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:smartadserver.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:stat.4u.pl C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:statcounter.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:statse.webtrendslive.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:tap.rubiconproject.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:tapad.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:tidaltv.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:tradedoubler.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:triggit.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:tubemogul.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:turn.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:visualdna.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:w55c.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:wtp101.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.googleadservices.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.hornytube.xxx C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:xxxfilm.it C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:yieldlab.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:227214290.log.optimizely.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:247realmedia.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:abmr.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:acuityplatform.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:acxiom-online.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.360yield.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.mlnadvertising.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.yieldpartners.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.zanox.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adadvisor.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adaptv.advertising.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adbrn.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:addthis.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adfarm1.adition.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adform.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adformdsp.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adgrx.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adhigh.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adnxs.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.adk2.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.adsrvmedia.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.businessclick.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.creative-serving.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.o2.pl C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.p161.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.snipershide.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.stickyadstv.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.williamhill.it C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.yahoo.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adsby.bidtheatre.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adscale.de C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adscience.nl C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adsrvr.org C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtech.de C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtechus.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertine.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertising.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:agkn.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:amgdgt.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:angsrvr.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:at.atwola.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:atdmt.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:atemda.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:basebanner.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:bidswitch.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:bs.serving-sys.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:burstnet.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:c.appier.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:c1.adform.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:casalemedia.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:chango.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:connexity.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:contextweb.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:crwdcntrl.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ctnsnet.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:d.adroll.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:demdex.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:dmp.adform.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:dotomi.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:dpclk.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:dpm.demdex.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:erne.co C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:everesttech.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:eyereturn.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:eyeviewads.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:fastclick.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:flashtalking.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:fr.sitestat.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:gwallet.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ib.mookie1.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ibeu2.mookie1.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ibillboard.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ih.adscale.de C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:imrworldwide.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:kau.li C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:legolas-media.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:lijit.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:liverail.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:mathtag.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:mediaplex.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:metrigo.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:mookie1.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:mxptint.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:nexac.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:openx.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:outbrain.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:owneriq.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:p.univide.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:pixel.rubiconproject.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:pool.admedo.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:pswec.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:pubmatic.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:questionmarket.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:relestar.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:revsci.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:rfihub.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:rlcdn.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:rs.gwallet.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:rtbidder.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ru4.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:rubiconproject.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:rvty.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:scorecardresearch.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:server.adformdsp.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:server.cpmstar.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:servesharp.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:serving-sys.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:simpli.fi C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:sitescout.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:smartadserver.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:stat.4u.pl C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:statcounter.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:tap-t.rubiconproject.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:tap.rubiconproject.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:tap2-cdn.rubiconproject.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:tidaltv.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.adform.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:tradedoubler.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:triggit.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:tubemogul.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:turn.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:visualdna.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:vizu.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:w55c.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:weborama.fr C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:wtp101.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:yieldlab.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:zedo.com C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\01Z3VBXE.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\8EBDI3FJ.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\B5YWANWG.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\F3IJZR2Y.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\KRGY1IC6.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\MM03FH9G.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\OKSC88KV.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\Q1HKKX48.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\S8P0YIHG.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\U2E32QDE.txt [/code]