[code] HitmanPro 3.7.15.281 www.hitmanpro.com Computer name . . . . : PCTOMMY Windows . . . . . . . : 6.0.2.6002.X86/2 User name . . . . . . : pcTOMMY\Tommy UAC . . . . . . . . . : Disabled License . . . . . . . : Trial (Expired) Scan date . . . . . . : 2017-01-26 21:53:06 Scan mode . . . . . . : Normal Scan duration . . . . : 14m 37s Disk access mode . . : Direct disk access (SRB) Cloud . . . . . . . . : Internet Reboot . . . . . . . : No Threats . . . . . . . : 2 Traces . . . . . . . : 270 Objects scanned . . . : 2.361.623 Files scanned . . . . : 56.878 Remnants scanned . . : 395.029 files / 1.909.716 keys Malware _____________________________________________________________________ C:\Users\Tommy\Desktop\MOJE DOKUMENTY\FastActivate-28-07-2013\FastActivate.exe Size . . . . . . . : 1.662.976 bytes Age . . . . . . . : 1274.0 days (2013-08-01 21:12:29) Entropy . . . . . : 8.0 SHA-256 . . . . . : 8561B2DF0B95656D23422BDAD658EE3D070FD5E4B76B10025DB60F814B51708E Needs elevation . : Yes Product . . . . . : FastActivate Publisher . . . . : TT Description . . . : Activate Maps,Voices, Speedcams & Fuel prices. Patch Navcore & HOME. Check current meta code. Update QuickGPSfix Version . . . . . : 28,07,2013,0 Copyright . . . . : TT LanguageID . . . . : 1033 > HitmanPro . . . . : Malware Fuzzy . . . . . . : 111.0 C:\Users\Tommy\Downloads\Spybot-Search-Destroy-12546-dp.exe Size . . . . . . . : 1.280.960 bytes Age . . . . . . . : 1.0 days (2017-01-25 20:56:07) Entropy . . . . . : 8.0 SHA-256 . . . . . : E70B78D607C10433BEE822454456FC264253AF3750074F1D181A21E9610427EC Product . . . . . : Pod Publisher . . . . : Rusahebac Description . . . : Pod Setup Version . . . . . : 2.2.1.1 RSA Key Size . . . : 2048 LanguageID . . . . : 0 Authenticode . . . : Valid > Kaspersky . . . . : not-a-virus:AdWare.Win32.DealPly.antrb Fuzzy . . . . . . : 103.0 References HKU\S-1-5-21-365035492-1695249228-1794944439-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\Users\Tommy\Downloads\Spybot-Search-Destroy-12546-dp.exe Suspicious files ____________________________________________________________ C:\Users\Tommy\Desktop\frst\FRST.exe Size . . . . . . . : 1.761.280 bytes Age . . . . . . . : 16.4 days (2017-01-10 13:18:55) Entropy . . . . . : 7.6 SHA-256 . . . . . : 8F8C091D63FE317EC9390E1D7C842904CE73E534A7E291EBD43F48237B236853 Needs elevation . : Yes Fuzzy . . . . . . : 23.0 Program has no publisher information but prompts the user for permission elevation. Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs. Authors name is missing in version info. This is not common to most programs. Version control is missing. This file is probably created by an individual. This is not typical for most programs. Time indicates that the file appeared recently on this computer. References HKU\S-1-5-21-365035492-1695249228-1794944439-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\Users\Tommy\Desktop\frst\FRST.exe C:\Users\Tommy\Downloads\FRST.exe Size . . . . . . . : 1.762.816 bytes Age . . . . . . . : 1.0 days (2017-01-25 22:50:49) Entropy . . . . . : 7.6 SHA-256 . . . . . : FD2432E285DA8DC501C594E0302267519B784461E3FBE9C6EF92AC53978FC9CA Needs elevation . : Yes Fuzzy . . . . . . : 24.0 Program has no publisher information but prompts the user for permission elevation. Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs. Authors name is missing in version info. This is not common to most programs. Version control is missing. This file is probably created by an individual. This is not typical for most programs. Time indicates that the file appeared recently on this computer. References HKU\S-1-5-21-365035492-1695249228-1794944439-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\Users\Tommy\Downloads\FRST.exe Forensic Cluster -21.4s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\E35610D545C1AD6360312275F44A212EC38BA0B5 -10.0s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\BFC09A6C0275B0E9515423DC11473A4463D03C51 -9.5s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\FA7DD15BD8C8FEC72AD5BCDA0B51F906CCCA70F1 -9.0s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\E35ED834990FB75707D3A057816C00F76C9FDCA8 -7.5s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\132958150C600829079984B9411D4DD8BD0F6CA3 -7.4s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\58146B6133B712B9F09AF4B85F72C3E0EA989519 -6.7s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\9246903FAC649B16215A2B29C4F4520683EC9F7C -6.7s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\E022CE1CED12F1CE2EF37513BB1F8DE2834AF94E -3.8s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\F0AFB675F55CEBA7BDEC159176AD9570055B371C -3.8s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\C396660E9B39F42F32F3E64E82759382A95A3837 -3.7s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\1F078DA87A352A6AA03850CCD964AC2B48A1651B -3.7s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\1329D2D641F6B9D46C46A92140215F47001F9F2A -3.7s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\3C811133AB8834953E9EB3B95E2151407C5CB736 -3.4s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\CD94812CB7DCB13B6A7CCE7E776346FFCF2A19DF 0.0s C:\Users\Tommy\Downloads\FRST.exe 4.9s C:\Users\Tommy\AppData\Local\Mozilla\Firefox\Profiles\hntn5dbs.default-1484073520935\cache2\entries\30A88F8E234E7107D8BDCD09F3E3E605FE2AA066 Potential Unwanted Programs _________________________________________________ HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{27F69C85-64E1-43CE-98B5-3C9F22FB408E}\ (Bandoo) HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B543EF05-9758-464E-9F37-4C28525B4A4C}\ (Bandoo) HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{BB76A90B-2B4C-4378-8506-9A2B6E16943C}\ (Bandoo) HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{C3AB94A4-BFD0-4BBA-A331-DE504F07D2DB}\ (Bandoo) HKLM\SYSTEM\ControlSet002\Services\IBUpdaterService\ (Sweetpacks) HKLM\SYSTEM\ControlSet003\Services\Eventlog\Application\Wpm\ (FTDownloader) HKLM\SYSTEM\ControlSet004\Services\Eventlog\Application\Wpm\ (FTDownloader) HKLM\SYSTEM\ControlSet005\Services\Eventlog\Application\Wpm\ (FTDownloader) HKLM\SYSTEM\ControlSet006\Services\Eventlog\Application\Wpm\ (FTDownloader) HKLM\SYSTEM\ControlSet007\Services\Eventlog\Application\Wpm\ (FTDownloader) HKLM\SYSTEM\ControlSet008\Services\IBUpdaterService\ (Sweetpacks) HKLM\SYSTEM\ControlSet009\Services\Eventlog\Application\Wpm\ (FTDownloader) HKU\S-1-5-21-365035492-1695249228-1794944439-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} (Claro) HKU\S-1-5-21-365035492-1695249228-1794944439-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectNewTabPageShow (22Find) HKU\S-1-5-21-365035492-1695249228-1794944439-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectShowTabsWelcome (22Find) Cookies _____________________________________________________________________ C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:2o7.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:abmr.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:acuityplatform.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:acxiom-online.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.360yield.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.adocean.pl C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.gameflow.pl C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.jmg.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.yieldmanager.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad3.adfarm1.adition.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:addthis.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adfarm1.adition.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adlegend.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adnxs.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.businessclick.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.mail3x.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.ngo.pl C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.o2.pl C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.pubmatic.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.trafficjunky.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.undertone.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.yahoo.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adsby.bidtheatre.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adscale.de C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adsrvr.org C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtech.de C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtechus.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:adultadworld.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertisegame.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertising.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:agkn.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:amgdgt.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:apmebf.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:atdmt.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:audienceiq.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:bidswitch.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:bluekai.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:burstnet.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:casalemedia.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:chango.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:connexity.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:contextweb.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:crwdcntrl.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ctnsnet.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:cxense.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:d.adroll.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:demdex.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:dotomi.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:dpm.demdex.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ero-advertising.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:espressoporno.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:everesttech.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:fastclick.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:gwallet.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:hornytube.xxx C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ib.mookie1.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ibeu2.mookie1.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ibillboard.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ih.adscale.de C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:imrworldwide.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:invitemedia.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:it.pornoid.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:korrelate.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:lijit.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:lupoporno.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:mathtag.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:mediaplex.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:metrigo.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:mookie1.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:nexac.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:openx.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:partypoker.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:pixel.rubiconproject.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:pornoid.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:pubmatic.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:rfihub.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:rlcdn.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:rtbidder.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:ru4.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:rubiconproject.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:rvty.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:scorecardresearch.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:server.cpmstar.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:serving-sys.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:sexad.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:simpli.fi C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:sitescout.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:smartadserver.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:stat.4u.pl C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:statcounter.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:statse.webtrendslive.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:tap.rubiconproject.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:tapad.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:tidaltv.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:tradedoubler.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:triggit.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:tubemogul.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:turn.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:visualdna.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:w55c.net C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:wtp101.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.googleadservices.com C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.hornytube.xxx C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:xxxfilm.it C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Cookies:yieldlab.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:227214290.log.optimizely.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:247realmedia.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:abmr.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:acuityplatform.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:acxiom-online.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.360yield.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.mlnadvertising.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.yieldpartners.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.zanox.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adadvisor.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adaptv.advertising.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adbrn.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:addthis.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adfarm1.adition.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adform.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adformdsp.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adgrx.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adhigh.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adnxs.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.adk2.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.adsrvmedia.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.businessclick.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.creative-serving.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.o2.pl C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.p161.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.snipershide.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.stickyadstv.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.williamhill.it C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.yahoo.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adsby.bidtheatre.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adscale.de C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adscience.nl C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adsrvr.org C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtech.de C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtechus.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertine.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertising.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:agkn.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:amgdgt.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:angsrvr.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:at.atwola.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:atdmt.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:atemda.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:basebanner.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:bidswitch.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:bs.serving-sys.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:burstnet.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:c.appier.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:c1.adform.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:casalemedia.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:chango.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:connexity.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:contextweb.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:crwdcntrl.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ctnsnet.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:d.adroll.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:demdex.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:dmp.adform.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:dotomi.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:dpclk.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:dpm.demdex.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:erne.co C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:everesttech.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:eyereturn.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:eyeviewads.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:fastclick.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:flashtalking.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:fr.sitestat.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:gwallet.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ib.mookie1.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ibeu2.mookie1.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ibillboard.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ih.adscale.de C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:imrworldwide.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:kau.li C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:legolas-media.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:lijit.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:liverail.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:mathtag.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:mediaplex.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:metrigo.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:mookie1.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:mxptint.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:nexac.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:openx.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:outbrain.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:owneriq.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:p.univide.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:pixel.rubiconproject.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:pool.admedo.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:pswec.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:pubmatic.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:questionmarket.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:relestar.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:revsci.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:rfihub.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:rlcdn.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:rs.gwallet.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:rtbidder.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:ru4.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:rubiconproject.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:rvty.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:scorecardresearch.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:server.adformdsp.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:server.cpmstar.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:servesharp.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:serving-sys.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:simpli.fi C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:sitescout.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:smartadserver.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:stat.4u.pl C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:statcounter.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:tap-t.rubiconproject.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:tap.rubiconproject.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:tap2-cdn.rubiconproject.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:tidaltv.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.adform.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:tradedoubler.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:triggit.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:tubemogul.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:turn.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:visualdna.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:vizu.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:w55c.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:weborama.fr C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:wtp101.com C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:yieldlab.net C:\Users\guest_\AppData\Local\Google\Chrome\User Data\Default\Cookies:zedo.com C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\01Z3VBXE.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\1D16RK9N.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\30MX0YX3.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\8EBDI3FJ.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\AKG21RKN.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\GSRUB4LF.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\NK0DTNPL.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\OKSC88KV.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\Q1HKKX48.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\R2O2233I.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\R9NDMSP5.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\U2E32QDE.txt C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Cookies\WDY9RZ4C.txt [/code]